Invention Grant
- Patent Title: Robust and transparent persistence of taint information to enable detection and mitigation of injection attacks
-
Application No.: US16218752Application Date: 2018-12-13
-
Publication No.: US11374966B2Publication Date: 2022-06-28
- Inventor: Martin Johns
- Applicant: SAP SE
- Applicant Address: DE Walldorf
- Assignee: SAP SE
- Current Assignee: SAP SE
- Current Assignee Address: DE Walldorf
- Agency: Fish & Richardson P.C.
- Main IPC: G06F16/245
- IPC: G06F16/245 ; G06F16/25 ; G06F16/248 ; G06F16/22 ; H04L9/40
Abstract:
Methods, systems, and computer-readable storage media for receiving, by a database connector having a taint extension, a SQL request from an application, sending, by the taint extension, the SQL request to a SQL parser, receiving, by the taint extension, a structural representation of the SQL request from the SQL parser, adding, by the taint extension, taint information corresponding to data within the SQL request to provide an enhanced SQL statement, and transmitting, by the database connector, the enhanced SQL statement to a database for storing the taint information with the data.
Information query
