A Java Source-code SQL Injection Attack Detection Algorithm Based on Static Analysis
Tian Wang, Lihao Wei, Hong Zou
Available Online November 2012.
- https://doi.org/10.2991/citcs.2012.167How to use a DOI?
- static analysis; SQL injection attack; abstract syntax tree.
- This paper researches the method of SQL injection attack detection and the principle of static analysis scanning, and presents a Java source-code SQL injection attack detection algorithm. The detection algorithm includes these steps: lexical analysis of source code, parsing of source code, constructing abstract syntax tree of source code, defining rules, abstract syntax tree traversal, tracking problems, detecting possible paths of SQL injection attack etc. Test results show the proposed detection algorithm in this paper performs perfectly and has higher recognition rate.
- Open Access
- This is an open access article distributed under the CC BY-NC license.
Cite this article
TY - CONF AU - Tian Wang AU - Lihao Wei AU - Hong Zou PY - 2012/11 DA - 2012/11 TI - A Java Source-code SQL Injection Attack Detection Algorithm Based on Static Analysis BT - 2012 National Conference on Information Technology and Computer Science PB - Atlantis Press SP - 653 EP - 655 SN - 1951-6851 UR - https://doi.org/10.2991/citcs.2012.167 DO - https://doi.org/10.2991/citcs.2012.167 ID - Wang2012/11 ER -