Call Now
General Inquiries
1-866-684-7237
Master's Admissions
1-800-460-5597 (US & Canada)
+1-647-722-6642 (International)
Bachelor's and Certificate Admissions
1-866-684-7237
Norwich students, alumni, and faculty work for diverse organizations in a wide variety of fields, but they all share one thing in common: industriousness. Explore this section to learn about their professional and civic accomplishments – and tell us about your own.
Shortly after graduating from Norwich, Matthew Horner was published in the Journal of Forensics, Security and Law. His paper, "SQL Injection: The Longest Running Sequal in Programming History" was published in the June 2017 edition. A professor in the Master of Science in Information Security & Assurance program, Dr. Thomas Hyslip, worked with and provided feedback to Horner prior to publication.
Abstract:
One of the risks to a company operating a public-facing website with a Structure Query Language (SQL) database is an attacker exploiting the SQL injection vulnerability. An attacker can cause an SQL database to perform actions that the developer did not intend like revealing, modifying, or deleting sensitive data. This can cause a loss of confidentiality, integrity, and availability of information in a company’s database, and it can lead to severe costs of up to $196,000 per successful injection attack (NTT Group, 2014). This paper discusses the history of the SQL injection vulnerability, focusing on:
The SQL injection vulnerability has been known for over seventeen (17) years, and the countermeasures are relatively simple compared to countermeasures for other threats like malware and viruses. The focus on security-minded programming can help prevent a successful SQL injection attack and avoid loss of competitive edge, regulatory fines and loss of reputation among an organization’s customers.
Class of 2017, Master of Science in Cybersecurity Share this