Forum Discussion
Wasfi_182818
Altostratus
AltostratusSQL attack signatures, are they enough to prevent an attack?
Hi;
In a form, the value for parameter Last Name can be
Last Name: Brown' OR '1'='1' which is a pattern that matches an attack signature. However, if I make this Last Name: Brown' OR '1'>...
nathe
Cirrocumulus
CirrocumulusWasfi, where Attack Signature protections end, by adding positive security you can make up any shortfalls. In your example, if you configure the Last Name parameter in the policy you can then restrict metacharacters, for example the single quote ', so ASM would block your second example with "illegal metacharacter in parameter value" and not require an Attack Signature.
Hope this helps,
N
