Database injection detection method, device, electronic equipment and storage medium

Abstract

The present invention proposes a database injection detection method, device, electronic equipment, and storage medium. The method includes: acquiring the injected database statement; performing statement processing according to the database statement, and obtaining a sub-statement set of the database statement; according to the The sub-statement set is to obtain a database statement set; according to the database statement set, the data query system druid is used to detect the database statement and obtain the detection result. The invention uses the druid middleware to realize the detection of the injection risk of the current mainstream relational databases, reduces the need to switch between different databases, can well complete the detection of different databases, and can achieve the detection effect of what you see is what you get, performance and stability Good sex.

Description

technical field [0001] The invention belongs to the technical field of data processing, and in particular relates to a database injection detection method, device, electronic equipment and storage medium. Background technique [0002] In computer network attacks, SQL (English full name: Structured Query Language, English abbreviation SQL) injection attack is one of the most common means of attacking data. The attacker constructs the SQL statement, inserts the SQL statement into the web form submission or enters the query string of the domain name or page request, and finally achieves bypassing the server verification to obtain the content in the database, or executes malicious SQL commands. [0003] In the prior art, SQL injection detection needs to obtain SQL access request parameter values ​​multiple times and extract complete SQL statement lexicals, which makes the detection process complicated, and the detection accuracy of SQL injection points is not enough, and for som...

AI Technical Summary

Problems solved by technology

[0003] In the prior art, SQL injection detection needs to obtain SQL access request parameter values ​​multiple times and extract complete SQL statement lexicals, resulting in a complicated detection process and insufficient detection accuracy of SQL injection points. Moreover, for some SQL statements with complex structures and some The feature is not an obvious SQL fragment, and there are false positives and false negatives, which cannot meet the needs of security applications

Images