SQL-injektio toiminta ja ehkäisy

Tietokannat ovat useiden sovellusohjelmien käytössä olevia määriteltyjä kokonaisuuksia, joita voidaan hyödyntää reaalimaailmassa. Sovellusohjelmat mahdollistavat tietokantojen datan hakemisen ja visualisoinnin kyselykielillä, joista käytetyin on SQL. Kyselykielen väärinkäyttö sovellusohjelmassa mahd...

Full description

Bibliographic Details
Main Author: Kärki, Pyry
Other Authors: Informaatioteknologian tiedekunta, Faculty of Information Technology, Informaatioteknologia, Information Technology, Jyväskylän yliopisto, University of Jyväskylä
Format: Bachelor's thesis
Language:fin
Published: 2021
Subjects:
Online Access: https://jyx.jyu.fi/handle/123456789/75729
_version_ 1826225798711869440
author Kärki, Pyry
author2 Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä
author_facet Kärki, Pyry Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä Kärki, Pyry Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä
author_sort Kärki, Pyry
datasource_str_mv jyx
description Tietokannat ovat useiden sovellusohjelmien käytössä olevia määriteltyjä kokonaisuuksia, joita voidaan hyödyntää reaalimaailmassa. Sovellusohjelmat mahdollistavat tietokantojen datan hakemisen ja visualisoinnin kyselykielillä, joista käytetyin on SQL. Kyselykielen väärinkäyttö sovellusohjelmassa mahdollistaa tietokannan arkaluonteisen datan hakemisen ja muokkamisen. Ilmiötä kutsutaan SQL-injektioksi. Kirjallisuuskatsauksen tarkoituksena on selvittää kuinka SQL-injektio toteutetaan ja kuinka sen toimintaa voidaan ehkäistä. Databases are a collection of defined data, frequently used by application programs. Application programs use and visualize data of the databases by query languages, which the most noted is the SQL language. Misuse of query language in an application programs allows exploitation of delicate data and unauthorized editing of the database. One of these types of misuse is known as SQL injection. This literature review seeks to identify technical aspects of an SQL injection and how to prevent it.
first_indexed 2021-05-18T20:04:34Z
format Kandityö
free_online_boolean 1
fullrecord [{"key": "dc.contributor.advisor", "value": "Rossi, Tuomo", "language": "", "element": "contributor", "qualifier": "advisor", "schema": "dc"}, {"key": "dc.contributor.author", "value": "K\u00e4rki, Pyry", "language": "", "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.date.accessioned", "value": "2021-05-18T10:39:11Z", "language": null, "element": "date", "qualifier": "accessioned", "schema": "dc"}, {"key": "dc.date.available", "value": "2021-05-18T10:39:11Z", "language": null, "element": "date", "qualifier": "available", "schema": "dc"}, {"key": "dc.date.issued", "value": "2021", "language": "", "element": "date", "qualifier": "issued", "schema": "dc"}, {"key": "dc.identifier.uri", "value": "https://jyx.jyu.fi/handle/123456789/75729", "language": null, "element": "identifier", "qualifier": "uri", "schema": "dc"}, {"key": "dc.description.abstract", "value": "Tietokannat ovat useiden sovellusohjelmien k\u00e4yt\u00f6ss\u00e4 olevia m\u00e4\u00e4riteltyj\u00e4 kokonaisuuksia, joita voidaan hy\u00f6dynt\u00e4\u00e4 reaalimaailmassa. Sovellusohjelmat mahdollistavat tietokantojen datan hakemisen ja visualisoinnin kyselykielill\u00e4, joista k\u00e4ytetyin on SQL. Kyselykielen v\u00e4\u00e4rink\u00e4ytt\u00f6 sovellusohjelmassa mahdollistaa tietokannan arkaluonteisen datan hakemisen ja muokkamisen. Ilmi\u00f6t\u00e4 kutsutaan SQL-injektioksi. Kirjallisuuskatsauksen tarkoituksena on selvitt\u00e4\u00e4 kuinka SQL-injektio toteutetaan ja kuinka sen toimintaa voidaan ehk\u00e4ist\u00e4.", "language": "fi", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.abstract", "value": "Databases are a collection of defined data, frequently used by application programs. Application programs use and visualize data of the databases by query languages, which the most noted is the SQL language. Misuse of query language in an application programs allows exploitation of delicate data and unauthorized editing of the database. One of these types of misuse is known as SQL injection. This literature review seeks to identify technical aspects of an SQL injection and how to prevent it.", "language": "en", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted by Paivi Vuorio (paelvuor@jyu.fi) on 2021-05-18T10:39:11Z\nNo. of bitstreams: 0", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Made available in DSpace on 2021-05-18T10:39:11Z (GMT). No. of bitstreams: 0\n Previous issue date: 2021", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.format.extent", "value": "21", "language": "", "element": "format", "qualifier": "extent", "schema": "dc"}, {"key": "dc.language.iso", "value": "fin", "language": null, "element": "language", "qualifier": "iso", "schema": "dc"}, {"key": "dc.rights", "value": "In Copyright", "language": "en", "element": "rights", "qualifier": null, "schema": "dc"}, {"key": "dc.title", "value": "SQL-injektio : toiminta ja ehk\u00e4isy", "language": "", "element": "title", "qualifier": null, "schema": "dc"}, {"key": "dc.type", "value": "bachelor thesis", "language": null, "element": "type", "qualifier": null, "schema": "dc"}, {"key": "dc.identifier.urn", "value": "URN:NBN:fi:jyu-202105182996", "language": "", "element": "identifier", "qualifier": "urn", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Bachelor's thesis", "language": "en", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Kandidaatinty\u00f6", "language": "fi", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Informaatioteknologian tiedekunta", "language": "fi", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Faculty of Information Technology", "language": "en", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Informaatioteknologia", "language": "fi", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Information Technology", "language": "en", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": "fi", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "University of Jyv\u00e4skyl\u00e4", "language": "en", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Tietotekniikka", "language": "fi", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Mathematical Information Technology", "language": "en", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "yvv.contractresearch.funding", "value": "0", "language": "", "element": "contractresearch", "qualifier": "funding", "schema": "yvv"}, {"key": "dc.type.coar", "value": "http://purl.org/coar/resource_type/c_7a1f", "language": null, "element": "type", "qualifier": "coar", "schema": "dc"}, {"key": "dc.rights.accesslevel", "value": "openAccess", "language": null, "element": "rights", "qualifier": "accesslevel", "schema": "dc"}, {"key": "dc.type.publication", "value": "bachelorThesis", "language": null, "element": "type", "qualifier": "publication", "schema": "dc"}, {"key": "dc.subject.oppiainekoodi", "value": "602", "language": "", "element": "subject", "qualifier": "oppiainekoodi", "schema": "dc"}, {"key": "dc.subject.yso", "value": "tietoturva", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "tietokannat", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "kyselykielet", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "SQL", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.rights.url", "value": "https://rightsstatements.org/page/InC/1.0/", "language": null, "element": "rights", "qualifier": "url", "schema": "dc"}]
id jyx.123456789_75729
language fin
last_indexed 2025-02-18T10:54:33Z
main_date 2021-01-01T00:00:00Z
main_date_str 2021
online_boolean 1
online_urls_str_mv {"url":"https:\/\/jyx.jyu.fi\/bitstreams\/e00193ff-15d2-4fb0-98d4-bc83c6b4dab8\/download","text":"URN:NBN:fi:jyu-202105182996.pdf","source":"jyx","mediaType":"application\/pdf"}
publishDate 2021
record_format qdc
source_str_mv jyx
spellingShingle Kärki, Pyry SQL-injektio : toiminta ja ehkäisy Tietotekniikka Mathematical Information Technology 602 tietoturva tietokannat kyselykielet SQL
title SQL-injektio : toiminta ja ehkäisy
title_full SQL-injektio : toiminta ja ehkäisy
title_fullStr SQL-injektio : toiminta ja ehkäisy SQL-injektio : toiminta ja ehkäisy
title_full_unstemmed SQL-injektio : toiminta ja ehkäisy SQL-injektio : toiminta ja ehkäisy
title_short SQL-injektio
title_sort sql injektio toiminta ja ehkäisy
title_sub toiminta ja ehkäisy
title_txtP SQL-injektio : toiminta ja ehkäisy
topic Tietotekniikka Mathematical Information Technology 602 tietoturva tietokannat kyselykielet SQL
topic_facet 602 Mathematical Information Technology SQL Tietotekniikka kyselykielet tietokannat tietoturva
url https://jyx.jyu.fi/handle/123456789/75729 http://www.urn.fi/URN:NBN:fi:jyu-202105182996
work_keys_str_mv AT kärkipyry sqlinjektiotoimintajaehkäisy