SQL Database for Vulnerability Analysis in Web Services

Perez O.R.; Vasquez F.A.; Lopez L.P.; Paredes S.A. · Proceedings - 2024 14th International Conference on Dependable Systems, Services and Technologies: Trustworthy AI, Internet of Robotics, and Big Data for a Safe and Secure World, DESSERT 2024 (2024) · DOI: 10.1109/dessert65323.2024.11122026

Resumen

Vulnerabilities in web services have become increasingly common as most individuals and organizations have applications or websites where personal or banking information is stored in databases, making them prime targets for cybercriminals. This review aims to analyze and identify tools and strategies to address web service vulnerabilities involving SQL databases, with a primary focus on SQL injection attacks. A total of 570 documents related to the topic were reviewed from SCOPUS and IEEE, with 33 studies selected based on predetermined criteria, following the PICO and PRISMA methodologies. The results indicate that data collection provided a better perspective on recommended tools and strategies to improve web service security. The conclusion highlights that input validation and parameterized queries are essential strategies for securing web services, as they significantly reduce the possibility of attacks. Additionally, external tools like scanners, which show 98% accuracy, and machine learning software, which provides 97% accuracy, are also recommended for enhancing web service security. These strategies are particularly important in e-commerce services, which are highly vulnerable to cyberattacks due to the large volume of sensitive data, including payment and personal information.

Instituciones: Universidad Nacional de San Agustín de Arequipa; Universidad Tecnológica del Perú