Mitigação de ataques de SQL injection em banco de dados Oracle

Abstract

Companies around the world suffer daily with exposure of sensitive data, one of the attacks that occur frequently in this disclosure is the SQL code injection. The SQL injection attack looking for an entry of a parameter, to which the entry is being used in a query to the database and it is not being protected, thus the attacker adds SQL code. The added expression causes database functions can be accessed and so different queries executed. Therefore, to develop this article was made use of bibliographic research, exploratory and experimental performed in controlled laboratory, which was presented by a case study, where we sought ways to mitigate the use of SQL injection attack in database Oracle. As the object of study, we used a system created on purpose with vulnerability related to SQL injection attack. The result was satisfactory, which found three ways to get success in mitigating the use of attack and thus make the attack is minimized. It can therefore be concluded with the study it is possible to mitigate the use of the SQL injection attack in Oracle database.