Black Hat Briefings, Las Vegas 2006 [audio] Presentations From The Security Conference

Bala Neerumalla: SQL Injections by truncation

Informações:

Sinopsis

"In this talk, I will discuss some ways to circumvent common mitigations of SQL Injection vulnerabilities in dynamic SQL. I will then suggest ways to protect against them. Bala Neerumalla specializes in finding application security vulnerabilities. He worked as a security engineer for SQL Server 2000 and SQL Server 2005. He is currently working as a security engineer for Exchange Hosted Services."