ISSRE
2008
IEEE
13 years 11 months ago
2008
IEEE
A critical problem facing today’s internet community is the increasing number of attacks exploiting flaws found in Web applications. This paper specifically targets input valida...
ICDE
2009
IEEE
13 years 11 months ago
2009
IEEE
—Database developers today use data access APIs such as ADO.NET to execute SQL queries from their application. These applications often have security problems such as SQL injecti...
ESSOS
2010
Springer
2010
Springer
Idea: Using System Level Testing for Revealing SQL Injection-Related Error Message Information Leaks
13 years 11 months ago
Completely handling SQL injection consists of two activities: properly protecting the system from malicious input, and preventing any resultant error messages caused by SQL injecti...