Research on Countermeasure of SQL Injection Attack
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
At present, it is indispensable to utilize data as an information society. Therefore, the database is used to manage large amounts of data. In real life, most of the data in a database is the personal information of a group of members. Because personal information is sensitive data, the role of the database administrator who manages personal information is important. However, there is a growing number of attacks on databases to use this personal information in a malicious way. SQL Injection is one of the most known and old hacking techniques. SQL Injection attacks are known as an easy technique, but countermeasures are easy, but a lot of efforts are made to avoid SQL attacks on web pages that require a lot of logins, but some sites are still vulnerable to SQL attacks. Therefore, this study suggests effective defense measures through analysis of SQL hacking technology cases and contributes to preventing web hacking and providing a secure information communication environment.
Abstract
At present, it is indispensable to utilize data as an information society. Therefore, the database is used to manage large amounts of data. In real life, most of the data in a database is the personal information of a group of members. Because personal information is sensitive data, the role of the database administrator who manages personal information is important. However, there is a growing number of attacks on databases to use this personal information in a malicious way. SQL Injection is one of the most known and old hacking techniques. SQL Injection attacks are known as an easy technique, but countermeasures are easy, but a lot of efforts are made to avoid SQL attacks on web pages that require a lot of logins, but some sites are still vulnerable to SQL attacks. Therefore, this study suggests effective defense measures through analysis of SQL hacking technology cases and contributes to preventing web hacking and providing a secure information communication environment.
참고문헌 (14)
- 박정석, "A Data Driven Index for Convergence Sensor Networks", 한국융합학회논문지, 7(6), pp.43~48 (2016), 한국융합학회[DOI]
- Dirk Wetter, "OWASP Top 10: Zwei Jahre danach", Datenschutz und Datensicherheit - DuD, 36(11), pp.810~813 (2012), Springer Science and Business Media LLC[DOI]
- K. Fowler, "SQL Injection Attacks and Defense", pp.443~484 (2012)
- A. Pomeroy, "Effective SQL Injection Attack Reconstruction Using Network Recording", 2011IEEE 11th International Conference on Computer and Information Technology (2011)
- G. Koziel, "Application To Examine Sql Injection Vulnerabilities As A Tool In Computer Science Education", INTED 2018 Proceedings (2018)
- J. Halde, "SQL Injection analysis, Detection and Prevention", ~ (2008)
- 최준영, "의료 데이터 발생과 분석기술을 활용한 의료정보관리 교육용 프로그램 개발", 디지털융복합연구, 15(10), pp.377~386 (2017), 한국디지털정책학회[DOI]
- 홍성혁, "XSS 공격과 대응방안", 디지털융복합연구, 11(12), pp.327~332 (2013), 한국디지털정책학회[DOI]
- B. R. Kim, "Philippine Learning Management System Design and Implementation", Journal of the Korea Convergence Society, 3(2), pp.1~5 (2012)
- 신승수, "창의·인성 교육기반의 디지털 융합 큐레이션 시스템에 관한 취약점 분석", 한국융합학회논문지, 6(4), pp.225~234 (2015), 한국융합학회[DOI]
- S. Hong, "Research on Wireless Sensor Networks Security Attack and Countermeasures :Survey", Journal of Convergence for Information Technology, 4(4), pp.1~6 (2014)
- P. S. Shin, "Security and Hacking on Wireless Networking for Small and Medium Business : Survey", Journal of Convergence for Information Technology, 4(3), pp.15~20 (2014)
- 윤희진, "뉴럴네트워크를 이용한 심음의 정상 비정상 분류", 융합정보논문지, 8(5), pp.131~135 (2018), 중소기업융합학회[DOI]