Applied Network Security

Ways to defend against SQL injection attacks

SQL injection attacks remain common and continue to cause problems for many organizations. There are some great methods to defend against SQL injection that every cyber security professional should be aware of. We will discuss the five best ways to defend against SQL injection attacks:

• The first method is to use a web application firewall. Modsecurity is an open-source version offered for free. Modsecurity works on Apache, Microsoft IIS, and nginx web servers.
• The second method is to suppress error messages. Hackers will often use error messages for reconnaissance. If the messages are at least kept local, it can prevent the hacker from learning too much about the structure of the database.
• The ...