An Analysis on Blocking of SQL Injection Attacks by Comparing Static and Dynamic Queries

Abstract

Due to rapid expansion of internet, web applications now becomes a part of everyday life. This in turns increased the numbers of web applications incidents and exploit web application vulnerabilities are increasing. As the Web applications support static and dynamic queries to access the database Alarge number of these incidents are SQL Injection attacks which are a serious security threat to databases which contain sensitive information, the leakage of which cause a large amount of loss. SQL Injection Attacks occur when an intruder changes the query structure by inserting any malicious input. There are number of methods available to detect and prevent SQL Injection Attacks. But these are too complex to use. This paper discuses a very simple, effective and time saving technique to detect SQLIAs which uses combined static and dynamic analysis