EVALUATING THE SECURITY RISKS AND PROTECTION STRATEGIES FOR SQL INSERT QUERIES AGAINST INJECTION ATTACKS

Аннотация

The study explores the security risks associated with the use of Insert queries generated from user-provided data. In order to evaluate the vulnerability of Insert queries to SQL injection attacks and identify effective defense strategies, we conducted an experiment. This experiment demonstrated how an attacker could extract sensitive information, such as the database user credentials, details about the database itself, and the version of the server being used. Moreover, during a root user session, access to the attacked server’s file system was achievable. Our findings emphasize that, to safeguard against such vulnerabilities, it is crucial to implement stringent filtering of user input data. Keywords: SQL injection, Insert queries, user input validation, security risks, database vulnerabilities, protection strategies, server access, data filtering.