SQL Injection Attacks Prevention System Technology: Review
Fairoz Q. Kareem, Siddeeq Y. Ameen, Azar Abid Salih, Dindar Mikaeel Ahmed, Shakir Fattah Kak, Hajar Maseeh Yasin, Ibrahim Mahmood Ibrahim, Awder Mohammed Ahmed, Zryan Najat Rashid, Naaman Omar
Asian Journal of Research in Computer Science · pp. 13–32 · Published 6 Jul 2021
10.9734/ajrcos/2021/v10i330242Abstract
The vulnerabilities in most web applications enable hackers to gain access to confidential and private information. Structured query injection poses a significant threat to web applications and is one of the most common and widely used information theft mechanisms. Where hackers benefit from errors in the design of systems or existing gaps by not filtering the user's input for some special characters and symbols contained within the structural query sentences or the quality of the information is not checked, whether it is text or numerical, which causes unpredictability of the outcome of its implementation. In this paper, we review PHP techniques and other techniques for protecting SQL from the injection, methods for detecting SQL attacks, types of SQL injection, causes of SQL injection via getting and Post, and prevention technology for SQL vulnerabilities.
References (81)
- 1 A Classification of SQL-Injection Attacks and Countermeasures
- 2 IoT and Cloud Computing Issues, Challenges and Opportunities: A Review [DOI]
- 3 Cloud Computing Virtualization of Resources Allocation for Distributed Systems [DOI]
- 4 FPGA Implementations for Data Encryption and Decryption via Concurrent and Parallel Computation: A Review [DOI]
- 5 Detection of SQL injection based on artificial neural network [DOI]
- 6 Distributed Cloud Computing and Distributed Parallel Computing: A Review [DOI]
- 7 A State of Art: Survey for Concurrent Computation and Clustering of Parallel Computing for Distributed Systems [DOI]
- 8 Design and Analysis of Proposed Remote Controlling Distributed Parallel Computing System Over the Cloud [DOI]
- 9 A State of Art for Smart Gateways Issues and Modification [DOI]
- 10 A survey on SQL injection: Vulnerabilities, attacks, and prevention techniques [DOI]
- 11 Comparing the Effectiveness of Penetration Testing and Static Code Analysis on the Detection of SQL Injection Vulnerabilities in Web Services [DOI]
- 12 Predicting common web application vulnerabilities from input validation and sanitization code patterns [DOI]
- 13 DIAVA: A Traffic-Based Framework for Detection of SQL Injection Attacks and Vulnerability Analysis of Leaked Data [DOI]
- 14 SQL Injection Attack classification through the feature extraction of SQL query strings using a Gap-Weighted String Subsequence Kernel [DOI]
- 15 Use of Query tokenization to detect and prevent SQL injection attacks [DOI]
- 16 Research of SQL injection attack and prevention technology [DOI]
- 17 Arduino Based Automatic Irrigation System: Monitoring and SMS Controlling [DOI]
- 18 ART4SQLi: The ART of SQL Injection Vulnerability Discovery [DOI]
- 19 Real Time Video Streaming From Multi-Source Using Client-Server for Video Distribution [DOI]
- 20 Detecting SQL Injection Attacks Using Grammar Pattern Recognition and Access Behavior Mining [DOI]
- 21 Automated Protection of PHP Applications Against SQL-injection Attacks [DOI]
- 22 Generation of Sql-injection Free Secure Algorithm to Detect and Prevent Sql-Injection Attacks [DOI]
- 23 Vulnerability Analysis of Content Management Systems to SQL Injection Using SQLMAP [DOI]
- 24 A Survey on the Detection of SQL Injection Attacks and Their Countermeasures [DOI]
- 25 The impact of SQL injection attacks on the security of databases
- 26 Embedded Real-Time Video Surveillance System based on Multi-Sensor and Visual Tracking [DOI]
- 27 Two Levels Alert Verification Technique for Smart Oil Pipeline Surveillance System (SOPSS) [DOI]
- 28 Dynamic Switching of Scheduling Algorithm for Uplink LTE System [DOI]
- 29 Detection and Prevention Cyber-Attacks for Smart Buildings via Private Cloud Environment [DOI]
- 30 An Energy-Efficient MIMO-Based 4G LTE-A Adaptive Modulation and Coding Scheme for High Mobility Scenarios [DOI]
- 31 System architecture for SQL injection and insider misuse detection system for DBMS [DOI]
- 32 Network Forensics for Detecting SQL Injection Attacks Using NIST Method
- 33 Web vulnerabilities: identifying patterns and remedies [DOI]
- 34 Tracking and Controlling High-Speed Vehicles Via CQI in LTE-A Systems [DOI]
- 35 Comparative Performanceof Subcarrier Schedulers in Uplink LTE-A under High Users’ Mobility [DOI]
- 36 A Comparative Study for New Aspects to Quantum Key Distribution
- 37 Improved hybrid variable and fixed step size least mean square adaptive filter algorithm with application to time varying system identification [DOI]
