Keyword Search:


Bookmark and Share

Systematic literature review on SQL injection attack

Aminu, Lawal Muhammad and Md Sultan, Abu Bakar and Shakiru, Ayanloye O. (2016) Systematic literature review on SQL injection attack. International Journal of Soft Computing, 11 (1). pp. 26-35. ISSN 1816-9503

[img] PDF (Abstract)
34Kb

Official URL: http://www.medwelljournals.com/abstract/?doi=ijsco...

Abstract

SQL injection attack is a common threat to web applications that utilizes poor input validation to implement attack on a target database. It is becoming a very serious problem in web applications as successful execution leads to loss of integrity and confidentiality and this makes it a very sensitive issue of software security. The study presents a Systematic Literature Review (SLR) on SQL Injection Attacks (SQLIA) following Kitchenham's procedure of performing systematic literature review. This study gives a review on SQL injection attack, detection and prevention techniques. In the end, an evaluation of the techniques is carried out to check the effectiveness of each technique based on how many method of attack it can detect and prevent. It is imperative to note that a good number of the evaluated techniques were able to detect and prevent all types of SQLIA based on the selected criteria. To determine the best technique resources such as memory and processing time need to be considered in the evaluation.

Item Type:Article
Keyword:Detection; Prevention; Software security; SQL injection attack; Systematic literature review
Faculty or Institute:Faculty of Computer Science and Information Technology
Publisher:Medwell Journals
DOI Number:10.3923/ijscomp.2016.26.35
Altmetrics:http://www.altmetric.com/details.php?domain=psasir.upm.edu.my&doi=10.3923/ijscomp.2016.26.35
ID Code:29102
Deposited By: Nurul Ainie Mokhtar
Deposited On:20 Jun 2016 13:57
Last Modified:20 Jun 2016 13:57

Repository Staff Only: Edit item detail

Document Download Statistics

This item has been downloaded for since 20 Jun 2016 13:57.

View statistics for "Systematic literature review on SQL injection attack"