Analysis and Defense of SQL Injection Attacks in ASP.NET Application

doi:10.3969/j.issn.1006-2475.2014.03.035

Computer and Modernization ›› 2014, Vol. 0 ›› Issue (3): 151-153,160.doi: 10.3969/j.issn.1006-2475.2014.03.035

Previous Articles Next Articles

Analysis and Defense of SQL Injection Attacks in ASP.NET Application

(Software School， Pingdingshan University, Pingdingshan 467000， China

Received:2013-11-18 Online:2014-03-24 Published:2014-03-31

Abstract

Abstract: Aiming at the SQL injection attack problem in ASP.NET application, after the analysis on the approach and method of injection attacks, a three-level prevention model is put forward from the aspect of input filtering, statement parameters and SQL keywords escaping. With this model, we can customize the rule of keywords escaping and block the approach of SQL injection attacks effectively. The result of experiments verifies the feasibility and effectiveness of this prevention model.

Key words: SQL filter, model, security, attack


CLC Number:

TP393.08

CHU Long-xian. Analysis and Defense of SQL Injection Attacks in ASP.NET Application[J]. Computer and Modernization, 2014, 0(3): 151-153,160.

[1]	ZHAO Chenyang, XUE Tao, LIU Junhua. Fashion Clothing Pattern Generation Based on Improved Stable Diffusion [J]. Computer and Modernization, 2024, 0(12): 15-23.
[2]	WANG Xiaohang1, LI Yongjie1, YU Lei1, FAN Xiao2. A Method of Using Compound Event Probability Operation to Solve Problem of Negative Information Blocking Maximization [J]. Computer and Modernization, 2024, 0(12): 24-33.
[3]	LI Deyou1, 2, YU Jinsongdi1, 2, WEI Dandan1, 2, LUO Yuan1, 2, TONG Ruiju3. Abstract Tree Model for Gridded Cube Metadata [J]. Computer and Modernization, 2024, 0(11): 1-6.
[4]	LIU Xing1, 2, GUO Liang1, 2, WANG Zhengqi1, 2, WEI Xiaogang1, 2, XU Xuefei1, 2, LIU Jing3. Q-learning-based Algorithm for Orchestrating Security Service Function Chain [J]. Computer and Modernization, 2024, 0(11): 34-40.
[5]	ZHANG Kun1, ZHANG Yongwei1, WU Yongcheng1, ZHANG Xiaowen2, ZHAI Shichen2. An LLM-based Method for Automatic Construction of Equipment Failure Knowledge Graphs [J]. Computer and Modernization, 2024, 0(11): 46-53.
[6]	ZHANG Yu1, 2, LI Jing1, 2, MA Ming1, 2, WANG Zhongxiang1, 2, SUN Yan1, 2. YOLOLW: A Novel Lightweight Object Detection Model [J]. Computer and Modernization, 2024, 0(11): 91-98.
[7]	DONG Yuwen. Multi-scale Moving Object Detection Algorithm Based on Improved YOLOv7-tiny [J]. Computer and Modernization, 2024, 0(11): 99-105.
[8]	WANG Cong1, YANG Wenjuan1, DING Xingwang2. An Aggregation Model of Historical Archive Resources Based on Multimodal#br# Information Fusion [J]. Computer and Modernization, 2024, 0(10): 120-126.
[9]	QI Jun1, 2, QU Ruiting2, JIAO Chuanming2, ZHOU Qiaoni2, GUO Yanliang3, TAN Wenjun3. Enhanced Big Language Model Dual Carbon Domain Services Based on Knowledge Graph [J]. Computer and Modernization, 2024, 0(09): 8-14.
[10]	ZHANG Huinan1, ZHANG Qiang1, SUN Hongxia2. Dynamic Analysis Model of Reservoir Production Based on Improved#br# Time-series Capsule Network [J]. Computer and Modernization, 2024, 0(09): 15-19.
[11]	XU Xiaowei, CHENG Yu, QIAN Feng, ZHU Neng, DENG Mingxing. Cryptographic Algorithm of IoV Communication Based on AES [J]. Computer and Modernization, 2024, 0(09): 45-51.
[12]	LIU Ruoying1, ZOU Weiyu1, HU Shaoqian2, JI Shunhui3. Survey of Digital Twin Modeling and Applications in Power System [J]. Computer and Modernization, 2024, 0(09): 61-68.
[13]	ZHAO Dun1, SHE Xuebing2, WU Changxing3. Named Entity Recognition in Field of Party Building Based on BERT-BiLSTM-CRF [J]. Computer and Modernization, 2024, 0(09): 91-94.
[14]	MA Yong, WANG Jun, ZHANG Zijian, ZHAO Yuyang, ZHANG Jing, ZHOU Ming. Improved YOLOv8 Behavior Detection Algorithm for Intelligent Operation and#br# Maintenance System [J]. Computer and Modernization, 2024, 0(08): 43-48.
[15]	WANG Tao1, 2, HUANG Dan1, 2, LIU Chanyi1, 2, ZHU Tao1, 2. Vehicle Detection in UAV Image Based on YOLOv5s [J]. Computer and Modernization, 2024, 0(08): 108-113.

Analysis and Defense of SQL Injection Attacks in ASP.NET Application

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments