01356nas a2200157   4500000000100000008004100001260001200042100002400054700002300078700001900101700001900120245008800139856007000227520085200297022004901149       2021                            d  c10/20211 aMohammed Nasereddin1 aAshaar ALKhamaiseh1 aMalik Qasaimeh1 aRaad Al-Qassas00aA systematic review of detection and prevention techniques of SQL injection attacks  uhttps://www.tandfonline.com/doi/abs/10.1080/19393555.2021.19955373 a<p>SQL injection is a type of database-targeted attack for data-driven applications. It is performed by inserting malicious code in the SQL query to alter and modify its meaning, enabling the attacker to retrieve sensitive data or to access the database. Many techniques have been improved and proposed to detect and mitigate these types of attacks. This paper provides a systematic review for a pool of 60 papers on web applications’ SQL injection detection methods. The pool was selected using a developed searching and filtering methodology for the existing literature based on scholar databases (IEEE, ScienceDirect, and Springer) with the aim to provide specific answering for several research questions in the area of SQL injection detection. This provides a basis for the design and use of effective SQL injection detection methods.</p>
  aPrint ISSN: 1939-3555 Online ISSN: 1939-3547