Home
Topics
Data and Application Security Management
Database Security Tools and Techniques
New SQL injection attacks and defense

New SQL injection attacks and defense

New SQL injection attacks and defense

Date: Jun 18, 2009

Attackers aren't necessarily using SQL injection attacks to steal valuable information from your database.

Lenny Zeltser, security consulting leader at Savvis Inc., explains how some are using SQL injection attacks to actually embed new content, particularly HTML code.

Information on SQL injection attacks:

Resident security expert Richard Brain answers your questions about avoiding SQL injection attacks.
Contributor Patrick Szeto explains how SQL injection attacks have become automated.
SQL injection detection tools and prevention strategies.
Preventing SQL injection attacks: A network admin's perspective.
New defenses for automated SQL injection attacks.

More on Database Security Tools and Techniques

Cryptography for the rest of us
VIDEO - In this video, learn cryptography techniques for your enterprise that comply with regulatory and legal requirements, as well as what you need to understand before buying or building cryptography solutions.
Database security best practices: Video with David Litchfield
VIDEO - David Litchfield, managing director at NGSSoftware Ltd., reviews three of the most common mistakes that database administrators are making.
Inside a retail hack
VIDEO - Kevin Mandia of security consultancy Mandiant Corp. reviews an attack that is commonly used to swipe PIN numbers and compromise retailers: SQL injection.
Securing NoSQL applications: Best practises for big data security
Tip - NoSQL is great for big data, but security is often lacking in NoSQL applications. Davey Winder provides best practises for NoSQL security.
Cattles' lost backup tapes highlight risk of unencrypted data storage
News - Cattles Group lost backup tapes containing 1.4 million unencrypted customer records. The incident highlights the risks of removable storage.
( Jan 09, 2012 )
Segregation of duties: Small business best practices
Tip - Segregating duties can be tough in organisations that have few staff members and resources. Get duty segregation best practices for SMBs.
RSA Europe 2011: IT security conference coverage
Tip - All the news from RSA Europe 2011. Read news, features, tips and blogs from the London based IT security conference.
Private companies can expect more ICO fines, regulator warns
News - A regulator warned private companies who do not adequately protect data will face ICO fines up to £500,000.
( Oct 20, 2011 )

Back to top

More from Related TechTarget Sites

Networking UK
Virtual Data Centre
Data Management UK
Security
Cloud Security
Security IN

Networking UK
- O2 signs UK deal for mobile management offering: SNUK news in brief
  
  SearchNetworkingUK Briefs provides a summary of the week’s new product, services and appointment announcements. This week includes mobile management and much more.
- FCoE or iSCSI? Doesn’t matter! It’s about the Ethernet
  
  Some question the path to network convergence - is it through FCoE or iSCSI? Either way, preparing the existing infrastructure will be key to a healthy network environment.
- Is cloud computing bad for your networking career?
  
  Many network managers may have an emotional resistance to cloud computing, but experts explain the economic benefits and positive career impact outsourcing data centre resources can have.
Virtual Data Centre
- Download IT in Europe: August 2012
  
  This month's IT in Europe examines the views of the experts on the new EU framework, and assess what it means for European IT managers.
- Download Technology Priorities for 2012
  
  Download Technology Priorities for 2012
- Download IT in Europe: June 2012
  
  This month's IT in Europe examines how you can prepare for the new EU data regulations.
DataManagement UK
- Big data roundtable webcast: gaining value from big data
  
  Roundtable discussion on business value of big data, chaired by Brian McKenna, Editor, SearchDataManagementUK, and featuring Mike Ferguson, Roxane Edjlali (Gartner), Joshua LeCure (GlaxoSmithKline).
- 2012 training courses: BI, data management, data warehousing
  
  Find out where to hone your business intelligence, data management and data warehouse skills with this list of training courses for 2012.
- Poor data quality: what is dirty data costing UK organisations?
  
  Poor data quality can have serious financial consequences for businesses. Read about the current state of data quality management at UK companies, including dirty data problems.
Security
- Gary McGraw: NSA data collection programs demand discussion, scrutiny
  
  Opinion: Gary McGraw details the various and sundry NSA data collection programs and explains why all its efforts demand new discussion and scrutiny.
- Enterprise BYOD offers mixed bag for enterprise endpoint security
  
  A Gartner analyst says enterprise BYOD -- specifically iOS and Android devices -- presents many pros and cons for enterprise endpoint security.
- Reframing discussions about return on security investment
  
  According to expert Joe Granneman, return on security investment is a misnomer. Here's a better way to view security expenditures.
Cloud Security
- Gartner: Negotiate cloud contracts with detailed security, control
  
  When negotiating with cloud providers, enterprises must demand cloud contracts with specific security and control provisions, Gartner analysts say.
- Cloud data breach notification: Defining legal obligations
  
  Francoise Gilbert provides a cloud data breach notification overview for enterprises concerned about placing personal information in the cloud.
- Are FedRAMP security controls enough?
  
  Cloud service providers are working with authorized third-party auditors to meet FedRAMP security controls. The 3PAOs tell us how it’s going, so far.
Information Security
- Security tech market set to grow 8.7% in 2013, says Gartner
  
  The worldwide security technology and services market will reach $67.2bn in 2013, up 8.7% from 2012, according to research firm Gartner
- A malicious charger could hack Apple devices easily, claim researchers
  
  A modified phone charger or battery could be used to hack Apple devices, say researchers from Georgia Tech
- How to reduce IT security risk with IT asset management
  
  IT asset management expert Barb Rembiesa explains how ITAM best practices like IT asset standardization and rationalization reduce IT security risk.

All Rights Reserved,Copyright 2008 - 2013, TechTarget