An adaptive method preventing database from SQL injection attacks

摘要

SQL injection is an attack technique used to exploit code by altering back-end SQL statements through manipulating input. This paper proposes a novel methodology of preventing SQL injection attacks by building a protective adaptive shell. The protective shell is located between the application and the back-end database and has three layers to block illegal SQL statements. It could be adaptive after training and reduce the possibility of data leakage to protect the database system.