Abstract:<p>Structure Query Language Injection Attack is among the top 10‐security threats that can be used on the web application to cause severe damage or gain unauthorized data access to the application server. Many reports have indicated an average of 64% of global websites are at risk of being attack by SQL injection, and many of the top companies have experienced thousands of attacks attempts through SQL injection. The current trend shows the increasing number of attacks factor as a result of the daily deployment of these applications without security detection and prevention mechanism is placed. To overcome this challenge, researches in academia and industry presented a proposal that automates SQL injection vulnerabilities assessment on the tested application. Current studies show the need to enhance techniques of these proposals to reduce the false alarms. In this study, we propose a component‐based technique to minimize the incidence of inaccurate results, as well as enable the ease of improving the proposed solution. The study uses three costumed applications as tested to evaluate the accuracy of the proposed solution. Each of these testbed consists of several vulnerabilities where the experimental evaluation performs to test the proposed tool. An empirical evaluation is carried out on three vulnerable custom websites to evaluate the effectiveness of the proposed study. The experiment results indicated significant results in terms of high accuracy. On the other hand, the proposed solution also has better capabilities to analyze page response based on four different techniques. Moreover, the proposed solution is the only solution that performs stored procedure attacks SQL and bypass login authentication even if the returned records are limited restriction is applied.</p>

Securing Relational Databases against Security Vulnerabilities: A Case of Microsoft SQL Server and PostgreSQL

Exploring the intersection of network security and database communication: a PostgreSQL Socket Connection case study

A Review of Database Security Concepts, Risks, and Problems

Database Security: A Historical Perspective

Database Security Mechanisms in MySQL

The Study of Password Security of Access 2010

Exploring Defense of SQL Injection Attack in Penetration Testing

A Study of Online Database Servers: The Case of SQL - Injection, How Evil that could be?

Database Security Issues and Challenges in Cloud Computing

Comparative evaluation of different methods of "Homomorphic Encryption" and "Traditional Encryption" on a dataset with current problems and developments

A Brief Comparison of Two Enterprise-Class RDBMSs

Survey of Security in Database

Secure SQL Server - Enabling Secure Access to Remote Relational Data

SQL queries over encrypted databases: a survey

Database Security: An Overview and Analysis of Current Trend

Classification of Various Security Techniques in Databases and their Comparative Analysis

Detection of structure query language injection vulnerability in web driven database application

Formal Analysis of Vulnerabilities of Web Applications Based on SQL Injection (Extended Version)

A Comprehensive Health Electronic Record System with MySQL RDMS, QGIS Database and MongoDB

A Secure Data Storage Approach for Online Examination Platform using Cloud DBAAS Service