中文
相关论文

相关论文: A Detailed Survey on Various Aspects of SQL Inject…

200 篇论文

With the changing demographics of globalization, the emergence and prevalence of web application have acquired a central and pivotal role in the domains of technology and advancements. It thus becomes imperative to probe deeply into the…

网络与互联网体系结构 · 计算机科学 2012-07-09 Neha Patwari , Parvati Bhurani

SQL injection (SQLi) remains a critical vulnerability in web applications, enabling attackers to manipulate databases through malicious inputs. Despite advancements in mitigation techniques, the evolving complexity of web applications and…

密码学与安全 · 计算机科学 2025-06-24 Sagar Neupane

In this era of internet, E-Business and e-commerce applications are using Databases as their integral part. These Databases irrespective of the technology used are vulnerable to SQL injection attacks. These Attacks are considered very…

密码学与安全 · 计算机科学 2020-09-30 Israr Ali , Syed Hasan Adil , Mansoor Ebrahim

SQL Injection is one of the vulnerabilities in OWASPs Top Ten List for Web Based Application Exploitation.These types of attacks takes place on Dynamic Web applications as they interact with the databases for the various operations.Current…

密码学与安全 · 计算机科学 2016-05-11 Jai Puneet Singh

With the increasing importance of the internet in our day to day life, data security in web application has become very crucial. Ever increasing on line and real time transaction services have led to manifold rise in the problems associated…

数据库 · 计算机科学 2013-11-27 Vrushali Randhe , Archana Chougule , Debajyoti Mukhopadhyay

Web applications are becoming truly pervasive in all kinds of business models and organizations. Today, most critical systems such as those related to health care, banking, or even emergency response, are relying on these applications. They…

密码学与安全 · 计算机科学 2009-06-01 Joaquin Garcia-Alfaro , Guillermo Navarro-Arribas

Web applications are becoming an essential part of our everyday lives. Many of our activities are dependent on the functionality and security of these applications. As the scale of these applications grows, injection vulnerabilities such as…

软件工程 · 计算机科学 2010-09-21 Raymond Mui , Phyllis Frankl

SQL injection attacks, a class of injection flaw in which specially crafted input strings leads to illegal queries to databases, are one of the topmost threats to web applications. A Number of research prototypes and commercial products…

数据库 · 计算机科学 2015-04-28 Swapnil Kharche , Jagdish patil , Kanchan Gohad , Bharti Ambetkar

Large Language Models (LLMs) have found widespread applications in various domains, including web applications, where they facilitate human interaction via chatbots with natural language interfaces. Internally, aided by an LLM-integration…

密码学与安全 · 计算机科学 2025-01-29 Rodrigo Pedro , Daniel Castro , Paulo Carreira , Nuno Santos

The rapid proliferation of network applications has led to a significant increase in network attacks. According to the OWASP Top 10 Projects report released in 2021, injection attacks rank among the top three vulnerabilities in software…

软件工程 · 计算机科学 2025-09-16 Guan-Yan Yang , Farn Wang , You-Zong Gu , Ya-Wen Teng , Kuo-Hui Yeh , Ping-Hsueh Ho , Wei-Ling Wen

Security is unarguably the most serious concern for Web applications, to which SQL injection (SQLi) attack is one of the most devastating attacks. Automatically testing SQLi vulnerabilities is of ultimate importance, yet is unfortunately…

软件工程 · 计算机科学 2020-05-26 Muyang Liu , Ke Li , Tao Chen

We present a formal approach that exploits attacks related to SQL Injection (SQLi) searching for security flaws in a web application. We give a formal representation of web applications and databases, and show that our formalization…

密码学与安全 · 计算机科学 2016-08-11 Federico De Meo , Marco Rocchetto , Luca Viganò

Over the past three decades, computers have managed to make their way into a majority of households. Due to this enormous transition, the surge in the internets popularity was inevitable. Just like everything else, whatever has a pro also…

密码学与安全 · 计算机科学 2024-09-02 C. Amuthadevi , Sparsh Srivastava , Raghav Khatoria , Varun Sangwan

Existing SQL access control mechanisms are extremely limited. Attackers can leak information and escalate their privileges using advanced database features such as views, triggers, and integrity constraints. This is not merely a problem of…

密码学与安全 · 计算机科学 2016-11-18 Marco Guarnieri , Srdjan Marinovic , David Basin

Almost 50 years after the invention of SQL, injection attacks are still top-tier vulnerabilities of today's ICT systems. Consequently, SQLi detection is still an active area of research, where the most recent works incorporate machine…

密码学与安全 · 计算机科学 2023-04-25 Balazs Pejo , Nikolett Kapui

SQL injection (SQLi) attacks pose a significant threat to the security of web applications. Existing approaches do not support object-oriented programming that renders these approaches unable to protect the real-world web apps such as…

密码学与安全 · 计算机科学 2020-07-14 Rasoul Jahanshahi , Adam Doupé , Manuel Egele

SQL Injection (SQLi) continues to pose a significant threat to the security of web applications, enabling attackers to manipulate databases and access sensitive information without authorisation. Although advancements have been made in…

密码学与安全 · 计算机科学 2025-02-10 Naga Sai Dasari , Atta Badii , Armin Moin , Ahmed Ashlam

NoSQL data storage systems have become very popular due to their scalability and ease of use. This paper examines the maturity of security measures for NoSQL databases, addressing their new query and access mechanisms. For example the…

密码学与安全 · 计算机科学 2015-06-15 Aviv Ron , Alexandra Shulman-Peleg , Emanuel Bronshtein

Injection attacks have been a major threat to web applications. Despite the significant effort in thwarting injection attacks, protection against injection attacks remains challenging due to the sophisticated attacks that exploit the…

密码学与安全 · 计算机科学 2021-09-20 Meng Wang , Chijung Jung , Ali Ahad , Yonghwi Kwon

This work explores injection attacks against password managers. In this setting, the adversary (only) controls their own application client, which they use to "inject" chosen payloads to a victim's client via, for example, sharing…

密码学与安全 · 计算机科学 2024-08-14 Andrés Fábrega , Armin Namavari , Rachit Agarwal , Ben Nassi , Thomas Ristenpart
‹ 上一页 1 2 3 10 下一页 ›