Free Delivery Over $100
|
|
|||
|
||||
OverviewSince 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). Since most developers are not experienced software security practitioners, a solution for correctly removing SQLIVs that does not require security expertise is desirable. In this paper, an automated fix generation algorithm for removing SQLIVs by replacing SQL statements with prepared SQL statements is described. Automated fix generation is a type of automated code generation that analyzes project artifacts containing faults and uses the analysis to generate fault free alternative or replacement code. Prepared SQL statements have a static structure and take type-specific input parameters, which prevents SQL injection attack input from changing the structure and logic of a statement. The automated fix algorithm is evolved over the course of preparing for and analyzing the results of four formative and evaluative case studies. Full Product DetailsAuthor: Stephen Thomas (University of Edinburgh UK)Publisher: VDM Verlag Dr. Mueller E.K. Imprint: VDM Verlag Dr. Mueller E.K. Dimensions: Width: 17.00cm , Height: 0.40cm , Length: 24.40cm Weight: 0.141kg ISBN: 9783836464963ISBN 10: 3836464969 Pages: 80 Publication Date: 14 February 2008 Audience: General/trade , General Format: Paperback Publisher's Status: Active Availability: In Print  This item will be ordered in for you from one of our suppliers. Upon receipt, we will promptly dispatch it out to you. For in store availability, please contact us. Table of ContentsReviewsAuthor InformationTab Content 6Author Website:Countries AvailableAll regions |
||||
