Enhancing detection of SQL injection attacks / Yasser Gomaa Ramadan ; Supervised Hesham A. Hefny , Abdelaziz Ahmed Abdelaziz , Nermin Hamza

Thesis (M.Sc.) - Cairo University - Faculty of Graduate Studies for Statistical Research - Department of Computer Science

In today's world, SQL Injection is a serious security threat over the Internet for the various dynamic web applications residing over the internet. These Web applications conduct many vital processes in various web-based businesses.As the use of internet for various online services is rising, so is the security threats present in the web increasing. There is a universal need present for all dynamic web applications and this universal need is the need to store, retrieve or manipulate information from a database. Most of systems which manage the databases and its requirements such as MySQL Server and PostgreSQL use SQL as their language. Flexibility of SQL makes it a powerful language. It allows its users to ask what he/she wants without leaking any information about how the data will be fetched. However, the vast use of SQL based databases has made it the center of attention of hackers.They take advantage of the poorly coded Web applications to attack the databases. They introduce an apparent SQL query, through an unauthorized user input, into the legitimate query statement.This thesisdiscusses the future innovative work fill in just as to increase the vigilance for the introduced methodologies

Issued also as CD