New Approach for Detecting SQL Injection Vulnerability in Web application

الموضوعات

علوم تطبيقية وتكنولوجية

الملخص

Web applications vulnerabilities allow attackers to perform malicious actions that rangefrom gaining unauthorised access to obtaining sensitive data. Improper input validation andsanitization are the common reason for most of them. SQL injection attack (SQLIA) is themore famous attack based on improper input validation and sanitization. To mitigate theproblem we propose a new approach in developing a reliable automatic black box testingscanner for detecting SQL injection vulnerability SQLIVD (SQL injection vulnerabilityDetector). Our SQLiV detection approach is based on rejection page and on structuralsimilarity algorithms to calculate the structural similarity between rejection page and itscorresponding injection page ; our proposed approach able to minimize the false positive andfalse negative detection rate. The proposed scanner proved the effectiveness of our approachcompared to the most popular web application scanners in the field.

روابط وملفات

التعريف والنوع

رقم الوثيقة

edbf4276-03f3-42f3-ae4a-4a09f59dcc39

رقم العقد

0

نوع الوسائط

Crawler

نوع المحتوى

الرسائل العلمية

صيغة المصدر

ماستر (LMD)

نوع الملف

pdf text

أسماء الملفات

2063936_1.pdf

بيانات النشر

ألقاب المؤلفين

[{"name_ar":" Younes Boudraa","title_ar":"اعداد","title_en":"Preparation"},{"name_ar":"Lalia Saoudi ","title_ar":"اشراف","title_en":"Supervision"}]

اللغة

English

المصدر والدورية

اسم المصدر

New Approach for Detecting SQL Injection Vulnerability in Web application

المحتوى والصفحات

عدد الصفحات

0

إشراف وإعداد

الإشراف

Lalia Saoudi

الإعداد

Younes Boudraa

الاقتباسات الببليوغرافية