基于HMAC的SQL注入攻击防范策略

Prevention Policy of SQL Injection based on HMAC

随着数据库等网络技术不断发展,网络数据库成为黑客攻击的主要目标之一,SQL注入攻击是其主要攻击手段。文章简要介绍SQL注入攻击的主要方式,提出了一种利用HMAC算法生成SQL语句印记的方法,可以有效地保护备案SQL的安全性,从而在很大程度上防范了SQL注入攻击,避免不必要的损失。

With the development of network database, it has become the main objects of hacker attacks.SQL injection attack is the main attack means. This article raises a method to create SQL statement prints by HMAC algorithm, which protects the backup SQL statements. Thus, it can prevent SQL .Injection attack largely and reduce unnecessary losses.