Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> In a password-based authentication system, to authenticate a user, a server typically stores password verification data (PVD), which is a value derived from the user's password using publicly known functions. For those users whose passwords fall within an attacker's dictionary, their PVDs, if stolen (for example, through server compromise), allows the attacker to mount off-line dictionary attacks. We describe a password authentication system that can tolerate server compromises. The described system uses multiple (say n) servers to share password verification data and never reconstructs the shared PVD during user authentications. Only a threshold number (say t, t/spl les/n) of these servers are required for a user authentication and compromising up to (t-1) of these servers will not allow an attacker to mount off-line dictionary attacks, even if a user's password falls within the attacker's dictionary. The described system can still function if some of the servers are unavailable. We give the system architecture and implementation details. Our experimental results show that the described system works well. The given system can be used to build intrusion-tolerant applications. <s> BIB001 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> In data-intensive applications, it is quite common for the implementation code to dynamically construct database query strings and execute them. For example, a typical Java servlet Web service constructs SQL query strings and dispatches them over a JDBC connector to an SQL-compliant database. The servlet programmer enjoys static checking via Java's strong type system. However, the Java type system does little to check for possible errors in the dynamically generated SQL query strings. For example, a type error in a generated selection query (e.g., comparing a string attribute with an integer) can result in an SQL runtime exception. Currently, such defects must be rooted out through careful testing, or (worse) might be found by customers at runtime. In this paper, we describe JDBC Checker, a sound static analysis tool to verify the correctness of dynamically generated query strings. We have successfully applied the tool to find known and unknown defects in realistic programs using JDBC. We give a short description of our tool in this paper. <s> BIB002 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> SQL injection attacks, a class of injection flaw in which specially crafted input strings leads to illegal queries to databases, are one of the topmost threats to web applications. A number of research prototypes and commercial products that maintain the queries structure in web applications have been developed. But these techniques either fail to address the full scope of the problem or have limitations. Based on our observation that the injected string in a SQL injection attack is interpreted differently on different databases, in this paper, we propose a novel and effective solution TransSQL to solve this problem. TransSQL automatically translates a SQL request to a LDAP-equivalent request. After queries are executed on a SQL database and a LDAP one, TransSQL checks the difference in responses between a SQL database and a LDAP one to detect and block SQL injection attacks. Experimental results show that TransSQL is an effective and efficient solution against SQL injection attacks. <s> BIB003 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> With the growth in web based applications that employ database services, SQL Injection is becoming one of the repeatedly used exploits. It permits an intruder to gain control over the database of an application, thereby able to read and modify confidential data. This paper illustrates few different forms of SQL injection and based on observation, it is seen that SQL Injection is interpreted differently on different databases. Also, an effective solution is proposed for the prevention of these categories of injection attacks. The authors suggest an approach in which the value entered for every field is checked for an SQL injection attack by parsing it through a grammar that detects SQL injection. If successfully parsed then probably, an SQL injection attack was intended. If not, the entry was legitimate and the database can be coordinated. <s> BIB004 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> SQL injection is a major thread to the security of WEB applications. The paper analyzes the weakness of the current solutions to prevent it. It presents a method of preventing SQL injection attacks by ISR (Instruction Set Randomization) and introduces a prototype system based on the method. The system first randomizes the SQL keywords by appending a random integer, then the randomized SQL statement are transmitted to a DBMS proxy, the proxy can find and prevent the SQL injection attack by analysising the syntax, finally the DBMS proxy translates the randomized SQL to the standard SQL statement and send it to DBMS. Experimental results show that this system can effectly prevent SQL injection attack and has low processing cost. <s> BIB005 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> In Internet-based communication, different types of networks are used to provide services to users. Due to exploration of different types of vulnerabilities, day by day threat of attacks in network is increasing. There is possibility of getting system infected by internal or external intruders. Single computer system is shared by multiple users. Users use multiuser system by creating their own account, which is protected by unique id and password. Sometimes, authorized users attack system for some malicious purposes. Internal attacks include deleting some important files or data, altering some important data. For any intrusion detection system, it is very difficult to identify authorized internal intruders. SQL injection is one such attack, which