الفهرس 
1.1 IntroductionOnly 14 pages are availabe for public view
 |  | from | 71 |  |  |
| | | from | 71 | | |
Abstract
With the recent rapid increase in interactive web applications that employ back-end database services, a SQL injection attack has become one of the most serious security threats. This type of attack can compromise confidentiality and integrity of information and database. Actually, an attacker intrudes to the web application database and consequently, access to data. For preventing this type of attacks, different techniques have been proposed by researchers but they are not enough because most of implemented techniques cannot stop all type of attacks. In this thesis the proposed technique is detection of SQL injection and prevention based on first order, second order and blind SQL injection attacks online. The proposed technique dependant on black box testing concept. This technique implemented by JAVA language and evaluated for seven types of SQL injection attacks. Experimental results have shown that the proposed technique is efficient related to execution time overhead. Moreover, we have compared the proposed technique with the popular web application vulnerabilities scanner techniques. The most advantages of the proposed technique are its easiness to adopt by software developer, having the same syntactic structure as current popular record set retrieval methods and solving the legacy system problem.