An Effective Method for Preventing SQL Injection Attack and Session Hijacking

D'silva, Karis and Vanajakshi, J and Manjunath, K N and Prabhu, Srikanth (2017) An Effective Method for Preventing SQL Injection Attack and Session Hijacking. In: International Conference On Recent Trends In Electronics Information Communication Technology, 20/05/2016, Bangalore India.

[img] PDF
927.pdf - Published Version
Restricted to Registered users only

Download (558kB) | Request a copy

Abstract

Today’s world is very much dependent on the web applications, may it be shopping or financial transactions. Providing security to these web applications is very important. Most of the transaction information or the customer information is stored in the backend databases for these web applications. One of the vulnerabilities of these web applications is SQL (Structured Query Language) injection attack. Also, the web application sessions are prone to session hijacking attack, if the adversary can get hold of the session id. Considering that there are various tools available to retrieve session/HTTP cookies, this makes web applications very vulnerable session hijacking attacks. Though there are many ways proposed to defend the databases against SQL injection attacks, there is no sure shot way to prevent these SQL injection attacks. This project proposes an efficient technique for the prevention of SQL injection attack and session hijacking. The hashing technique is used for implementing the prevention these attacks

Item Type: Conference or Workshop Item (Paper)
Uncontrolled Keywords: SQLIA (SQL injection attack), Session Hijacking, SHA-1, HTTP Cookies
Subjects: Engineering > MIT Manipal > Computer Science and Engineering
Depositing User: MIT Library
Date Deposited: 28 Nov 2017 05:02
Last Modified: 28 Nov 2017 05:02
URI: http://eprints.manipal.edu/id/eprint/150085

Actions (login required)

View Item View Item