hey all, I am working for building a firewall for prevention of SQL Injection in website. I am planning this through artificial neural network. need your comments and suggestions on this.
if anybody is working on similar then guidance is needed..
thanks in advance
Chetan
detect injection attack by matching html inputs versus sql syntax , if it matches, and if the input is encoded in URI requests instead from bean, reject the input like in most JSF implementations.
there are two types of SQL attacks:
1. SQL statement
2. XSS statement
what in case of false positive..
mean if we reject any valid html input, it's only problem which occurring...
for XSS protection, there is nothing except that the codes itself should check before taking in input parameter if it contains chain of extra structs.
Ok, so let me see if I have this right.
An html input, can be an SQL command or XSS data? and so the firewall will look at the html and refuse to pass any valid SQL commands? But the XSS data, might have a sledge of unexpected data, and if the SQL input command does not refuse records with extra data, it can cause a buffer overflow which will break the SQL interpreter?
So Chetan you are planning to use weighted string analysis as part of your firewall?
nops, I am planning to neural network(back propagation algorithm) for learning purpose.
no, they both are different projects.
weighted string matching is completed. :)
Thas wonderful Chetan, really great in such short span of time. it wwould have taken me 2 weeks
thanks all, today I will be with some more rubbish here hopefully.
your cooperation is real booster for me..
@ Manuel: does you mean that, XSS attack is not a SQL Injection, if it is not then please tell me in what category XSS attacks falls.
thanks in advance
Chetan
- Badges
- Science topic
- Similar topics
- Computer Science and Engineering
- Artificial Intelligence