can be launched by internal attacker. The purpose of external intruder is to perform malicious activities in remote system. To avoid these two types of attacks, the robust intrusion detection system is needed. In this paper, we have implemented hybrid intrusion detection system, which includes identification of both internal and external attacks. Signature matching algorithm is implemented to identify internal attacks. Fuzzy genetic algorithm is applied for implementation of external attacks detection. The system is hybrid and compatible in offline as well as online environment. Experimental results show that the accuracy of system is better than some of existing systems. <s> BIB006 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> Intrusion Detection System is one of the challenging research areas in Cloud Security. Security incidents such as Denial of service, scanning, malware code injection, virus, worm and password cracking are becoming common in cloud environment. These attacks can become a threat to the reputation of the company and can also cause financial loss if not detected on time. Hence securing the cloud from these types of attacks is very important. In this paper, we have proposed techniques to secure cloud environment by incorporating some of the efficient approaches in intrusion detection. We have focused on two major issues in IDS: efficient detection mechanism and speed of detection. We have proposed approaches to tackle these issues using Machine Learning and parallelization. We have also provided security frameworks to demonstrate how these approaches will be deployed in Cloud Environment. A preliminary analysis was conducted for some of the approaches and results are promising. <s> BIB007 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> Nowadays the most used applications are the web based applications, for instance long range informal communication, shopping, e-learning, banking and social networking are all an examples of web based applications. It is commonly known that these Web applications are publicly available for all users around the world. This leads us to new challenges in securing these applications and exposing them to many Web-based attacks, one of the most common attacks is SQL injection (SQLi) which has a big impact on Web applications back-end databases, SQL injection working principle is by injecting a malicious code in SQL statements that can give hackers unauthorized access to the back-end database. In this paper, we make an overview of SQLi in addition; we take a look at some of the recent approaches that aims to prevent this type of attack. Then we propose a novel approach that is based on hashing using the fast and secure SHA-1 algorithm and syntax-awareness then we make a comparison between our solution and the surveyed solutions, our efficient approach was able to prevent all types of SQLi attacks and it did not fail in any situation. <s> BIB008 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTION FOR DATABASE ATTACKS <s> Web-Based applications are becoming more increasingly technically complex and sophisticated. The very nature of their feature-rich design and their capability to collate, process, and disseminate information over the Internet or from within an intranet makes them a popular target for attack. According to Open Web Application Security Project (OWASP) Top Ten Cheat sheet-2017, SQL Injection Attack is at peak among online attacks. This can be attributed primarily to lack of awareness on software security. Developing effective SQL injection detection approaches has been a challenge in spite of extensive research in this area. In this paper, we propose a signature based SQL injection attack detection framework by integrating fingerprinting method and Pattern Matching to distinguish genuine SQL queries from malicious queries. Our framework monitors SQL queries to the database and compares them against a dataset of signatures from known SQL injection attacks. If the fingerprint method cannot determine the legitimacy of query alone, then the Aho Corasick algorithm is invoked to ascertain whether attack signatures appear in the queries. The initial experimental results of our framework indicate the approach can identify wide variety of SQL injection attacks with negligible impact on performance. <s> BIB009
The biggest risk for password security is that the passwords chosen by users are easily guessed. As a result,  suggests that the most effective way to improve password security is to develop postfix and prefix password checkers. For the postfix checker, the system would run its password decode program at regular intervals to identify and cancel passwords that are easily guessed and then inform the users. The prefix checker is a system program used to reject an inappropriate password after checking whether the user's choice of password is proper. However, these programs cost considerable resources and remain vulnerable for a long time, and a better-distributed intrusion detection system (IDS) is still needed. Gould et al. BIB002 presented a Java Database Connectivity (JDBC) checker tool that checks the queries in Structured Query Language (SQL) statements that are dynamically generated in Java. This approach can detect vulnerabilities of SQL injection that are based on logical errors; however, it does not match the query because it examines only the syntax of the incorrect SQL statement. An SQL injection attack is a leading class of severe web application attack that can be grammatically correct, and it cannot return a database error. Gould et al. BIB002 introduced a kernel intrusion detection vulnerability scanner that comprehensively evaluates a database kernel. The proposed approach detects the intrusion behaviors of attackers on time. Therefore, it proficiently prevents database intrusions that cause data outflow and malevolent tampering and improves database system security. Xun et al.  