Publication Details

Kompromitace dat pomocí SQL Injection, část I.

ANTAL, L.; BARABAS, M.; HANÁČEK, P. Kompromitace dat pomocí SQL Injection, část I. DSM Data Security Management, 2014, roč. 18, č. 1, s. 36-39. ISSN: 1211-8737.

English title

Data compromise by SQL Injection, part I.

Type

journal article

Language

Czech

Authors

Antal Lukáš, Ing.
Barabas Maroš, Ing., Ph.D.
Hanáček Petr, doc. Dr. Ing. (DITS)

Keywords

attack, compromise, injection, OWASP, SQL, validation, web

Abstract

SQL Injection vulnerability (SQL injection or abbreviation SQLi) has been known since the first web information systems connected to a database. Yet even today vulnerability is often misused by attackers to steal sensitive data. The first part of this article describes the most common uses of this vulnerability for database data theft. In other articles we describe lesser known methods of attacks and defense.

Published

2014

Pages

36–39

Journal

DSM Data Security Management, vol. 18, no. 1, ISSN 1211-8737

BibTeX

@article{BUT111546,
  author="Lukáš {Antal} and Maroš {Barabas} and Petr {Hanáček}",
  title="Kompromitace dat pomocí SQL Injection, část I.",
  journal="DSM Data Security Management",
  year="2014",
  volume="18",
  number="1",
  pages="36--39",
  issn="1211-8737",
  url="https://www.fit.vut.cz/research/publication/10558/"
}