Lecture 3

Question 1

What is an “SQL Injection”? (!!)

Answer 1

Using SQL code in the user interface to directly manipulate the database

Question 2

List and explain the 3 common strategies for SQL injections: (!!)

Answer 2

-Single channel: using the same channel to both inject the code and recieve results.

-Multichannel: using a channel to inject the code and recieving the results through a different channel.

-Observational: observing the returned behavior without intent of getting data from the database. Can be used to plan for a future attack.

Question 3

Name and explain 4 good practices that combat SQL injections: (!!)

Answer 3

1- Monitoring and tracking: tracking errors and resource usage can show indications of attacks.

2- Direct testing: testing SQL injections to determine the risk and how much damage an intruder can do.

3- Sanitizing data: blocking certain keywords and symbols that are used in SQL. ie, OR, AND, “”, etc.

4- Generic error messages: gives the attacker minimal information on the type of error or where it occurred.