Get started
Keyword

SQL injection

Description: SQL injection is a code-injection attack in which malicious SQL commands are supplied through an application input to access or alter database data.
Wikidata ID: wiki/Q506059
OpenAlex ID: keywords/sql-injection
CryptDB
2011 · Raluca Ada Popa, Catherine M. S. Redfield, et al. · 1,156
Computer Security
1999 · Dieter Gollmann · 894
Pixy: a static analysis tool for detecting Web application vulnerabilities
2006 · N. Jovanovic, C. Kruegel, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 730
Countering code-injection attacks with instruction-set randomization
2003 · Gaurav S. Kc, Angelos D. Keromytis, et al. · Proceedings of the ACM Conference on Computer and Communications Security · 650
A Classification of SQL-Injection Attacks and Countermeasures
2006 · William G. J. Halfond, Jeremy Viegas, et al. · 621
Finding security vulnerabilities in java applications with static analysis
2005 · V. Benjamin Livshits, Monica S. Lam · 593
Using Static Analysis to Find Bugs
2008 · Nathaniel Ayewah, William Pugh, et al. · IEEE Software · 535
AMNESIA
2005 · William G. J. Halfond, Alessandro Orso · IEEE/ACM International Conference on Automated Software Engineering (ASE) · 527
Machine Learning-Based Network Vulnerability Analysis of Industrial Internet of Things
2019 · Maede Zolanvari, Marcio A. Teixeira, et al. · IEEE Internet of Things Journal · 526
The essence of command injection attacks in web applications
2006 · Zhendong Su, Gary Wassermann · 515
SQLrand: Preventing SQL Injection Attacks
2004 · Stephen W. Boyd, Angelos D. Keromytis · Lecture notes in computer science · 431
Automatically Hardening Web Applications Using Precise Tainting
2005 · Anh Nguyen-Tuong, Salvatore Guarnieri, et al. · IFIP advances in information and communication technology · 389
Using parse tree validation to prevent SQL injection attacks
2005 · Gregory Buehrer, Bruce W. Weide, et al. · 388
Sound and precise analysis of web applications for injection vulnerabilities
2007 · Gary Wassermann, Zhendong Su · Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation · 355
Automatic creation of SQL Injection and cross-site scripting attacks
2009 · Adam Kieyzun, Philip J. Guo, et al. · 341
Taint-enhanced policy enforcement: a practical approach to defeat a wide range of attacks
2006 · Wei Xu, Sandeep Bhatkar, et al. · 337
State of the Art: Automated Black-Box Web Application Vulnerability Testing
2010 · Jason Bau, Elie Bursztein, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 325
Web application security assessment by fault injection and behavior monitoring
2003 · Yao-Wen Huang, Shih-Kun Huang, et al. · International World Wide Web Conference (WWW) · 321
Defending Against Injection Attacks Through Context-Sensitive String Evaluation
2006 · Tadeusz Pietraszek, Chris Vanden Berghe · Lecture notes in computer science · 303
A Learning-Based Approach to the Detection of SQL Attacks
2005 · Fredrik Valeur, Darren Mutz, et al. · Lecture notes in computer science · 285
Advanced SQL Injection In SQL Server Applications
2002 · Chris Anley · 264
Machine Learning Models for Secure Data Analytics: A taxonomy and threat model
2020 · Rajesh Gupta, Sudeep Tanwar, et al. · Computer Communications · 228
SecuBat
2006 · Stefan Kals, Engin Kirda, et al. · International World Wide Web Conference (WWW) · 214
Is Your Cat Infected with a Computer Virus?
2006 · M.R. Rieback, B. Crispo, et al. · IEEE International Conference on Pervasive Computing and Communications · 213
Using positive tainting and syntax-aware evaluation to counter SQL injection attacks
2006 · William G. J. Halfond, Alessandro Orso, et al. · ACM SIGSOFT International Symposium on Foundations of Software Engineering (FSE) · 212
Works count: 5,910
Citation count: 40,150
Year
Topic
Type