Forum Discussion

Nik_67256's avatar
Nik_67256
Icon for Nimbostratus rankNimbostratus
Mar 01, 2012

ASM - Dynamic SQL Injection Protection

Hello All,

 

 

We know that big IP ASM can protect against SQL Ijnection attacks.

 

 

But Does it protect against "Dynamic SQL Injection Attacks"? If yes , how does it do it.

 

 

Any reply will be greatly appreciated.

 

Nik
security
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Mar 02, 2012
    Hi Nik,

     

     

    ASM is positioned between HTTP clients and the front end web server tier. So ASM doesn't validate web app to SQL communication. It does look for suspicious user input using attack signatures, character set validation, size limits, etc. This should be the same whether the web app is using dynamic SQL queries or not.

     

     

    Aaron