Detecting Data Leaks due to SQL Injection

Detecting Data Leaks due to SQL Injection

Abhishek Pawar , Nikita Kapadnis , Pallavi Joshi, Vishwjeet Kalyankar , Raj Gharat, Vedant Khokle

Department of Computer Engineering Pune Institute of Computer Technology

Pune, India

Abstract—SQL injection is a prevalent web application vulner- ability that allows attackers to manipulate database queries, often leading to severe data leaks. This paper surveys existing research on SQL injection attacks and various detection and prevention techniques. We explore classical and modern approaches, includ- ing machine learning paradigms, input verification methods, and parameterized query techniques. By examining the strengths and weaknesses of these approaches, this paper proposes a compre- hensive prevention framework. The challenges, limitations, and future directions for enhancing SQL injection security are also discussed.

Index Terms—SQL, vulnerability, queries, leaks, approaches, prevention, machine learning, parameterized query, framework, injection