Universiti Teknologi Malaysia Institutional Repository

Effectiveness of structured query language injection attacks detection mechanisms

Mohamad, Nurul Zawiyah (2008) Effectiveness of structured query language injection attacks detection mechanisms. Masters thesis, Universiti Teknologi Malaysia, Faculty of Computer Science and Information System.

[img] PDF
Restricted to Repository staff only

[img] PDF (Abstract)
[img] PDF (Table Of Content)
[img] PDF (1st Chapter)

Official URL: http://dms.library.utm.my:8080/vital/access/manage...


Database security is one of the most essential factors in keeping stored information safe. These days, web applications are used widely as a meddler between computer users. Web applications are also used mostly by e-commerce companies, and these types of applications need a secured database in order to keep sensitive and confidential information. Since SQL injection attacks occurred as a new way of accessing database through the application rather than directly through the database itself, they have become popular among hackers and malicious users. Many prevention and detection mechanisms are developed to handle this problem but these mechanisms have their limitations. In this study, two mechanisms, AMNESIA and SQL Guard are adopted for a practical evaluation to search for the better technique in detecting SQL injection attacks. These techniques will be called Technique A and Technique B respectively and will be evaluated on their effectiveness and efficiency using precision and recall measure against two web applications, Mekar and myMarket. The study will show that Technique B is a better approach on detecting SQL injection attacks.

Item Type:Thesis (Masters)
Additional Information:Thesis (Sarjana Sains (Sains Komputer)) - Universiti Teknologi Malaysia, 2008; Supervisor : Assoc. Prof. Dr. Naomie Salim
Uncontrolled Keywords:database security, web applications
Subjects:Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:Computer Science and Information System (Formerly known)
ID Code:9510
Deposited By: Ms Zalinda Shuratman
Deposited On:31 Dec 2009 08:38
Last Modified:24 Mar 2015 07:39

Repository Staff Only: item control page