NDLTD logo NDLTD Union Catalog and Global ETD Search

Global ETD Search

Search theses and dissertations gathered from participating repositories worldwide. Every result links back to the library that holds it. No account is needed.

Results

Showing 1 to 13 of 13 for “"SQL Injection"”.

  1. Exploring Defense of SQL Injection Attack in Penetration Testing

    Zhu, Yao Chu2016

    auckland-tech

  2. SQL injection detection and exploitation framework for penetration testing

    Kazmi, Muhammad Ali NaqiLondon Metropolitan University2019

    SQL injection is one of the complex and threatening attack used against SQL database servers and web applications. Attackers use SQL injection to get unauthorized access and perform unauthorized data modification. To mitigate the devastating problem of SQL injection attack, there are many existing …

    london-metro Repository record

  3. Moth: a hybrid threat model for improving software security testing

    Omotunde, Habeeb OladapoUniversiti Tun Hussein Onn Malaysia2018

    As SQL injection attack (SQLIA) continues to threaten web applications despite several techniques recommended to prevent it, a Hybrid Threat Modeling strategy was adopted in this research due to its proactive approach to risk mitigation in web applications. This involved the combination of 3 threat …

    uthm Repository record

  4. Preventing injection attacks through automated randomization of keywords

    Willenson, Daniel MMassachusetts Institute of Technology2012

    SQL injection attacks are a major security issue for database-backed web applications, yet the most common approaches to prevention require a great deal of programmer effort and attention. Even one unchecked vulnerability can lead to the compromise of an entire application and its data. We present …

    mit Repository record

  5. Automated detection of injection vulnerabilities in web applications

    Bandhakavi, SruthiUniversity of Illinois at Urbana-Champaign2012

    … run and that of the resources they handle. Injection, cross-site scripting (XSS), cross-site request forgery (XSRF), etc. are some examples of vulnerabilities that could allow malicious attacks on web applications and their infrastructure. Of the many attacks on web applications, injection …

    uiuc Repository record

  6. Structured query language (SQL) related tools

    Wei, Ke2006

    … and secure fashion. Structured Query Language (SQL) is designed to query data contained in a relational database. SQL is important as it is the only way for a user to interact with a relational database. But little focus has been put on SQL because people consider SQL as a simple language. But …

    iastate Repository record

  7. Categorization of Security Design Patterns

    Dangler, Jeremiah Y2013

    … ow, input validation, HTTPS, les access, and SQL injection, are proposed for conveying an aware of security patterns and their value in software development.</p>

    etsu Repository record

  8. Using a Web Server Test Bed to Analyze the Limitations of Web Application Vulnerability Scanners

    Shelly, David AndrewVirginia Tech2010

    … help prevent and detect vulnerabilities such as SQL injection, buffer overflows, cross-site scripting, malicious file execution, and session hijacking. However, these tools have been found to have flaws and limitations as well. Research has shown that web application vulnerability scanners are …

    vt Repository record

  9. Blockchain-Based Zero Trust Threat Detection Framework for the Finance Industry Network

    Daah, ClementUniversity of Bradford2026

    … resilience to common threats such as SQL injection and brute-force attacks. To address the limitations of Zero Trust, the ZTB framework was designed and validated using OMNeT++ simulations under three configurations: Traditional, FZT, and ZTB networks. Simulated attack scenarios, …

    bradford Repository record

  10. Detection of Lightweight Directory Access Protocol Query Injection Attacks in Web Applications

    Bulusu, Pranahita2015

    … of web applications, different types of LDAP injection attacks are becoming common. The idea behind LDAP injection attacks is to take advantage of an application not validating inputs before being used as part of LDAP queries. An attacker can provide inputs that may result in alteration of …

    kennesaw Repository record

  11. A Framework for Hybrid Intrusion Detection Systems

    Bronte, Robert N2016

    … layer attacks. Those included in this thesis are SQL injection, cross-site scripting, directory traversal and remote file inclusion. This work identifies common and existing data breach detection methods as well as the necessary improvements for IDS models. Ultimately, the proposed approach …

    kennesaw Repository record

  12. Real-time Intrusion Detection using Multidimensional Sequence-to-Sequence Machine Learning and Adaptive Stream Processing

    Loganathan, GobinathThe University of Western Ontario2018

    … HTTP Unbearable Load King (HULK) DoS attack, SQL Injection attack, Web Brute Force attack, Cross-site scripting attack, Ares Botnet attack, and Port Scan probe with a 100% detection rate in a real-time environment simulated from the CICIDS 2017 dataset.

    uwo Repository record

  13. Code Injection Vulnerabilities in Web Applications - Exemplified at Cross-site Scripting

    Johns, MartinUniversität Passau

    … Web applications is caused by string-based code injection, with Cross-site Scripting (XSS)being the dominant representative of this vulnerability class. This thesis discusses XSS and suggests defense mechanisms. We do so in three stages: First, we conduct a thorough analysis of JavaScript's …

    passau-thes Repository record