A Potential Framework to Secure Web Application and Database against SQL Injection Attacks

Khaleel Ahmad; Jayant Shekhar

doi:10.37591/jowet.v3i1.661

Abstract

With the rise of the Internet, web applications have become one of the most important communication channels between various kinds of service providers and clients on the Internet. The use of web-based services (such as online banking, online shopping, web-based email etc.) has become a wide-spread routine in today’s economic and social life. SQL injection attacks are the dominating type of attack on web based applications. It is the act of passing abysmal SQL query into interactive web applications that employ in database services. The attackers can get the entire schema of the original database and can also corrupt it. This paper presents novel framework aimed at the detection of such vulnerabilities, and at the protection of web server and database server against SQL injection attacks. The proposed framework is identifying the SQL injection vulnerabilities on basis of SQL injection grammar.Keywords: SQLID framework, Filter, SSDM, HSDM, Parser, SQL query analyzer Cite this ArticleKhaleel Ahmad, Jayant Shekhar. A Potential Framework to Secure Web Application and Database against SQL Injection Attacks. Journal of Web Engineering & Technology. 2016; 3(1): 27–34p.