a novel method for sql injection attack detection based on removing sql query attribute values：一种基于sql的查询属性值去除sql注入攻击检测的新方法.pdfVIP

Mathematical and Computer Modelling 55 (2012) 58–68 Contents lists available at SciVerse ScienceDirect Mathematical and Computer Modelling journal homepage: /locate/mcm A novel method for SQL injection attack detection based on removing SQL query attribute values Inyong Lee a , Soonki Jeong b , Sangsoo Yeo c , Jongsub Moon d,∗ a Center for Information Security Technologies, Korea University, Seoul 136-713, Republic of Korea b Graduate School of Information Security, Korea University, Seoul 136-713, Republic of Korea c Division of Computer Engineering, Mokwon University, Daejeon 302-729, Republic of Korea d Department of Electronics and Information Engineering, Korea University, Chochiwoneup, Yeonkigun, Choongnam 339-700, Republic of Korea a r t i c l e i n f o a b s t r a c t Article history: SQL injection or SQL insertion attack is a code injection technique that exploits a security Received 16 September 2010 vulnerability occurring in the database layer of an application and a service. This is most Received in revised form 5 January 2011 often found within web pages with dynamic content. This paper proposes a very simple Accepted 29 January 2011 and effective detection method for SQL injection attacks. The method removes the value of an SQL query attribute of web pages when parameters are submitted and then compares Keywords: it with a predetermined one. This method uses combined static and dynamic analysis. The SQL injection attack experiments show that the proposed method is very effective and simple t