User Centric Security Models for Improving the Data Security from SQL Injections and Cross Site Scripting Attacks

Abstract

SQL Injection Attacks (SQLIA) and Cross-site Scripting Attacks (XSSA) are frequently used by hackers to hack the user data.  SQL Injection (SQLI) executes malicious code in the form of SQL statement at database by directly executing the query or changing the requested parameters, changing the triggered URL.  In case of Cross-Site Scripting, the attacker targets to execute the malicious code at the client side.