identify-vulnerability-to-and-mitigate-sql-injection-attacks.md

Identify vulnerability to and mitigate SQL Injection Attacks

slug: security.sql-injection

Description

This standard deals with identifying vulnerability in your application of SQL injection attacks, and mitigating that vulnerability.

---

Assessment Requirements

In order to fully cover this standard, a performance must be recording for each of the following objectives:

0. Identify SQL injection risks
1. Mitigate SQL injection risks using parameters
2. Mitigate injection risks using whitelists
3. Distinguish between the limitations of SQL Injection mitigation strategies
4. Demonstrate a SQL injection attack using parameter manipulation
5. Recognize SQL injection vulnerabilities in ORMs & other frameworks

---