Live briefing
Everything about SQL injection
Computer hacking technique
In computing, SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution. SQL injection must exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: SQL injectionA 5-minute orientation
- Skim a recent paper: SQL injection attack detection in network flow dataInfluential work since 2022
- Pick up a classic book: Linux Server SecurityThe most-reprinted book on the subject
- Read the landmark paper: Defeating SQL InjectionCited 70 times
- Go sideways: Code injectionA closely related topic
- Go sideways: Cross-site scriptingA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Defeating SQL Injection
SQL Injection Attack: Quick View
SQL-injection vulnerability scanning tool for automatic creation of SQL-injection attacks
SQL injection attack Detection using SVM
SQL Injection Detection Using Machine Learning
Review of SQL Injection : Problems and Prevention
SQL injection attacks countermeasures assessments
Ontology for Blind SQL Injection
🆕 Influential since 2022
📚 Books worth reading
Linux Server SecurityChris Binnie · 2016
Secure Mobile Software Development (SMSD)Emmanuel Agu, Fan Wu · 2022
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Code injection Code injection is a computer security exploit where a program fails to correctly process external data, such as user input, causing it to interpret the…
- Cross-site scripting Cross-site scripting (XSS) is a type of security vulnerability that can be found in some web applications. XSS attacks enable attackers to inject client-side…
- LDAP injection In computer security, LDAP injection is a code injection technique used to exploit web applications which could reveal sensitive user information or modify…
- Exploit (computer security) An exploit is a method or piece of code that takes advantage of vulnerabilities in software, applications, networks, operating systems, or hardware, typically…
- HTTP response splitting HTTP response splitting is a form of web application vulnerability, resulting from the failure of the application or its environment to properly sanitize…
- File inclusion vulnerability A File Inclusion Vulnerability is a type of web vulnerability that is most commonly found to affect web applications that rely on a scripting run time…
- Prepared statement In database management systems (DBMS), a prepared statement, parameterized statement, (not to be confused with parameterized query) is a feature where…
- Improper input validation Improper input validation or unchecked user input is a type of vulnerability in computer software that may be used for security exploits. This vulnerability…