Improvement of Effectiveness for Static Application Security Testing for detection of SQL Injection vulnerabilities.

This study examines the effectiveness of the Static Security Analysis Method (SAST) in detecting SQL Injection vulnerabilities. Identifying security vulnerabilities early in development is critical to ensuring software reliability. Static Security Analysis (SAST) is widely used to identify potential vulnerabilities in code. However, the complexity of modern methods and the use of dynamic constructs in the code create challenges for SAST tools, especially in detecting vulnerabilities such as SQL Injection, which can lead to unauthorized access to data. The results of our experiment demonstrate a significant improvement in vulnerability detection and highlight the importance of developing and implementing advanced techniques in SAST tools. New algorithms for the analysis of dynamic structures in the code and processing of complex query patterns to databases, which were previously unavailable for standard SAST tools, are proposed.