Using Automated Fix Generation to Mitigate SQL Injection Vulnerabilities - Couverture souple

Thomas, Stephen

Couverture souple

ISBN 10 : 3836464969 ISBN 13 : 9783836464963

Editeur : VDM Verlag Dr. Mueller E.K., 2008

Synopsis

Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). Since most developers are not experienced software security practitioners, a solution for correctly removing SQLIVs that does not require security expertise is desirable. In this paper, an automated fix generation algorithm for removing SQLIVs by replacing SQL statements with prepared SQL statements is described. Automated fix generation is a type of automated code generation that analyzes project artifacts containing faults and uses the analysis to generate fault free alternative or replacement code. Prepared SQL statements have a static structure and take type-specific input parameters, which prevents SQL injection attack input from changing the structure and logic of a statement. The automated fix algorithm is evolved over the course of preparing for and analyzing the results of four formative and evaluative case studies.

A propos du livre

Présentation de l'éditeur

Revision with unchanged content. Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). Since most developers are not experienced software security practitioners, a solution for correctly removing SQLIVs that does not require security expertise is desirable. In this paper, an automated fix generation algorithm for removing SQLIVs by replacing SQL statements with prepared SQL statements is described. Automated fix generation is a type of automated code generation that analyzes project artifacts containing faults and uses the analysis to generate fault free alternative or replacement code. Prepared SQL statements have a static structure and take type-specific input parameters, which prevents SQL injection attack input from changing the structure and logic of a statement. The automated fix algorithm is evolved over the course of preparing for and analyzing the results of four formative and evaluative case studies.

Biographie de l'auteur

is from Raleigh, North Carolina. He received his Bachelors of Science in Computer Science attending North Carolina State University from 2003 to 2006. He received his Master of Science in December, 2007.

Détails de l'édition

• Éditeur: VDM Verlag Dr. Mueller E.K.
• Date d'édition: 2008
• Langue: anglais
• ISBN 10: 3836464969
• ISBN 13: 9783836464963
• Reliure: Broché
• Nombre de pages: 80
• Coordonnées du fabricant: non disponible
• Personne responsable: non disponible