- 期刊
Inferential SQL Injection Attacks
並列摘要
This paper describes a class of SQL injection attacks (SQLIA) where attackers can deduce information from the back-end database management system (DBMS) without transferring actual data. Instead, by using predetermined differentiation mechanism, information is being inferred piece by piece. Because of its widespread success, particularly in difficult situations where other SQLIA classes fail, understanding of this subject is of great importance for successful mitigation of this type of attacks.
被引用紀錄
林真合（2014）。《大般涅槃經》的中道佛性理論〔博士論文，國立臺灣大學〕。華藝線上圖書館。https://doi.org/10.6342/NTU.2014.03109
郭依蓁（2007）。由彎曲型分子形成盤狀液晶之探討〔碩士論文，國立中央大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0031-0207200917351162
張俊翔（2007）。雙氟取代基對TGBA*相生成的影響〔碩士論文，大同大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0081-0607200917241288
江日新（2015）。老子哲學有多哲學？從漢學到哲學的閱讀與解釋〔博士論文，國立中央大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0031-0412201512035740
延伸閱讀
- 陳威霖（2013）。A Defense against Stored Procedure Compositional SQL Injection Attack through Validation on Input Legitimacy〔碩士論文，中原大學〕。華藝線上圖書館。https://doi.org/10.6840/cycu201301066
- Chia, B. (2014). Web Forensic: Evidence of SQL Injection Attack Analysis [master's thesis, National Taipei Uinversity]. Airiti Library. https://www.airitilibrary.com/Article/Detail?DocID=U0023-2811201414224921
- Wu, K. C. (2010). Automated Exploit Generation for SQL Injection Attacks [master's thesis, National Taiwan University]. Airiti Library. https://doi.org/10.6342/NTU.2010.01606
- 李安娜（2011）。A Defense against Compositional SQL Injection Attack through Validation on Input Legitimacy〔碩士論文，中原大學〕。華藝線上圖書館。https://doi.org/10.6840/cycu201101067
- 倪秋立、葉道明（2009）。SQL Injection Example Discussion and Preventing Methods。載於國立高雄師範大學（主編），科技教育課程改革與發展學術研討會論文集（頁39-45）。國立高雄師範大學。https://doi.org/10.29495/CITE.200909.0039