Prevention techniques of code injection/vulnerabilities for web applications

Computer Engineering

Security remains a major challenge to the entire web community. Web-applications are easily compromised due to security reason. Moreover, one of the major reason for exploitation of web application is user input i.e. user input is being processed in an unsafe manner. SQL injection has been a threat for more than 15 years, so it is astonishing to recognize that it is still one of the top data threats to organizations. SQL Injection is an attack used to exploit user applications that build SQL statements from user-supplied input. Proper neutralization of special characters used in an SQL Command is needed to avoid the SQL injection. Existing IDS base prevention system working on predefined rules but they are not enough and stable. So, in order to prevent web application database from SQL Injection Attack, we propose a prevention technique. In this Prevention Technique, threat logs are generated of the attacker using SNORT. Attackers request will forward and log in Honeypot. From the Honeypot, a Block list would be created; this list will be blocked by iptables in Web Application Machine. If an attacker is successful to bypass a layer of SNORT, MAC address of the attacker will be blocked in iptables and the database is already secured with ASCII which will not allow any attacker to attack the database.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.