Web attack protection method and system based on SQL injection

Abstract

The invention provides a web attack protection method based on SQL injection. The method comprises the following steps: acquiring a first data access request based on a web application program; analyzing a structured query language (SQL) injection feature in the access request, and sending the SQL injection feature to a first virtual machine based on a web application program to detect whether a SQL-based web attack behavior exists or not; if a first matching rule is met, sending the access request to a virtual database to obtain data content matched with the data access request; if a second matching rule is met, sending the access request directly to a web server to obtain data content matched with the data access request; and if the data content is not matched with the data access request, returning error information directly. Through the first detection at the web application program end and the second detection of content return, vulnerabilities existing in SQL injection are effectively protected, and the network security in the Internet data interaction process is effectively improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a SQL injection-based web attack protection method and system. Background technique [0002] Structured Query Language (SQL, Structured Query Language) injection attacks, that is, SQL injection attacks, may occur in any web application. Usually, web applications need to exchange data with web application servers. For web applications, obtain corresponding The code or the specific database used cannot be obtained directly, but some tests are required to confirm. The test methods adopted include actively sending exception requests to obtain the exception information returned by the web application. The exception information may contain According to the information, the web application is targeted to construct SQL statements containing attack behaviors to attack the web application. SQL injection means that the attacker sniffs out the loopholes in the web system during the...

AI Technical Summary

Problems solved by technology

[0003] At present, there are some problems in the commonly used web attack behavior detection method based on SQL injection. In the actual attack behavior detection, the exhaustive method is often used to detect the SQL injection attack vulnerabilities existing in the web system. However, such The processing method needs to call all test cases when the web system is detected for the first time, which leads to problems such as low efficiency and large processing. In addition, there are also problems of simple design in the selection of existing test cases, which leads to inaccurate detection results. Accurate, even the problem of false negative rate

Images