sql injection

TechRepublic Resources

• sort by:
• Relevance
• Date
• Popularity

Is your site safe from SQL injection attacks?

Microsoft and HP announced yesterday that they are providing free tools to help network administrators to deal with the increase in SQL injection attacks over the last six months. by Andy Moon

Tags: Vulnerability, SQL, SQL Injection, Attack, Programming Languages, Security, Databases, Software Development, Software/Web Development, Enterprise Software, Software, Data Management, Andy Moon

Blog posts 2008-06-24

Security news roundup: December 16

Here's a collection of recent security vulnerabilities and alerts, which covers a backdoor in HP and Compaq laptops, the release of Nmap 4.50, the public release of Windows Vista SP1 release candidate, source packages of SquirrelMail being compromised, an SQL Injection vulnerability found in Typo3 CMS, the release of 11...

Tags: Hewlett-Packard Co., Vulnerability, Microsoft Windows Vista, Microsoft Corp., SQL Injection, iDefense, Laptop Computer, December, Microsoft Windows, Security, Operating Systems, Software, Paul Mah

Blog posts 2007-12-16

UN Web site is defaced via SQL Injection

"by two hackers calling themselves kerem125, M0sted, and Gsy"There are three kinds of mathematitions; those who can count, and those who can't.hehe.. that line made me giggle; I had to leave a quick post. I'm probably reading the original line from the article wrong but "two hackers" and three names...

Tags: Hacking, SECURITY, Neon Samurai, UN web site, SQL injection, SQL

Discussion threads 2007-08-13

UN Web site is defaced via SQL Injection

This morning the United Nations Web site was defaced by three hackers calling themselves kerem125, M0sted, and Gsy. The group exploited a typical SQL Injection vulnerability found in the United Nations ASP / ADODB Web servers.Instead of transcripts of the Secretary-General Ban Ki-Moon's speeches viewers were greeted with the...

Tags: Web, SQL, SQL Injection, Attack, UN Web Site, Justin Fielding

Blog posts 2007-08-12

Eliminate SQL Injection Attacks Painlessly With LINQ

As developers assume more of the security burden, the first web application vulnerability that many developers learn about is a particularly dangerous form of command injection known as SQL injection. Because it's so well-known, SQL injection attacks are common, dangerous, and pervasive. Fortunately, developers can prevent SQL injection easily once...

Tags: Developer, SQL, SQL Injection, LINQ, Programming Languages, Security, Databases, Software Development, Software/Web Development, Enterprise Software, Software, Data Management

White papers 2007-05-24

Use the revised OWASP Top Ten to secure your Web applications -- Part 3

Injection flaws, specifically SQL injection vulnerabilities, can present the greatest business risk in a Web application environment. In this, the third in a series on the revised OWAP Top Ten Web Application Vulnerabilities, Tom Olzak explains the nature of injection flaws and SQL injection attacks and then makes recommendations for...

Tags: Web Application, SQL Injection, Security

Download resources 2007-03-23

Lock it down: Use the revised OWASP Top Ten to secure your Web applications -- Part 3

This article is also available as a TechRepublic download.Inthis installment of my series on the revised OWASP Top Ten List of Web applicationvulnerabilities, I take a look at number two on the list--injection flaws. We'llbriefly explore injection flaws in general, and then dig into more detail onSQL injection vulnerabilities. Susceptibility...

Tags: Programming languages, Databases, SECURITY, Tom Olzak, Web application, SQL, SQL injection, SQL Statement, database

Technical articles 2007-03-23

SQL Injection Attacks

SQL Injection AttacksMy web server has MsSql at the back-end and asp at the front-end. A UserID, Password, and a dynamically generated code field are present on the website for the user to logon. There are other features in the website such as search n advanced search.At the back-end, we...

Tags: SECURITY, Databases, SQL injection, SQL

Q&A 2006-04-24

Application Layer Intrusion Detection for SQL Injection

SQL injection attacks potentially affect all applications, especially web applications, that utilize a database backend. While these attacks are generally against the applications and not the database directly, there are some techniques that can be deployed to mitigate the risk at the database server. Database intrusion detection systems are often...

Tags: Intrusion Detection, SQL, SQL Injection, Database Intrusion Detection System, Storage, Databases, Hardware, Enterprise Software, Software, Data Management

White papers 2006-03-12

Protect databases from SQL injection attacks

In a SQL injection, attackers attempt to damage your database by a "injecting" a SQL statement into another statement. Learn simple methods for preventing injections from penetrating your system. SQL injection is a strategy for attacking databases. The attacker "injects" a SQL statement into another statement—often to...

