Estudo sobre vulnerabilidades e implementação de um cenário de SQL Injection

Abstract

The objective of this work was to identify and describe some forms of attacks on the most known data, presenting the points of vulnerability of access. In relation to technical procedures, it is a bibliographic and experimental research. How many of the results were identified the following attacks: Port Scanning Attack, Phishing, Spoofing, Sniffing and SQL Injection. Its points of vulnerability are: unprotected network ports, lack of awareness of employees and developers, weak security protocols, and lack of good practices in application development. The results allowed us to conclude that there is no single solution to prevent attacks and solve all company vulnerability issues. However, there are several efficient forms of protection and good practices, such as training employees and maintaining widespread security policies in the organization. In addition, knowing what are the main types of attacks and how cybercriminals act are factors to keep the company safe from cyber attacks.