Mohamad, Nurul Zawiyah (2008) Effectiveness of structured query language injection attacks detection mechanisms. Masters thesis, Universiti Teknologi Malaysia, Faculty of Computer Science and Information System.
Restricted to Repository staff only
PDF (Table Of Content)
PDF (1st Chapter)
Database security is one of the most essential factors in keeping stored information safe. These days, web applications are used widely as a meddler between computer users. Web applications are also used mostly by e-commerce companies, and these types of applications need a secured database in order to keep sensitive and confidential information. Since SQL injection attacks occurred as a new way of accessing database through the application rather than directly through the database itself, they have become popular among hackers and malicious users. Many prevention and detection mechanisms are developed to handle this problem but these mechanisms have their limitations. In this study, two mechanisms, AMNESIA and SQL Guard are adopted for a practical evaluation to search for the better technique in detecting SQL injection attacks. These techniques will be called Technique A and Technique B respectively and will be evaluated on their effectiveness and efficiency using precision and recall measure against two web applications, Mekar and myMarket. The study will show that Technique B is a better approach on detecting SQL injection attacks.
|Item Type:||Thesis (Masters)|
|Additional Information:||Thesis (Sarjana Sains (Sains Komputer)) - Universiti Teknologi Malaysia, 2008; Supervisor : Assoc. Prof. Dr. Naomie Salim|
|Uncontrolled Keywords:||database security, web applications|
|Subjects:||Q Science > QA Mathematics > QA75 Electronic computers. Computer science|
|Divisions:||Computer Science and Information System|
|Deposited By:||Ms Zalinda Shuratman|
|Deposited On:||31 Dec 2009 08:38|
|Last Modified:||30 Aug 2012 09:24|
Repository Staff Only: item control page