SQLrand: Preventing SQL Injection Attacks (2004)
Cached
Download Links
- [www1.cs.columbia.edu]
- [www.cs.purdue.edu]
- DBLP
Other Repositories/Bibliography
by
Stephen W. Boyd
,
Angelos D. Keromytis
| Venue: | In Proceedings of the 2nd Applied Cryptography and Network Security (ACNS) Conference |
| Citations: | 68 - 4 self |
BibTeX
@INPROCEEDINGS{Boyd04sqlrand:preventing,
author = {Stephen W. Boyd and Angelos D. Keromytis},
title = {SQLrand: Preventing SQL Injection Attacks},
booktitle = {In Proceedings of the 2nd Applied Cryptography and Network Security (ACNS) Conference},
year = {2004},
pages = {292--302}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
We present a practical protection mechanism against SQL injection attacks. Such attacks target databases that are accessible through a web frontend, and take advantage of flaws in the input validation logic of Web components such as CGI scripts. We apply the concept of instruction-set randomization to SQL, creating instances of the language that are unpredictable to the attacker.
