Trending Bestseller

Using Automated Fix Generation to Mitigate SQL Injection Vulnerabilities

No reviews yet Write a Review
Paperback / softback
14 February 2008
RRP: $64.03
$62.75
Ships in 3-5 business days

Delivery estimate

Hurry up! Current stock:
Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). Since most developers are not experienced software security practitioners, a solution for correctly removing SQLIVs that does not require security expertise is desirable. In this paper, an automated fix generation algorithm for removing SQLIVs by replacing SQL statements with prepared SQL statements is described. Automated fix generation is a type of automated code generation that analyzes project artifacts containing faults and uses the analysis to generate fault free alternative or replacement code. Prepared SQL statements have a static structure and take type-specific input parameters, which prevents SQL injection attack input from changing the structure and logic of a statement. The automated fix algorithm is evolved over the course of preparing for and analyzing the results of four formative and evaluative case studies.

You Can Find This Title In

    Product Details
    ISBN-13
    9783836464963
    Author
    Stephen Thomas
    Publisher
    KS OmniScriptum Publishing
    Published
    14 February 2008
    Format
    Paperback / softback

    This product hasn't received any reviews yet. Be the first to review this product!

    RRP: $64.03
    $62.75
    Ships in 3-5 business days

    Delivery estimate

    Hurry up! Current stock:

    Using Automated Fix Generation to Mitigate SQL Injection Vulnerabilities

    RRP: $64.03
    $62.75

    Description

    Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). Since most developers are not experienced software security practitioners, a solution for correctly removing SQLIVs that does not require security expertise is desirable. In this paper, an automated fix generation algorithm for removing SQLIVs by replacing SQL statements with prepared SQL statements is described. Automated fix generation is a type of automated code generation that analyzes project artifacts containing faults and uses the analysis to generate fault free alternative or replacement code. Prepared SQL statements have a static structure and take type-specific input parameters, which prevents SQL injection attack input from changing the structure and logic of a statement. The automated fix algorithm is evolved over the course of preparing for and analyzing the results of four formative and evaluative case studies.

    You Can Find This Title In

      This Title Is Categorised As