Securing web applications from SQLIA using progressive detector
by N. Gunaseeli; D. Jeya Mala
International Journal of Information Systems and Change Management (IJISCM), Vol. 9, No. 1, 2017

Abstract: Web applications are distributed applications that are stored on a server and delivered to users over the internet. Many people enjoy its utilisation due its benefits such as global access, cost saving, faster delivery of products and opportunities to manage the business from anywhere in the world. The users of web applications expect that the web applications should be secure and reliable, while doing their online transactions. But, modern web applications face threats like cross-site scripting, cookie poisoning, buffer overflow etc. Among the attacks of web applications, SQLIA is one of the most significant of such threats. SQL injection attack is a type of injection attack (SQLIA), in which SQL commands are injected as data-plane input in order to affect the execution of predefined SQL commands. SQL injection is a code injection technique that exploits the security vulnerability occurring in the database layer of an application. It allows attackers to get unauthorised access to the back-end database consisting of confidential user information. The paper presents a novel approach and it prevents all types of SQLIAs with minimum time frame. The proposed system aims at preventing all types of SQLIA by quick identification of malicious query at run time. This novel approach has been framed with the progressive detector (PD) tool and carried out on real time web applications. The experimental results clearly show that the Progressive Detector prevents all kinds of SQLIAs with minimum time frames.

Online publication date: Sun, 03-Sep-2017

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Information Systems and Change Management (IJISCM):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com