IDEAS home Printed from https://ideas.repec.org/h/spr/advbcp/978-94-6463-340-5_18.html

The Effectiveness of Parameterized Queries in Preventing SQL Injection Attacks at Go

In: Proceedings of the International Conference on Enterprise and Industrial Systems (ICOEINS 2023)

Author

Listed:
  • Rizaldi Fatah Sidik

    (Telkom University)

  • Syifa Nurgaida Yutia

    (Telkom University)

  • Rana Zaini Fathiyana

    (Telkom University)

Abstract

SQL Injection attacks are one of the common security risks that occur in applications. SQL Injection cases can lead to data and sensitive information leaks, and even potential application data deletion. This research examines the effectiveness of using parameterized queries in the Go programming language as a method of prevention against SQL Injection attacks. Go provides the feature of parameterized queries by using placeholders such as question marks (?) or parameter names. Parameterized queries separate input values from SQL statements and are executed securely by the database driver. In this study, the use of parameterized queries in Go is evaluated to prevent query manipulation by users in the application. The research is conducted by testing four HTTP request operations: GET, POST, PUT, and DELETE, both before and after the use of parameterized queries. The testing results, based on Acunetix Web Vulnerability scanning, prove that all testing operations are vulnerable to SQL Injection when not using parameterized queries, while successfully mitigating SQL Injection attacks when using parameterized queries in Go.

Suggested Citation

  • Rizaldi Fatah Sidik & Syifa Nurgaida Yutia & Rana Zaini Fathiyana, 2023. "The Effectiveness of Parameterized Queries in Preventing SQL Injection Attacks at Go," Advances in Economics, Business and Management Research, in: Mahmud Dwi Sulistiyo & Ryan Adhitya Nugraha (ed.), Proceedings of the International Conference on Enterprise and Industrial Systems (ICOEINS 2023), pages 204-216, Springer.
    • Handle: RePEc:spr:advbcp:978-94-6463-340-5_18
    DOI: 10.2991/978-94-6463-340-5_18
    as

    Download full text from publisher

    To our knowledge, this item is not available for download. To find whether it is available, there are three options:
    1. Check below whether another version of this item is available online.
    2. Check on the provider's web page whether it is in fact available.
    3. Perform a
    for a similarly titled item that would be available.

    More about this item

    Keywords

    ;
    ;
    ;
    ;
    ;

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:advbcp:978-94-6463-340-5_18. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.