Lec 10: Web Security I: SQL injection

Question 1

How do websites work?

Answer 1

Question 2

(T/F): Most database and web scripting languages are untyped

Answer 2

True

Question 3

How can attackers exploit unforeseen user input?

Answer 3

Question 4

What is SQL and what is it used for? What are the data types normally used?

Answer 4

Question 5

How does SQL get used on the Web?

Answer 5

Question 6

What is the problem with this code?

Answer 6

Question 7

What is an input validation vulnerability and how does it work?

Answer 7

Question 8

Answer 8

Give back everything on user savage

Question 9

Answer 9

Comments out code after query

Question 10

Answer 10

Always true so gives you any info you want

Question 11

What are the different parts of HTTP in a URL?

Answer 11

Question 12

What is URL encoding?

Answer 12

Question 13

Why is URL encoding/user input into SQL a problem for more than authentication?

Answer 13

Question 14

What is the problem with this?

Answer 14

Question 15

What can you do to protect from unvalidated input issues?

Answer 15

Question 16

What is input Validation?

Answer 16

Strip out comments and (if possible) SQL keywords from input

Question 17

What is the problem with just stripping out quote in Input Validation?

Answer 17

What about names like O’Brien? Would not work for all possible valid inputs.

Question 18

What is better escaping input validation?

Answer 18

Question 19

What is the problem with better escaping input validation?

Answer 19

Quoting problems through cannonicalization (replacing ‘ with equivalent ASCII or other equivalents)

Question 20

What is integer field input validation?

Answer 20

Question 21

What are integer field validation issues?

Answer 21

Question 22

What is second-order SQL injection?

Answer 22

Question 23

What is an example of second-order SQL injection?

Answer 23

Question 24

What are prepared statements?

Answer 24

Question 25

What are the issues with prepared statements?

Answer 25

somewhat awkward syntax and can't be used in some cases

Question 26

What are mitigation strategies for SQL injection?

Answer 26

Question 27

What does WAG stand for?

Answer 27

Web Application Gateway

Question 28

What is WAG and what does it do?

Answer 28

Question 29

What are the disadvantages of WAG?

Answer 29

Question 30

What is was the CardSystems Attack of June 2005?

Answer 30

Question 31

What is Hold Security (2014)?

Answer 31