A Dynamic SQL Injection Vulnerability Test Case Generation Model Based on the Multiple Phases Detection Approach

摘要

SQL Injection Vulnerability (SQLIV) is one of the topmost serious threats to web applications. Penetration test is one of the most important approaches to detect SQLIV. The test case generation issue critically affects the effectiveness of penetration test. Thus, research on the approaches to improve coverage and efficiency of test case generation process in SQLIV penetration test is of great importance. This paper proposes a formalized SQLIV test case generation model. i) We propose Global Test Rule (GTR), which is used to generate test cases in the process of SQLIV detection. ii) We present SQL injection vulnerability Test Matrix (SQLTM) model, which is a three dimensional matrix, to generate the set of GTR. iii) Based on the GTR generated by the above steps, we propose a Multiple Phases Detection Approach (MPDA) to implement the dynamic generation of test cases and detection procedure control, and then we give its algorithms in detail. Experiment results show that our approach can improve the coverage, precision and efficiency of SQLIV detection by a comparison with two real products for enterprise projects.