Systematic literature review on SQL injection attack
SQL injection attack is a common threat to web applications that utilizes poor input validation to implement attack on a target database. It is becoming a very serious problem in web applications as successful execution leads to loss of integrity and confidentiality and this makes it a very sensitiv...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Medwell Journals
2016
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/29102/ http://psasir.upm.edu.my/id/eprint/29102/1/Systematic%20literature%20review%20on%20SQL%20injection%20attack.pdf |
| _version_ | 1848846304985219072 |
|---|---|
| author | Aminu, Lawal Muhammad Md Sultan, Abu Bakar Shakiru, Ayanloye O. |
| author_facet | Aminu, Lawal Muhammad Md Sultan, Abu Bakar Shakiru, Ayanloye O. |
| author_sort | Aminu, Lawal Muhammad |
| building | UPM Institutional Repository |
| collection | Online Access |
| description | SQL injection attack is a common threat to web applications that utilizes poor input validation to implement attack on a target database. It is becoming a very serious problem in web applications as successful execution leads to loss of integrity and confidentiality and this makes it a very sensitive issue of software security. The study presents a Systematic Literature Review (SLR) on SQL Injection Attacks (SQLIA) following Kitchenham's procedure of performing systematic literature review. This study gives a review on SQL injection attack, detection and prevention techniques. In the end, an evaluation of the techniques is carried out to check the effectiveness of each technique based on how many method of attack it can detect and prevent. It is imperative to note that a good number of the evaluated techniques were able to detect and prevent all types of SQLIA based on the selected criteria. To determine the best technique resources such as memory and processing time need to be considered in the evaluation. |
| first_indexed | 2025-11-15T09:00:35Z |
| format | Article |
| id | upm-29102 |
| institution | Universiti Putra Malaysia |
| institution_category | Local University |
| language | English |
| last_indexed | 2025-11-15T09:00:35Z |
| publishDate | 2016 |
| publisher | Medwell Journals |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | upm-291022016-06-20T05:57:45Z http://psasir.upm.edu.my/id/eprint/29102/ Systematic literature review on SQL injection attack Aminu, Lawal Muhammad Md Sultan, Abu Bakar Shakiru, Ayanloye O. SQL injection attack is a common threat to web applications that utilizes poor input validation to implement attack on a target database. It is becoming a very serious problem in web applications as successful execution leads to loss of integrity and confidentiality and this makes it a very sensitive issue of software security. The study presents a Systematic Literature Review (SLR) on SQL Injection Attacks (SQLIA) following Kitchenham's procedure of performing systematic literature review. This study gives a review on SQL injection attack, detection and prevention techniques. In the end, an evaluation of the techniques is carried out to check the effectiveness of each technique based on how many method of attack it can detect and prevent. It is imperative to note that a good number of the evaluated techniques were able to detect and prevent all types of SQLIA based on the selected criteria. To determine the best technique resources such as memory and processing time need to be considered in the evaluation. Medwell Journals 2016 Article PeerReviewed application/pdf en http://psasir.upm.edu.my/id/eprint/29102/1/Systematic%20literature%20review%20on%20SQL%20injection%20attack.pdf Aminu, Lawal Muhammad and Md Sultan, Abu Bakar and Shakiru, Ayanloye O. (2016) Systematic literature review on SQL injection attack. International Journal of Soft Computing, 11 (1). pp. 26-35. ISSN 1816-9503 http://www.medwelljournals.com/abstract/?doi=ijscomp.2016.26.35 10.3923/ijscomp.2016.26.35 |
| spellingShingle | Aminu, Lawal Muhammad Md Sultan, Abu Bakar Shakiru, Ayanloye O. Systematic literature review on SQL injection attack |
| title | Systematic literature review on SQL injection attack |
| title_full | Systematic literature review on SQL injection attack |
| title_fullStr | Systematic literature review on SQL injection attack |
| title_full_unstemmed | Systematic literature review on SQL injection attack |
| title_short | Systematic literature review on SQL injection attack |
| title_sort | systematic literature review on sql injection attack |
| url | http://psasir.upm.edu.my/id/eprint/29102/ http://psasir.upm.edu.my/id/eprint/29102/ http://psasir.upm.edu.my/id/eprint/29102/ http://psasir.upm.edu.my/id/eprint/29102/1/Systematic%20literature%20review%20on%20SQL%20injection%20attack.pdf |