http://www.ditii.com/2008/05/20/chinese-websites-hit-by-mass-sql-injection-attack/ Technology, Blogging, Computer, Hardware, Software, Networking, Web, Media, LifeStyle, Gadgets Tue, 24 Nov 2009 01:13:20 -0800 http://wordpress.org/?v=2.8.6 hourly 1 http://www.ditii.com/2008/05/20/chinese-websites-hit-by-mass-sql-injection-attack/#comment-60407 Preventing SQL Injection Storm Attacks » D' Technology Weblog: Technology, Blogging, Tips, Tricks, Computer, Hardware, Software, Tutorials, Internet, Web, Gadgets, Fashion, LifeStyle, Entertainment, News and more by Deepak Gupta. Tue, 03 Jun 2008 09:26:33 +0000 http://www.ditii.com/2008/05/20/chinese-websites-hit-by-mass-sql-injection-attack/#comment-60407 [...] SiteMap June 3, 20082:24 am Preventing SQL Injection Storm Attacks “The malicious SQL payload is very well designed, somewhat database schema agnostic and generic so it could compromise as many database servers as possible,” informed Michael Howard, Senior Security Program Manager in the Security Engineering group at Microsoft. “While the attack was a SQL injection attack that attacked and compromised back-end databases courtesy of vulnerable Web pages, from a user’s perspective the real attack was compromised Web pages that serve up malware to attack users through their browsers.” [Read here or here or here or here] [...] [...] SiteMap June 3, 20082:24 am Preventing SQL Injection Storm Attacks “The malicious SQL payload is very well designed, somewhat database schema agnostic and generic so it could compromise as many database servers as possible,” informed Michael Howard, Senior Security Program Manager in the Security Engineering group at Microsoft. “While the attack was a SQL injection attack that attacked and compromised back-end databases courtesy of vulnerable Web pages, from a user’s perspective the real attack was compromised Web pages that serve up malware to attack users through their browsers.” [Read here or here or here or here] [...]

]]>