Preventing SQL injection attacks using AMNESIA

Abstract

AMNESIA is a tool that detects and prevents SQL injection attacks by combining static analysis and runtime monitoring. Empirical evaluation has shown that AMNESIA is both effective and efficient against SQL injection.

BibTeX

@inproceedings{Halfond-Orso:ICSE06,
  author    = {William G. J. Halfond and
               Alessandro Orso},
  title     = {Preventing {SQL} injection attacks using {AMNESIA}},
  booktitle = {ICSE},
  pages     = {795--798},
  publisher = {{ACM}},
  year      = {2006},
}

Preventing SQL injection attacks using AMNESIA

Abstract

Related papers