摘要
提出了一种新的SQL注入漏洞发现方法。在前人"污染值传播"概念的基础上,通过构建Web应用程序的控制流图,对不同控制流图结点指派合适的转换函数,跟踪污染值在程序中的传播过程,从而发现并定位源代码中存在的SQL注入漏洞。方法对用不同脚本语言编写的Web应用程序中SQL注入漏洞的发现具有通用性和有效性。
The paper proposes a new method of detecting SQL injection vulnerabilities.Based on the concept of ＂tainted value propagation＂,the paper first constructs the control folw graphs of Web applications and assigns transfer functions of control folw graph nodes to trace the process of tainted value propagation,then detects and locates the positions of SQL injection vulnerabilites in Web applications.The method is general and effective for detecting SQL injection vulnerabilites in Web applications written in different kinds of script languages.
出处
《微计算机信息》
2010年第15期163-165,共3页
Control & Automation
关键词
SQL注入漏洞
数据流分析
污染值
SQL injection vulnerabilites
data flow analysis
tainted value
