An old risk in the new era: SQL injection in cloud environment. (1st January 2021)

• Record Type: Journal Article
• Authors: Xiao, Fu; Zhijian, Wang; Meiling, Wang; Ning, Chen; Yue, Zhu; Lei, Zhang; Pei, Wang; Xiaoning, Cao
• Is Part Of: International journal of grid and utility computing. Volume 12:Number 1(2021)
• Page Start: 43
• Page End: 54
• Publication Date: 2021-01-01
• Subjects: SQL injection -- virtualisation -- SaaS -- PaaS -- cloud computing; Electronic data processing -- Distributed processing -- Periodicals; Electronic commerce -- Management -- Computer programs -- Periodicals; 004.605
• Languages: English
• ISSNs: 1741-847X

Abstract

After haunting all the software engineers for more than 26 years since it was discovered and classified in 2002, SQL injection still poses a most serious threat to developers, maintainers and users of web applications even into the brand new cloud era. SaaS, PaaS and IaaS virtualisation technologies which are widely used by cloud computing seemed to fail the enhancement of security against such an attack. We strive to study the mechanism and principles of SQL injection attack in order to help the information security personnel to understand and manage such risks.