Sponsored White Papers, Webcasts, and Downloads
TechRepublic Resources
- MSDN Webcast: Digital Blackbelt Series: Defending the Database (Part 1 of 2): The sql injection Attack in Detail (Level 300)
- Developers the world over underestimate the seriousness of a SQL Injection Attack. This webcast discusses how a Mal-Tech might find and approach your box, discover your schema, table, and field names, steal your data, corrupt your table records, add himself as an administrator, reduce your own admin rights, pollute your...
- Tags: Microsoft Developer Network, Webcast, SQL, SQL Injection, Programming Languages, Security, Databases, Software Development, Software/Web Development, Enterprise Software, Software, Data Management
- Webcasts
- MSDN Webcast: Writing Secure Code (Part 2 of 3): Threat Defense (Level 200)
- Does user input help you to build your SQL statements? If so, you may be a victim of SQL injection. This webcast explains best practices for applying security principles throughout the development process. The webcast discusses learn effective strategies for defending common security threats such as buffer overruns, cross-site scripting,...
- Tags: Microsoft Developer Network, Webcast, SQL, SQL Injection, Programming Languages, Digital Media, Databases, Security, Software Development, Software/Web Development, Consumer Electronics, Personal Technology, Enterprise Software, Software, Data Management
- Webcasts
- MSDN Webcast: Results Interpretation of Automated Web Attacking: Tips and Tricks (Level 200)
- While automated Web application vulnerability assessment tools are excellent productivity tools for developers and security professionals, these tools often yield some false-positive results. Would you like to know what you're looking at? This webcast will examine how to interpret the results of the following types of Web attacks: Cross-site scripting,...
- Tags: Microsoft Developer Network, Web, Webcast, Vulnerability Assessment, SQL, SQL Injection, Tool, Productivity, Security
- Webcasts
- Hacker Techniques: Windows Malware and Blind sql injection
- They keep banging on systems, crippling performance, damaging the files and laying waste to the bandwidth. How does one understands what makes this stuff tick? With a little creativity and some free, open source software the webcast shows how to analyze that malware and understand many of the changes that...
- Tags: Technique, Malware, SQL, Microsoft Windows, SQL Injection, Hacker, SANS Institute, Programming Languages, Security, Databases, Viruses And Worms, Software Development, Software/Web Development, Enterprise Software, Software, Data Management
- Webcasts
- MSDN Webcast: Protecting Your System From sql injection Attacks - Level 200
- SQL injection is one of the most serious threats a database can encounter. When an application is designed without regard for a comprehensive defense, it can provide an attack surface highly vulnerable to hackers skilled in SQL syntax. Once a hacker injects rogue SQL commands through a user interface, not...
- Tags: Microsoft Developer Network, Webcast, SQL, SQL Injection, Programming Languages, Databases, Security, Software Development, Software/Web Development, Enterprise Software, Software, Data Management
- Webcasts
- Security news roundup: December 16
- Here's a collection of recent security vulnerabilities and alerts, which covers a backdoor in HP and Compaq laptops, the release of Nmap 4.50, the public release of Windows Vista SP1 release candidate, source packages of SquirrelMail being compromised, an SQL Injection vulnerability found in Typo3 CMS, the release of 11...
- Tags: Hewlett-Packard Co., Vulnerability, Microsoft Windows Vista, Microsoft Corp., SQL Injection, iDefense, Laptop Computer, December, Microsoft Windows, Security, Operating Systems, Software, Paul Mah
- Blog posts 2007-12-16
- Eliminate sql injection Attacks Painlessly With LINQ
- As developers assume more of the security burden, the first web application vulnerability that many developers learn about is a particularly dangerous form of command injection known as SQL injection. Because it's so well-known, SQL injection attacks are common, dangerous, and pervasive. Fortunately, developers can prevent SQL injection easily once...
- Tags: Developer, SQL, SQL Injection, LINQ, Programming Languages, Security, Databases, Software Development, Software/Web Development, Enterprise Software, Software, Data Management
- White papers 2007-05-24
- UN Web site is defaced via sql injection
- This morning the United Nations Web site was defaced by three hackers calling themselves kerem125, M0sted, and Gsy. The group exploited a typical SQL Injection vulnerability found in the United Nations ASP / ADODB Web servers.Instead of transcripts of the Secretary-General Ban Ki-Moon's speeches viewers were greeted with the...
- Tags: Web, SQL, SQL Injection, Attack, UN Web Site, Justin Fielding
- Blog posts 2007-08-12
- UN Web site is defaced via sql injection
- "by two hackers calling themselves kerem125, M0sted, and Gsy"There are three kinds of mathematitions; those who can count, and those who can't.hehe.. that line made me giggle; I had to leave a quick post. I'm probably reading the original line from the article wrong but "two hackers" and three names...