Tags: SQL, Databases, Arthur Fuller, Programming languages, ASP Page, SQL injection, injection, database, SQL Server Newsletter, TechRepublic Inc., Software Development, Software/Web Development, Enterprise Software, Software, Data Management

Technical articles 2005-07-21

Fend off the next SQL Injection attack with a properly secured database

As long as Web applications are used to provide access to data, SQL Injection will continue to be a threat. SQL Injection is typically used to accomplish one of four objectives: bypass authentication, glean information, inject new or alter existing data, perform a denial of service attack, or gain access...

Tags: SQL, SQL Injection, Programming Languages, Databases, Security, Software Development, Software/Web Development, Enterprise Software, Software, Data Management

Download resources 2005-06-27

DOWNLOAD: Fend off the next SQL Injection attack

http://techrepublic.com.com/5138-1009-5764215.htmlHave you had to fend off an SQL Injection attack? How did you defend yourself?[b]Can you offer in security advice for the TechRepublic community?[/b]FinallyI finally got around to downloading and reading this. Good article. Atleast its practical enough to give me the basics on trying it on our Web/SQL server...

Tags: SECURITY

Discussion threads 2005-06-27

Secure SQL Server: Encryption and SQL injection attacks

By Susan Sales Harkins and Mike GunderloyWelcome to the final installment of our series on SQL Server security. So far, we've explained how to set up your SQL Server, how to manage users and groups, how to manage objects and permissions, and how to set up application roles. Today we're...

Tags: Databases, Enterprise software, Lark Group, Inc., SQL, SQL injection, Microsoft SQL Server, encryption, server, Secure SQL Server, security

Technical articles 2003-10-17

MSDN Webcast: Protecting Your System From SQL Injection Attacks - Level 200

SQL injection is one of the most serious threats a database can encounter. When an application is designed without regard for a comprehensive defense, it can provide an attack surface highly vulnerable to hackers skilled in SQL syntax. Once a hacker injects rogue SQL commands through a user interface, not...

Tags: Microsoft Developer Network, Webcast, SQL, SQL Injection, Programming Languages, Databases, Security, Software Development, Software/Web Development, Enterprise Software, Software, Data Management

Webcasts

MSDN Webcast: Writing Secure Code (Part 2 of 3): Threat Defense (Level 200)

Does user input help you to build your SQL statements? If so, you may be a victim of SQL injection. This webcast explains best practices for applying security principles throughout the development process. The webcast discusses learn effective strategies for defending common security threats such as buffer overruns, cross-site scripting,...

Tags: Microsoft Developer Network, Webcast, SQL, SQL Injection, Programming Languages, Digital Media, Databases, Security, Software Development, Software/Web Development, Consumer Electronics, Personal Technology, Enterprise Software, Software, Data Management

Webcasts

Additional Resources

Preventing that Injection

While many of us have heard of SQL injection attacks, we may not know the specifics of how the attacks occur and what can be done to prevent them. In an excellent article in a series on SQL Server security, Marcin Policht details the attack and how to guard against...

Tags: Databases, Programming languages, SECURITY

Discussion threads 2004-10-18

SQL Power Injector 1.2 released

In case you missed it, version 1.2 of SQL Power Injector was released late last week. SQL Power Injector is a graphical application created using the .NET framework. As its name suggests, it helps the penetrating tester inject SQL commands on a Web page. It's SQL Server, Oracle, MySQL,...

Tags: SQL, Mode, SQL Power Injector, Programming Languages, Databases, Software Development, Software/Web Development, Enterprise Software, Software, Data Management, Paul Mah

Blog posts 2007-10-07

Application-Level Attacks: Phishing and Session Hijacking (Level 300)

This webcast will provide in-depth demonstrations of a variety of Web application hacking techniques such as SQL Injection and Cross Site Scripting XSS and show how to identify whether an application is vulnerable to these types of attacks. Discover how the SQL Injection hacking methodology can transfer to other areas,...

Tags: Technique, XSS, Attack, Hacking, Phishing, Productivity, Keyboards, Security, Spam And Phishing, Hardware, Peripherals

Webcasts

Lock it down: Use the revised OWASP Top Ten to secure your Web applications -- Part 3

What about parameters?I've read other articles that list use of SQL parameters as the best way to prevent SQL injection attacks. Was this a simple oversight in your article or are parameters not really that effective?

Tags: Programming languages, Scott @..., Web application

Discussion threads 2007-03-29

Introduction to Dependency Injection With Microsoft Enterprise Library Unity Application Block

This webcast introduces the Microsoft Enterprise Library Unity Application Block - a lightweight, extensible dependency injection container with support for constructor, property, and method call injection. Dependency injection is a popular software engineering technique that supports loosely-coupled design and facilitates application testability and maintainability. The presenter discusses the common scenarios...

Tags: Injection, Microsoft Corp., Dependency Injection, Productivity, Development Tools, Cloud Computing, Software Development, Software/Web Development

Webcasts 2008-07-11