A comparative analysis and performance evaluation of web application protection techniques against injection attacks. (9th March 2020)

• Record Type: Journal Article
• Authors: Ali, Nabeel Salih; Shibghatullah, Abdul Samad Bin; Alhilali, Ahmed Hazim; Al-Khammasi, Salam; Kadhim, Mohammed Falih; Fatlawi, Hayder K.
• Is Part Of: International journal of mobile communications. Volume 18:Number 2(2020)
• Page Start: 196
• Page End: 228
• Publication Date: 2020-03-09
• Subjects: web applications -- structured query language injection -- SQLI -- protection techniques -- performance evaluation -- web attacks -- defensive approaches -- defensive tools -- injection -- web security -- protective methods -- injection attacks -- high-performance; Mobile communication systems -- Periodicals; Wireless communication systems -- Periodicals; 384.53
• Languages: English
• ISSNs: 1470-949X

Abstract

Nowadays, most animation activities are based on internet-enabled applications. But, the majority of web developers have ignored the privacy and security aspects of each application, turning them into attractive targets for security issues and therefore increasing the attacker's concerning. Structured query language injection attack (SQLIA) is the prevalent and dominant type of severe web application attacks. This paper provides a comparative study for web application protection techniques and evaluates their performance against SQLIA by conducting a detailed review of various SQLIA previously detected and prevented by protection techniques, a summary and analysis of a critical review of the defensive techniques that were done to address such attack, performance comparison of the different protective approaches through an evaluation using performance metrics to identify efficient and high-performance techniques. Finally, the paper highlights and focuses on the critical and vital directions or protection approaches that require more studies by future research.