Improving Web Application Security: Threats and - CGISecurity

14Building Secure Data AccessIn this Chapter●●●●●OverviewPreventing SQL injection attacksEncrypting data in the databaseSecuring data over the networkSecuring database connection stringsHandling data access exceptionsThe database is a prime target for application level attacks. Application levelattacks are used to exploit vulnerabilities in your data access code to gain access tothe database. If all other attack vectors are closed, then the application’s front door,port 80, becomes the path of choice for an attacker to steal, manipulate, anddestroy data.This chapter shows you how to build secure data access code and avoid commonvulnerabilities and pitfalls. The chapter presents a series of countermeasures anddefensive techniques that you can use in your data access code to mitigate the topthreats related to data access.