- 38 Model Based Hybrid Approach to Prevent SQL Injection Attacks in PHP [DOI]
- 39 Estimating Software Vulnerabilities: A Case Study Based on the Misclassification of Bugs in MySQL Server [DOI]
- 40 Real Time Implementation of Stegofirewall System [DOI]
- 41 Tracking High-Speed Users Using SNR-CQI Mapping in LTE-A Networks [DOI]
- 42 MySQL Database and PHPMyAdmin Installation [DOI]
- 43 SQL Injection Attack Principles and Preventive Techniques for PHP Site [DOI]
- 44 Research on SQL injection attacks and guard method in web project
- 45 Computer access control policy choices [DOI]
- 46 Neutralizing SQL Injection Attack on Web Application Using Server Side Code Modification [DOI]
- 47 International Journal of Scientific & Engineering Research
- 48 International Journal of Computing and Network Technology [DOI]
- 49 Multimodal Emotion Recognition using Deep Learning [DOI]
- 50 State of Art for Semantic Analysis of Natural Language Processing [DOI]
- 51 Comprehensive Survey of Big Data Mining Approaches in Cloud Systems [DOI]
- 52 Energy Management for Internet of Things via Distributed Systems [DOI]
- 53 Task Scheduling Algorithms in Cloud Computing: A Review [DOI]
- 54 Attack and Anomaly Detection in IoT Networks using Machine Learning Techniques: A Review [DOI]
- 55 A Study of Moving from Cloud Computing to Fog Computing [DOI]
- 56 IoT and ICT based Smart Water Management, Monitoring and Controlling System: A Review [DOI]
- 57 Comparison of Software Defined Networking with Traditional Networking [DOI]
- 58 State of Art Survey for IoT Effects on Smart City Technology: Challenges, Opportunities, and Solutions [DOI]
- 59 A Survey of Optical Fiber Communications: Challenges and Processing Time Influences [DOI]
- 60 A Survey of Data Mining Implementation in Smart City Applications [DOI]
- 61 A Comprehensive Survey of 5G mm-Wave Technology Design Challenges [DOI]
- 62 Comprehensive Survey for Cloud Computing Based Nature-Inspired Algorithms Optimization Scheduling [DOI]
- 63 A State of Art Survey for Intelligent Energy Monitoring Systems [DOI]
- 64 Clustering Documents based on Semantic Similarity using HAC and K-Mean Algorithms [DOI]
- 65 Efficiency of Semantic Web Implementation on Cloud Computing: A Review [DOI]
- 66 Efficiency of Malware Detection in Android System: A Survey [DOI]
- 67 A Comprehensive Study of Kernel (Issues and Concepts) in Different Operating Systems [DOI]
- 68 Neural Networks Architectures Design, and Applications: A Review [DOI]
- 69 Deep Learning Approaches for Intrusion Detection [DOI]
- 70 A Review of Security Awareness Approaches With Special Emphasis on Gamification [DOI]
- 71 Review on Natural Language Processing Based on Different Techniques [DOI]
- 72 Web Server Performance Improvement Using Dynamic Load Balancing Techniques: A Review [DOI]
- 73 Effects of Parallel Processing Implementation on Balanced Load-Division Depending on Distributed Memory Systems [DOI]
- 74 A State of Art for Survey of Combined Iris and Fingerprint Recognition Systems [DOI]
- 75 Reliable Communications for Vehicular Networks [DOI]
- 76 Smart Android Graphical Password Strategy: A Review [DOI]
- 77 Paralinguistic Speech Processing: An Overview [DOI]
- 78 Encoding Query Based Lightweight Algorithm for Preventing SQL injection attack
- 79 International Journal of Innovation, Creativity and Change [DOI]
- 80 International Journal on Computer Science and Engineering [DOI]
- 81 International Journal of Computing and Digital Systems [DOI]
Cited by 62
Jamilah Alkhathami, Sabah M. Alzahrani
A. Fadlil, I. Riadi, M. A. Mu’min · International Journal of Engineering · 2024
Hilmi Abdullah, Subhi R. M. Zeebaree · 2021 2nd Information Technology To Enhance e-learning and Other Application (IT-ELA) · 2021
Eman Hosam, Hagar Hosny, Walaa Ashraf · 2021 8th International Conference on Soft Computing & Machine Intelligence (ISCMI) · 2021
Тетяна Вакалюк, Сергій Семеріков · 2023
Aastha Verma, Charu Shri · Vision: The Journal of Business Perspective · 2022
Aishwarya Bhalme, Akash Pawar, Aditi Borkar · 2022 IEEE Bombay Section Signature Conference (IBSSC) · 2022
Showing 47 of 62 known citations — external sources report more than can currently be individually listed.
Related research
- A Multi-channel Cloud Based Student Information Management System — shares topic coverage
- The Development and Deployment of an Online Exam System: A Web Application — shares topic coverage
- A System for Machine Translation from English to Ebira using the Rule-based Approach — shares topic coverage
Article metrics
Real usage data collected on this platform.
95
Page views
0
PDF downloads
15
Outbound clicks
62
Citations
Views over time
Views by country
Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".
Traffic sources
Referring site, by host.
Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.