Artículos relacionados a Using Automated Fix Generation to Mitigate SQL Injection...

Using Automated Fix Generation to Mitigate SQL Injection Vulnerabilities - Tapa blanda

Stephen Thomas

 
9783836464963: Using Automated Fix Generation to Mitigate SQL Injection Vulnerabilities
Tapa blanda
ISBN 10: 3836464969 ISBN 13: 9783836464963
Editorial: KS OmniScriptum Publishing, 2008

Sinopsis

Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). Since most developers are not experienced software security practitioners, a solution for correctly removing SQLIVs that does not require security expertise is desirable. In this paper, an automated fix generation algorithm for removing SQLIVs by replacing SQL statements with prepared SQL statements is described. Automated fix generation is a type of automated code generation that analyzes project artifacts containing faults and uses the analysis to generate fault free alternative or replacement code. Prepared SQL statements have a static structure and take type-specific input parameters, which prevents SQL injection attack input from changing the structure and logic of a statement. The automated fix algorithm is evolved over the course of preparing for and analyzing the results of four formative and evaluative case studies.

"Sinopsis" puede pertenecer a otra edición de este libro.

Reseña del editor

Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). Since most developers are not experienced software security practitioners, a solution for correctly removing SQLIVs that does not require security expertise is desirable. In this paper, an automated fix generation algorithm for removing SQLIVs by replacing SQL statements with prepared SQL statements is described. Automated fix generation is a type of automated code generation that analyzes project artifacts containing faults and uses the analysis to generate fault free alternative or replacement code. Prepared SQL statements have a static structure and take type-specific input parameters, which prevents SQL injection attack input from changing the structure and logic of a statement. The automated fix algorithm is evolved over the course of preparing for and analyzing the results of four formative and evaluative case studies.

"Sobre este título" puede pertenecer a otra edición de este libro.

Editorial
KS OmniScriptum Publishing
Año de publicación
2008
Idioma
Inglés
ISBN 10 
3836464969
ISBN 13 
9783836464963
Encuadernación
Tapa blanda
Número de páginas
80
Contacto del fabricante
no disponible
Persona responsable
no disponible