Design of SQL Injection Filtering Module Based on Regular Expression

(Abstract )This paper researches SQL injection attack and grammatical features, constructs the regular expression for these attacks, and designs a SQL injection attack filter module inside Web server based on the filter rules using regular expression. It makes Http request realize injection attack detection before be submitted to the system module. Test results show that compared with filtering based on pure key-words, the filtering based on regular expression has higher recognition rate and lower false positive rate. Web server loaded with filtering module can defense SQL injection attacks effectively, and service delay is smaller. (Key words ) ) ) )SQL injection; regular expression; server defense