Security Analysis of SQL Injection Attacks on Multimedia and Journal-Services Sites Using Concatenated Input Validation and Parsing Method (CIVP)
Web applications and databases continue to face grave danger from SQL injection attacks, which can result in unauthorized access, data modification, and system compromise.This report discusses the methods attackers use to exploit SQL injection vulnerabilities and emphasizes the dangers of successful attacks, such as data leaks and system compromise.This research proposes a comprehensive system for detecting SQL injection attacks using concatenated Input Validation and Parsing Method (CIVP).The site used as experimental material is the Multimedia and Journal Services Site.Based on the results of forensic analysis on the Journal Services Site, there were several attacks in cyberspace, including using SQLMAP and Python.The system created has successfully detected SQL injection attacks.Based on the test results, it was found that the use of the method proposed in this study succeeded in making processing time 15.2% more efficient.Experiments carried out with the method proposed in this study succeeded in increasing the attack detection accuracy from 96-97% to 99.5% with a p-value of 0.008446.
Authors
- Marvin Chandra Wijaya (ORCID: https://orcid.org/0000-0001-5920-4348)
Institutions
- Maranatha Christian University (ID)
Publication Details
- Journal
- Ingénierie des systèmes d information
- Published
- 2024-10-24
- DOI
- https://doi.org/10.18280/isi.290523
- Primary Topic
- Cloud Data Security Solutions
- Type
- article
- Field-Weighted Citation Impact
- 0.00