Using snort in sql injection attacks

Network and Web attacks cause enormous threat in the current Internet world. Invaders try many techniques to get access to sensitive information for identity theft, vandalism, etc. In this paper, we evaluated a large number of possible methods to attack websites through SQL injection methods. We further experimented and evaluated several alternatives using SNORT rules to detect SQL injection attacks and prevent their access or damage. A case study and evaluation for a large number of web pages from different websites is collected and presented. Methods of detection and prevention are implemented in a way that prevent as much as possible attack approach while at the same time allow legal information to access in or out the website or the network.