Seven Deadliest Web Application Attacks

Protecting Information

Compromising the information in a database is not the only goal of an attacker, but it surely exists as a major one. Many methods are available to protect information in a database from unauthorized access. The problem with SQL injection is that the attack is conducted through the Web site, which is an authorized user of the database. Consequently, any approach that attempts to protect the information must keep in mind that even though the adversary is an anonymous attacker somewhere on the Internet, the user accessing the database is technically the Web application. What the Web application sees, the attacker sees. Nevertheless, encryption and data segregation help mitigate the impact of SQL injection in certain situations. ...