QUESTION POSED ON: 24 April 2006 Now that I'm building services using data and components from outside my unit, how do I guard against SQL injection on components I can't control?
>
EXPERT RESPONSE
SQL injection is one of the many content based attacks. The only way to deal with this successfully is to use very high performance content filtering and attack signature recognition. This processing is very compute expensive however, so it is best offloaded from individual application platforms and performed as a network service provided to web service applications.
Search and Browse the Expert Answer Center Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.