CAJ | 학술논문

SQL注入是目前Web应用程序攻击中最常见的一种攻击手段,但没有一种防御方法可以防止全部类型的SQL注入攻击.文章结合实例对SQL注入攻击进行简单介绍并对其进行分类,总结目前常用的防御方法.最后,文章提出数据加密防止SQL注入攻击的方法,通过加密算法加密数据库数据和所有用户输入,改变用户输入的原意进行防御,并给出实际应用中防止SQL注入攻击的建议.
SQL주입시목전Web응용정서공격중최상견적일충공격수단,단몰유일충방어방법가이방지전부류형적SQL주입공격.문장결합실례대SQL주입공격진행간단개소병대기진행분류,총결목전상용적방어방법.최후,문장제출수거가밀방지SQL주입공격적방법,통과가밀산법가밀수거고수거화소유용호수입,개변용호수입적원의진행방어,병급출실제응용중방지SQL주입공격적건의.
SQL injection is one of the most common attacks in Web application attacks, but there is no defense against all types of SQL injection attacks. This paper briefly introduces the SQL injection attacks and classifies them into a practical example, it sum?marizes the commonly used methods of defense. Finally, the article proposes the method of data encryption to prevent SQL injec?tion attack, through the encryption algorithm to encrypt the database data and all user input, to change the original intent of the us?er input, and gives the practical application to prevent SQL injection attacks.