Injection point extracting method in SQL (Structured Query Language) injection vulnerability detection

Abstract

The invention discloses an injection point extracting method in SQL (Structured Query Language) injection vulnerability detection, which is used for solving the technical problem of poor accuracy of the traditional method in the SQL injection vulnerability detection under a Web environment. According to the technical scheme, the injection point extracting method comprises the steps of: firstly, preprocessing a downloaded webpage, dividing the webpage into a simple webpage and a complex webpage, extracting a data injection point of the simple webpage, extracting a data injection point of the complex webpage, extracting a test case through constructing the test case, analyzing service response, and establishing a decision rule of an SQL injection vulnerability. According to the invention, starting from obtaining the data injection points of a Web application system, through constructing the targeted test case, the used test case is used for carrying out character string, numerical value, annotation and delay testing according to the types and the parameter compositions of the data injection points, thus the test of the injection vulnerability caused by simple filtration of URL (Uniform Resource Locator) parameters and table submitted data is effectively dealt; and through analysis response, the established decision rule of the SQL injection vulnerability is improved in testing accuracy.

Description

Technical field [0001] The invention belongs to the field of Web application system security vulnerability detection, and particularly relates to an injection point extraction method in SQL injection vulnerability detection. Background technique [0002] Structured query language (hereinafter referred to as SQL) injection attack is a widely used and highly threatening Web attack technology, and it is listed as the top ten Web application system security threats of OWASP (Open Web Application Security Project). The basic idea is to construct an attack payload that can deceive the interpreter by guessing and verifying the SQL execution logic of the target system, executing offensive commands or accessing unauthorized data. This attack method is highly concealed, and the attacked Web application system may leak or destroy sensitive information, causing a very serious impact on normal business. [0003] The traditional SQL injection detection technology mainly adopts the analysis met...

AI Technical Summary

Problems solved by technology

[0007] In order to overcome the deficiency of the poor accuracy of the SQL injection vulnerability detection method in the existing Web environment, the present invention provides a method for extracting the injection point in the SQL injection vulnerability detection

Due to the addition of the parsing and processing process for web page scripts, accurate extraction of URLs in complex web pages can solve the problem of false negatives in traditional testing methods and improve test coverage; the test cases used are based on the type and parameters of data injection points Composition, for string, value, comment and delay tests, effectively respond to the testing of URL parameters and form submission data filtering caused by lax injection vulnerabilities; by analyzing the response, the establishment of SQL injection vulnerability judgment rules can improve the accuracy of the test

Images