Research on SQL injection defense mechanisms for Portal Sites of University

Along with the development and improvement of informatization construction, campus network security problems are increasingly serious. The attack to portal sites, especially the explosion of SQL injection accidents has become one of the most serious problems of it. This paper analyzes the principle and characteristics of SQL injection attacks on portal sites of university, presents methods available to prevent websites from these kinds of attacks, including improvement of the management system, secure coding within the web application, proper database configuration, deployment of IIS, application of network firewalls and IDS/IPS, installation of webpage temper-proofing system and other security techniques.