title: ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð²Ð·Ð°Ð¸Ð¼Ð¾Ð´ÐµÐ¹ÑÑÐ²Ð¸Ñ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ Ñ ÑÐµÑÐ²ÐµÑÐ¾Ð¼ Ð¡Ð£ÐÐ
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Detection of SQL injections based on the analysis of the interaction of a web application with a DBMS server
Creators: name: ÐÐ°Ð²Ð°Ð»Ð¸Ð´Ð¸, ÐÐ²Ð°Ð½
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2023
Subjects: ÐÐ½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ñ
ÑÐµÑÐµÐ²Ð°Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ
ÑÐ¾ÑÑÐ¾ÑÐ½Ð¸Ðµ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ
ÑÑÑÑÐºÑÑÑÐ½Ð°Ñ Ð¸Ð·Ð±ÑÑÐ¾ÑÐ½Ð¾ÑÑÑ
Ð½ÐµÐ¾ÑÐ¸ÐµÐ½ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð½ÑÐ¹ Ð³ÑÐ°Ñ
network security
web application state
structural redundancy
undirected graph

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÐ±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ðµ SQL Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð²Ð·Ð°Ð¸Ð¼Ð¾Ð´ÐµÐ¹ÑÑÐ²Ð¸Ñ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ Ñ ÑÐµÑÐ²ÐµÑÐ¾Ð¼ Ð¡Ð£ÐÐÂ». Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ðµ ÑÐ¾ÑÐ½Ð¾ÑÑÐ¸ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ¾ÑÑÐ¾ÑÐ½Ð¸Ñ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ Ð¸ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ¾Ð² Ð·Ð°Ð¿ÑÐ¾ÑÐ¾Ð² Ðº Ð¡Ð£ÐÐ. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ ÑÐ¿Ð¾ÑÐ¾Ð±Ñ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°ÑÑ Ð°ÑÐ°ÐºÐ¸ ÑÐ¸Ð¿Ð° SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹. 2. ÐÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°ÑÑ Ð¼ÐµÑÐ¾Ð´Ñ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹. 3. ÐÑÐµÐ´Ð»Ð¾Ð¶Ð¸ÑÑ ÑÐ¿Ð¾ÑÐ¾Ð± Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ¾ÑÑÐ¾ÑÐ½Ð¸Ñ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸Ñ Ð¸ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ¾Ð² Ð·Ð°Ð¿ÑÐ¾ÑÐ¾Ð² Ðº Ð¡Ð£ÐÐ. 4. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÐ¹ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿, ÑÐµÐ°Ð»Ð¸Ð·ÑÑÑÐ¸Ð¹ Ð¿ÑÐµÐ´Ð»Ð°Ð³Ð°ÐµÐ¼ÑÐ¹ ÑÐ¿Ð¾ÑÐ¾Ð± Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹. 5. ÐÑÐ¾Ð²ÐµÑÑÐ¸ Ð¾ÑÐµÐ½ÐºÑ ÑÐ¾ÑÐ½Ð¾ÑÑÐ¸ ÑÐ°Ð±Ð¾ÑÑ ÑÐ¾Ð·Ð´Ð°Ð½Ð½Ð¾Ð³Ð¾ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿Ð°. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÐµ Ð²Ð¸Ð´Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹. ÐÑÐ¾Ð¼Ðµ ÑÐ¾Ð³Ð¾, Ð±ÑÐ»Ð¸ Ð¸Ð·ÑÑÐµÐ½Ñ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹. ÐÑÐ» Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½ Ð½Ð¾Ð²ÑÐ¹ ÑÐ¿Ð¾ÑÐ¾Ð± Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¾ Ð¿Ð¾Ð»ÑÑÐµÐ½Ð¾ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ðµ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÑ Ð²Ð¸Ð´Ð¾Ð² SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹, ÐºÐ¾ÑÐ¾ÑÐ¾Ðµ Ð´Ð¾ÐºÐ°Ð·Ð°Ð»Ð¾ ÑÐ²Ð¾Ñ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ Ð¸ ÑÐ¾ÑÐ½Ð¾ÑÑÑ. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐ¹ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿ Ð¼Ð¾Ð¶ÐµÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¾ÑÐ½Ð¾Ð²Ð½Ð¾Ð³Ð¾ Ð¸Ð»Ð¸ Ð´Ð¾Ð¿Ð¾Ð»Ð½Ð¸ÑÐµÐ»ÑÐ½Ð¾Ð³Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð° Ð¾Ð±Ð½Ð°ÑÑÐ¶ÐµÐ½Ð¸Ñ SQL-Ð¸Ð½ÑÐµÐºÑÐ¸Ð¹ Ð² ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÑ Ð²ÐµÐ±-Ð¿ÑÐ¸Ð»Ð¾Ð¶ÐµÐ½Ð¸ÑÑ.
description: The theme of the final qualifying work is Â«Detection of SQL injections based on the analysis of the interaction of a web application with a DBMS serverÂ». The purpose of this work is to increase the frequency of detection of SQL injections based on the analysis of the state of web applications and the results of queries to DBMS. The subject of the research is modern methods for detecting SQL injections. Tasks to be solved during the study: 1. Analysis of the types of SQL injections. 2. Analyze SQL injection detection methods. 3. To propose a method for detecting SQL injections based on the analysis of the state of the web application of the results of DBMS queries. 4. To develop a software prototype implementing the proposed method for detecting SQL injections. 5. To evaluate the accuracy of the created prototype. Various types of SQL injections were analyzed in the course of the work. In addition, research in the field of SQL injection detection was studied. A new method for detecting SQL injections has been proposed. As a result of the work, a software tool for detecting SQL injections was obtained, which proved its effectiveness and accuracy. The resulting prototype can be used as a primary or secondary tool for detecting SQL injections in modern web applications.