Sql Injection Attacks And Prevention Techniques

Databases introduce a number of unique security requirements for their users and administrators.On one hand, databases are designed to promote open and flexible access to data.On the other hand, it's this same open access that makes databases vulnerable to many kinds of malicious activity 1 .One of the main issues faced by database security professionals is avoiding inference capabilities.Structured Query Language (SQL) injection is a technique used to take advantage of non-validated input vulnerabilities to pass SQL commands through a Web application for execution by a backend database.Attackers take advantage of the fact that programmers often chain together SQL commands with user-provided parameters, and can therefore embed SQL commands inside these parameters.The result is that the attacker can execute arbitrary SQL queries and/or commands on the backend database server through the Web application.In this report we discuss the different SQL injection attacks and prevention techniques available.