The Implementation Of SQL Injection Attacks Scanning Analysis Tool And Research On Prevention Technology

Along with the rapid development of network and communication,it’s a trend to communicate with open network.But it also a risk to use the convenient resources of network.So,the problems of network security are paid more attention to and become key points of network security. Usually hackers and computer virus intrude a computer system by security holes.So,the system can be secure by detecting the holes by network administrators.The security holes scanning technology makes the network administrators predict the places of the security holes.So it becomes an important security technology.With the imbursement of Realization of Information Security and Engineering Project,we studied the security holes scanning technology.And we designed an active security holes scanning system based on technology of network and plugins,and realized all automatic builder of scripts in order to simplify the programming with plugins.The research work mentioned in this paper is mainly about:(1) It studies the technology of security holes scanning.By the analysis of it’s strategies and methods,we have known the principle ofthe technology.(2) It designed a security holes scanning system.It presents the design of aim,system,models,relation flows and key technologies.(3) It design and the realization of a vulnerability scanning tools, specifically on the SQL injection vulnerability scan and defense.(4) Tested the security vulnerability scanning system, clarify the effectiveness and superiority of the system.(5) Analysis of the SQL injection attack prevention technology, we propose three level prevention model improved.