Fundamentals of InfoSecintermediate
A website's login behavior changes because text entered in a username field alters the meaning of a database query. Which attack is this?
Answer
SQL injection
Explanation
### Why this is right
The input is changing the meaning of a database query, which is the defining behavior of SQL injection. The material's example uses a username input to alter the query logic.
### The concept
Applications use SQL to perform database operations. If user input is inserted directly into a command, an attacker may change the command's meaning. Prepared statements and bound parameters keep the command structure separate from the values.
### The other options
- **Cross-site request forgery**: tricks an authenticated user's browser into making an unwanted request.
- **Sniffing**: eavesdrops on network traffic.
- **Buffer overflow**: writes beyond a memory buffer's expected capacity.
### Terms
- **SQL injection**: altering a database command through unsafe input handling.
- **Database query**: a request to retrieve or change database information.
### Remember
If input changes a database command, consider SQL injection.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free