作者: V. Shanmughaneethi , Ra. Yagna Pravin , C. Emilin Shyni , S. Swamynathan
DOI: 10.1007/978-3-642-22577-2_45
关键词:
摘要: Security remains a major threat to the entire Web for many kinds of transactions. Most threats are created through application level vulnerabilities and have been exploited with serious consequences. Among various types vulnerabilities, command injection is most common type in web applications. attack, SQL attacks extremely prevalent, ranked as second form attack on web. involve construction application’s input data that will result execution malicious statements. Hence, this paper (SQLIVD-AOP) proposes mechanism intercept statements without any modification an using Aspect Oriented Programming analyze query its legitimacy, customize errors. This different from others by interception separation main scripting code code. The validations detections implemented means services.