ISR News: What Is a SQL Injection?
Excerpts From The Industry Standard
Here’s some scary math: IBM tells USA Today that the enterprise service provider measures 450,000 attacks per day on its large corporate clients. How many does that mean when that is projected accross the entire Internet? Millions of servers daily are attacked for the purpose of extracting vital data. But USA Today never explains exactly what a SQL injection attack is.
It’s important for IT workers to understand SQL injection. Standard writer Lincoln Spector writes that operating systems (read: Microsoft Windows) have become much more bulletproof. So black-hat hackers now break into the Web applications running atop the operating system, because there are far more weaknesses to exploit there. According to Gartner, three-fourths of the Web applications vulnerabilities reported last year have still not been fixed.
SQL injection attacks work by placing commands written in the database manipulation language SQL (short for Structured Query Language) into, for example, the username field on a website’s login page. Incorrect handling of the username causes it to be treated as part of a SQL command by the website’s servers.
Filed under: Breach, D&O Liability, Financial, Government, ISR News, Uncategorized, hackers, identity-theft, malware, privacy
Comments
Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!
