Prevention and Detection of SQL Injection Using Query Tokenization

Abstract

One of the most serious security vulnerabilities in the current scenario is SQL injection. It stands first in the OWASP top 10 vulnerability attacks. Lack of input validation is one of the main reasons for the cause of these types of attacks. Data can be stolen from the database by the means of SQL injection. Most of the user inputs are going directly to database. An attacker can obtain the data which he does not have access to with the means of SQL injection. The paper aims in developing a method that detects and prevents SQL injection attacks.