Hacking Prevention using Positive Tainting

This paper on Hacking prevention using positive tainting presents a new highly automated approach for protecting Web applications against SQL injection that has both conceptual and practical advantages over most existing techniques. From a conceptual standpoint, the approach is based on the novel idea of positive tainting and on the concept of syntax-aware evaluation. You can also Subscribe to FINAL YEAR PROJECT'S by Email for more such projects and seminar.



SQL Injection Attacks (SQLIAs) are one of the most significant of such threats. SQLIAs have become increasingly frequent and pose very serious security risks because they can give attackers unrestricted access to the databases that underlie Web applications.

This project has been implemented in the Web Application SQL-injection preventer (WASP) tool, which we used to perform an empirical evaluation on a wide range of Web applications that we subjected to a large and varied set of attacks and legitimate accesses. This report contains Code Snippet, data flow diagram, system architecture, testing, state-transition diagram, use case diagram etc. and will help computer science and IT students in there final year project and seminar work.

Author:- Aastha Goyal, Sumedha Dethe, Khushbu Chauhan & Khushbu Shah

Download

Advertisements:-