This event has ended!

View current events hosted by SQL Server Innovators Guild (ssig)

August 5th: Preventing SQL Injection Attacks

Tuesday, August 5, 2008 from 6:00 PM to 8:30 PM (ET)

Greenville, SC

Ticket Information

Type End     Quantity
Free Ended Free  

Event Details

Presenting a new angle on a popular attack vector on databases: SQL Injection.

 Agenda

6:00 – 6:30 Pizza and Networking

6:00 – 6:45 Announcements

6:45 – 8:15 , Todd DeSantis - SQL Injection

8:15 – 8:30 Closing remarks and give-a-ways

 

We will describe types and techniques of SQL Injection attacks on both RDBMS-based web applications and built-in database stored program units, and show how simple SQL Injection can be used to own the database server through the means of privilege escalation.
We will also list ways of preventing SQL Injection attacks - ranging from secure coding practices to various external tools that will alert and prevent SQL Injection attempts, and demonstrate how hacker techniques of evasion can be used to subvert them.
Finally, we will introduce new deep inspection tools for Microsoft SQL Server that can prevent SQL injection, even in zero-day scenarios.

Take away points:

  • How SQL Injection attacks work
  • Secure coding practices
  • Existing tools for SQL Injection prevention and techniques to evade them
  • New resilient technologies used to solve entirely SQL injections, even those exploiting zero-day vulnerabilities