SQL Injection Is Still Alive: A Study on SQL Injection Signature Evasion Techniques

摘要: SQL injection is one of the biggest challenges for web application security. Based on studies by OWASP, has highest rank in based vulnerabilities. In case a successful attack, attacker can have access to database. With rapid rise attacks, researchers start provide different security solutions protect against them. One most common using firewalls. Usually these firewalls use signature technique as main core detection. this firewall checks each packet list predefined attacks known signatures. The problem with that, an good knowledge language change look queries way that cannot detect them but still they lead same malicious results. paper first we described nature then analyzed current detection evasion techniques and how bypass filters, afterward proposed combination which helps mitigate risk attack.