منقذ حامد عبد الواحد العطار

Recently, Web applications have been used for most of the activities in animation. These applications are affected by the structured query language injection (SQLI). In this paper, four major objectives can be organized to direct the work study are: • Conduct a detailed review of various SQLI attacks and investigation of previous approaches that detected and prevented these attacks in Web applications. • Compare the performance metrics of the different techniques to evaluate the precision of the results and the cost of the time required to identify the efficiency of the techniques. • Evaluate the effectiveness of the techniques in practices based on the effectiveness metrics. • Define the efficiency and effectiveness direction of defensive approaches. The main contributions of this work are: • Summary and analysis of a critical review (strengths and weaknesses) of the defensive approaches that have been implemented. • Comparison of the result accuracy of the different approaches through an evaluation using the standard performance metrics. • Evaluation of the effectiveness of the techniques in practice. • Identification and focus on the critical and important lines or defensive techniques that need comprehensive studies by future researchers through which the advantages of high efficiency and effectiveness can be obtained.

Abstract- In the real time word, there are many online systems those are major part of software systems in order to make them publically available to perform the remote operations. These online systems are vulnerable to different types of web based attacks. Here in this project we are considering the one such web based attack and its prevention technique in real time web applications as well as presenting the ways to implement same approach for binary applications. Previously, the approach called WASP was proposed as efficient web application SQL injection preventer using the datasets. However, this tool was not evaluated over real time web applications; we did not get its accuracy for prevention of real time web application SQL injection attacks, even though it’s having high accuracy during its tested results over datasets. Therefore, in this research work we are extending the WASP approach to real time environment in order to evaluate its effectiveness as well as to collect a valuable set of real legal accesses and, possibly, attacks. In addition to this, we are presenting the same approach for binary applications. This new approach or tool we called as R-WASP.

Abstract— SQL injection is the most common attack for web applications and widely used exploit by hackers all over the world. A malicious hacker can do a lot of harm if he wishes to. SQL injection is a security vulnerability that occurs in the database layers of an application. SQL injection is a technique to pass SQL code into interactive web applications that employ in database services. The employment of SQL Injection Attacks, can lead to the leak of confidential information such as credit card numbers, commercial information & table structure. The attackers can get the entire schema of the original database and also corrupt it. In this paper, we have proposed the Detection Model of SQL Injection Vulnerabilities and SQL Injection Mitigation Framework. These approaches are based on SQL Injection grammar to identify the SQL Injection vulnerabilities during software development and SQL Injection Attack on web-based applications.

اعزائي الطلبة يمكنكم الحصول على نتائج سعي الفصل الاول من خلال بوابة التعليم الالكتروني وذلك عن طريق استخدام الرقم الجامعي وكلمة المرور مع امنياتي للجميع بالموفقية والنجاح. رابط النظام http://elearning.uokufa.edu.iq/moodle/ppl/

التفاصيل كاملة