Improving Database Security in Web-based Environments

Francesco Di Tria, Ezio Lefons, Filippo Tangorra

2016

Abstract

In web applications, databases are generally used as data repositories, where a server-side program interacts with a Database Management System (DBMS), retrieves content, and dynamically generates web pages. This is known as a three-layer architecture, that is widely exposed to database threats. The attacks are usually performed through the injection of SQL code in the forms of the web applications, exploiting the dynamic construction of SQL statements. So, the database security relies on the quality of the code and the controls done by the web developer in the application level. In this paper, we present a solution for the improvement of security of databases accessed by web applications. The security is based on a user modelling approach that completely relies on the authorization mechanism of DBMSs.

Paper Citation

in Harvard Style

Di Tria F., Lefons E. and Tangorra F. (2016). Improving Database Security in Web-based Environments . In Proceedings of the 2nd International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-167-0, pages 193-200. DOI: 10.5220/0005646901930200

in Bibtex Style

@conference{icissp16,
author={Francesco Di Tria and Ezio Lefons and Filippo Tangorra},
title={Improving Database Security in Web-based Environments},
booktitle={Proceedings of the 2nd International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2016},
pages={193-200},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005646901930200},
isbn={978-989-758-167-0},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 2nd International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Improving Database Security in Web-based Environments
SN - 978-989-758-167-0
AU - Di Tria F.
AU - Lefons E.
AU - Tangorra F.
PY - 2016
SP - 193
EP - 200
DO - 10.5220/0005646901930200