SQL INJECTION VULNERABILITY DETECTION IN WEB APPLICATIONS

Abstract

Security is an essential requirement of most web applications, which typically access sensitive data such as personal information, and financial records. Leaking of such sensitive data could cause huge financial losses and hurt the reputation of the organization. However, studies have shown that security vulnerabilities are common in web applications due to the increased pressure on budget and timeline as well as the lack of security training. The goal of the project is to detect one specific kind of security vulnerabilities - SQL injection vulnerability in web applications by exploring source code. The developed tool is easy to use and provides enough flexibility to handle different database extensions.