Re: SQL Injection monitoring/protection tools

From: rob oraclewizard.com <rob_at_oraclewizard.com>
Date: Tue, 21 Mar 2017 07:52:34 -0400 (EDT)
Message-ID: <91327107.121383.1490097154542_at_webmail.networksolutionsemail.com>





Most of my customers use snort to detect sql injection attacks. Although I really like Oracle Database Firewall / Audit Vault, I'm not seeing it installed at a lot of my customers. Here is a good article on snort rules to detect sql injection.

https://www.symantec.com/connect/articles/detection-sql-injection-and-cross-site-scripting-attacks

-Rob

> On March 20, 2017 at 11:06 PM Upendra nerilla <nupendra_at_hotmail.com> wrote:
>
>
> Hello everyone -
>
> I am interested in finding what kind of tools folks are using to defend against SQL injection type attacks?
>
> I have seen the capabilities of Database Firewall from various documents, seems to have nice features.
>
> Have seen the following page listing a few other options:
>
> https://en.wikipedia.org/wiki/Web_application_firewall
>
>
> Could you please share any feedback on any tools/strategy anyone is using..
>
> Much appreciated
>
>
> -Upendra
>

--
http://www.freelists.org/webpage/oracle-l
Received on Tue Mar 21 2017 - 12:52:34 CET

Original text of this message