Forms and Validity
SQL injection attack (SQLIA) is considered one of the top 10 web application vulnerabilities of 2007 and 2010 by the Open Web Application Security Project. The attacking vector contains five main sub-classes depending on the technical aspects of the attack's deployment:
- Classic SQLIA
- Inference SQL injection
- Interacting with SQL injection
- Database management system-specific SQLIA
- Compounded SQLIA
- SQL injection + insufficient authentication
- SQL injection + DDoS attacks
- SQL injection + DNS hijacking
- SQL injection +XSS
A complete overview of the SQL Injection classification is presented in the next figure. The Storm Worm is one representation of Compounded SQLIA.
This classification represents the state of SQLIA, respecting its evolution until 2010—further refinement is underway.
Read more about this topic: SQL Injection
Famous quotes containing the words forms and, forms and/or validity:
““There is no exquisite beauty,” says Bacon, Lord Verulam, speaking truly of all the forms and genera of beauty, “without some strangeness in the proportion.””
—Edgar Allan Poe (1809–1849)
“A painter told me that nobody could draw a tree without in some sort becoming a tree; or draw a child by studying the outlines of its forms merely,—but by watching for a time his motions and plays, the painter enters into his nature and can then draw him at will in every attitude.”
—Ralph Waldo Emerson (1803–1882)
“It does not follow, because our difficulties are stupendous, because there are some souls timorous enough to doubt the validity and effectiveness of our ideals and our system, that we must turn to a state controlled or state directed social or economic system in order to cure our troubles.”
—Herbert Hoover (1874–1964)