Prevention of SQL Injection Attacks using Query Hashing Technique

Abstract

Web applications are a vital part of day-to-day life. Many critical services like shopping, health, banking, data communication and transport are partly or completely dependent on the Internet. Simultaneously, different kinds of the attacks in the network are introduced by various kinds of attacker. One of the important security attacks is SQL injection. It is a web application vulnerability by which an attacker can get unauthorized access to the database of a website. With the help of SQL injection an attacker can take control of any website if attacker is able to get the credentials of the administrator of the website. In some cases, an attacker may access, delete or modify the data in the database that may cause permanent changes in the applications' content or behavior. In this paper, we have proposed a new technique to prevent SQL Injection attacks by comparing the hash value of the generated query with the hashed value of the legitimate query. Our scheme can be easily added to any prebuilt website build using any language or database type as it requires only few changes to be made in the code of the language.