- Tags: Hacking, SECURITY, Neon Samurai, UN web site, SQL injection, SQL
- Discussion threads 2007-08-13
- Use the revised OWASP Top Ten to secure your Web applications -- Part 3
- Injection flaws, specifically SQL injection vulnerabilities, can present the greatest business risk in a Web application environment. In this, the third in a series on the revised OWAP Top Ten Web Application Vulnerabilities, Tom Olzak explains the nature of injection flaws and SQL injection attacks and then makes recommendations for...
- Tags: Web Application, SQL Injection, Security
- Download resources 2007-03-23
- Lock it down: Use the revised OWASP Top Ten to secure your Web applications -- Part 3
- This article is also available as a TechRepublic download.Inthis installment of my series on the revised OWASP Top Ten List of Web applicationvulnerabilities, I take a look at number two on the list--injection flaws. We'llbriefly explore injection flaws in general, and then dig into more detail onSQL injection vulnerabilities. Susceptibility...
- Tags: Programming languages, Databases, SECURITY, Tom Olzak, Web application, SQL, SQL injection, SQL Statement, database
- Technical articles 2007-03-23
- Fend off the next sql injection attack with a properly secured database
- As long as Web applications are used to provide access to data, SQL Injection will continue to be a threat. SQL Injection is typically used to accomplish one of four objectives: bypass authentication, glean information, inject new or alter existing data, perform a denial of service attack, or gain access...
- Tags: SQL, SQL Injection, Programming Languages, Databases, Security, Software Development, Software/Web Development, Enterprise Software, Software, Data Management
- Download resources 2005-06-27
- Protect databases from sql injection attacks
- In a SQL injection, attackers attempt to damage your database by a "injecting" a SQL statement into another statement. Learn simple methods for preventing injections from penetrating your system. SQL injection is a strategy for attacking databases. The attacker "injects" a SQL statement into another statement—often to...
- Tags: SQL, Databases, Arthur Fuller, Programming languages, ASP Page, SQL injection, injection, database, SQL Server Newsletter, TechRepublic Inc., Software Development, Software/Web Development, Enterprise Software, Software, Data Management
- Technical articles 2005-07-21
- sql injection Attacks
- SQL Injection AttacksMy web server has MsSql at the back-end and asp at the front-end. A UserID, Password, and a dynamically generated code field are present on the website for the user to logon. There are other features in the website such as search n advanced search.At the back-end, we...
- Tags: SECURITY, Databases, SQL injection, SQL
- Q&A 2006-04-24
- DOWNLOAD: Fend off the next sql injection attack
- http://techrepublic.com.com/5138-1009-5764215.htmlHave you had to fend off an SQL Injection attack? How did you defend yourself?[b]Can you offer in security advice for the TechRepublic community?[/b]FinallyI finally got around to downloading and reading this. Good article. Atleast its practical enough to give me the basics on trying it on our Web/SQL server...
- Tags: SECURITY
- Discussion threads 2005-06-27
- Secure SQL Server: Encryption and sql injection attacks
- By Susan Sales Harkins and Mike GunderloyWelcome to the final installment of our series on SQL Server security. So far, we've explained how to set up your SQL Server, how to manage users and groups, how to manage objects and permissions, and how to set up application roles. Today we're...
- Tags: Databases, Enterprise software, Lark Group, Inc., SQL, SQL injection, Microsoft SQL Server, encryption, server, Secure SQL Server, security
- Technical articles 2003-10-17
Additional Resources
- Preventing that Injection
- While many of us have heard of SQL injection attacks, we may not know the specifics of how the attacks occur and what can be done to prevent them. In an excellent article in a series on SQL Server security, Marcin Policht details the attack and how to guard against...
- Tags: Databases, Programming languages, SECURITY
- Discussion threads 2004-10-18
- SQL Power Injector 1.2 released
- In case you missed it, version 1.2 of SQL Power Injector was released late last week. SQL Power Injector is a graphical application created using the .NET framework. As its name suggests, it helps the penetrating tester inject SQL commands on a Web page. It's SQL Server, Oracle, MySQL,...
- Tags: SQL, Mode, SQL Power Injector, Programming Languages, Databases, Software Development, Software/Web Development, Enterprise Software, Software, Data Management, Paul Mah
- Blog posts 2007-10-07
- Application-Level Attacks: Phishing and Session Hijacking (Level 300)
- This webcast will provide in-depth demonstrations of a variety of Web application hacking techniques such as SQL Injection and Cross Site Scripting XSS and show how to identify whether an application is vulnerable to these types of attacks. Discover how the SQL Injection hacking methodology can transfer to other areas,...
- Tags: Technique, XSS, Attack, Hacking, Phishing, Productivity, Keyboards, Security, Spam And Phishing, Hardware, Peripherals
- Webcasts
- Lock it down: Use the revised OWASP Top Ten to secure your Web applications -- Part 3
- What about parameters?I've read other articles that list use of SQL parameters as the best way to prevent SQL injection attacks. Was this a simple oversight in your article or are parameters not really that effective?
- Tags: Programming languages, Scott @..., Web application
- Discussion threads 2007-03-29
- << Previous
- page 1 of 1
- Next >>