describe that the vulnerability scanner, which ensures database maintenance and automatic backup to a great extent, and it has a powerful network information audit function that monitors, records, and reproduces a comprehensive audit of the operation of network usage. However, the support capabilities of multiservice distributed database vulnerability scanners still need to be improved. Based on SQL injection attacks injecting strings that are interpreted differently in different databases, Zhang et al. BIB003 proposes an effective solution for TransSQL. TransSQL automatically translates requirements such as SQL requests to a Lightweight Directory Access Protocol (LDAP). After querying the SQL database execution and LDAP, TransSQL examines the differences between the LDAP and SQL database to detect and prevent the response of the SQL injection attack. The experimental results demonstrate that TransSQL is a good solution to the SQL injection attack. Ramesh et al. BIB004 suggested an approach for checking the value of each field input by examining the SQL injection syntax parsing the SQL injection attack. If effectively analyzed, then SQL injection was probably deliberate. If not, then the access was considered to be authentic and can be coordinated with the database. The authors documented an algorithm that is easy to comprehend and does not require any amendment of the source code. The approach used in this article prevents most kinds of SQL injections and helps safeguard websites from external attacks. However, the complexity of the algorithm is relatively high and thus it is time consuming to identify attacks. A novel approach was proposed by Temeiza et al. BIB008 . Based on the hash function using the syntax-awareness and SHA-1 algorithm, a new practice for averting SQL injection in entrenched SQL queries is produced and syntax-awareness is applied to protect the stored processes from SQL injection to address several kinds of SQL injections. The approach was able to prevent SQL injection attacks in 209 attack experiments with 100% success. However, it is still in the experimental phase and needs to be enhanced. Ping et al. BIB005 presented a prototype based on randomized instruction to prevent SQL injection attacks. SQL keywords are generated to add a random integer, and then random SQL statements are sent to the database proxy. The proxy passes the syntax and averts SQL injection attacks. Finally, the database agent sends random standard SQL statements to the database. Experimental results demonstrate that the proposed approach can effectively avert SQL injection attacks, and the processing cost is low. The protection system has a good impact and shows practical value for defending against SQL injection attacks. Nevertheless, the random secret key is defined by users and is easily forgotten or lost. Wang et al. BIB001 proposed an intrusion-tolerant passworddriven authentication method for multiple servers to share password verification data and never reconstruct them on user authentication. Conceding up to (t−1), these servers do not permit a hacker to launch the offline dictionary attack. However, the system can still work despite the failure of some servers. The experimental results demonstrate that the proposed approach attains high-level security performance at a reasonable expense. However, it cannot prevent all online dictionary attacks and other attacks on passwords. Desai and Gaikwad BIB006 implemented a hybrid intrusion detection structure for the identification of both external attacks and SQL injection on passwords. A signaturematching algorithm has also been introduced to detect internal attacks. Furthermore, a fuzzy genetic algorithm is used for external attack detection. This hybrid system is well-matched for offline and online environments. Experimental results prove that this method has better accuracy than some other systems. Furthermore, to enhance the system, the hybrid algorithm needs to be able to identify intrusions in a single system. Mishra et al. BIB007 proposed an approach for the secure cloud environment by integrating efficient intrusion detection methods by focusing on two major problems in IDS: detection speed and an efficient detection mechanism. The approach aims to create parallelization and machine learning features with support of IDS to address security factors and provide security frameworks to validate how these methods can be used in the cloud computing environment. An initial analysis was conducted for the given approach, and the results were encouraging. However, this technique is at its starting point, and it is not entirely effective. Appiah et al. BIB009 proposed a signature-based detection framework for SQL injection attack. In this proposed framework, pattern matching and the fingerprint method are integrated to differentiate valid SQL queries from malevolent queries. Furthermore, the proposed framework monitors SQL queries and compares them against a signature dataset of SQL injection attacks. The experimental results prove that the proposed approach is better for all sorts of SQLIA detection tasks, achieving lower false-positive rates. However, due to the difficulty identifying unknown attacks using detection systems, this system still needs to solve the issues of an anomaly-based system. Ping  proposed an approach for second-order SQL injection detection attack based on instruction set randomization (ISR). Reliable SQL keywords, which are confined in the web applications, are randomized to create a new SQL ISR, and a proxy is added to detect whether the conventional SQL instruction consists of SQL keywords to identify the behavior of the attack. The results of experiments demonstrate that the system effectively detects SQL injection attacks. Meanwhile, it has a low processing cost. However, the system still needs to be improved in terms of resource consumption. Table 4 shows possible solutions for database attacks.