Chinese Journal of Network and Information Security ›› 2016, Vol. 2 ›› Issue (11): 70-77.doi: 10.11959/j.issn.2096-109x.2016.00113

• Papers • Previous Articles    

Research on the SQL injection filtering based on SQL syntax tree

Chen-wang HAN1,2,Hui LIN1,2,Chuan HUANG1,2   

  1. 1 School of Mathematics and Computer Science,Fujian Normal University,Fuzhou 350117,China
    2 Fujian Provincial Key Laboratory of Network Security and Cryptology,Fujian Normal University,Fuzhou 350117,China
  • Revised:2016-10-14 Online:2016-11-15 Published:2016-11-15
  • Supported by:
    The National Natural Science Foundation of China(61363068);The National Natural Science Foundation of China(61472083);Pilot Project of Fujian Province(2016Y0031);Project of Fuzhou Municipal Science and Technology Bureau(2015-G-54);Project of Fuzhou Municipal Science and Technology Bureau(2015-G-84)

RichHTML

29

PDF下载

2515

Abstract:

The development of Web application make its areas become more and more widely.Followed by a security problem is becoming more and more serious,especially for the SQL injection attacks,which bring a huge challenge to the Web application security.A new SQL injection filtering method was proposed to detect SQL injection attack by introducing a security strategy based on SQL syntax tree to the design of the user input filtering.The experimental results show that the method can effectively prevent SQL injection attacks,and has higher recognition rate and lower rate of false positives.

Key words: SQL injection attack, Web security, SQL syntax tree, user input filtering

CLC Number: 

No Suggested Reading articles found!
Copyright of website: Editorial Office of Chinese Journal of Network and Information Security