I guess , it does not matter if Injection attack is #1 in OWASP top 10.
According to the article:-
52% of respondents said that their organizations don’t even test or validate third-party software they use to see if it’s vulnerable to SQL injection.
Other findings in the study include:
- Nearly half (46 percent) were familiar with the term “WAF Bypass” 56 percent agreed or strongly agreed that determining the root cause of SQL injection is becoming more difficult because of the trend for employees to use their personally owned mobile devices in the workplace (BYOD)
- 52 percent of respondents indicated that they don’t test or validate any third party software to ensure it’s not vulnerable to SQL injection
- 44 percent utilize professional penetration testers to identify vulnerabilities in their IT systems; but only a third (35 percent) of those penetration tests included testing for SQL injection vulnerabilities
- 88 percent of respondents had a favorable or very favorable opinion of the use of behavioral analysis technology for detecting SQL injection attacks
- 52 percent indicated they either had begun replacing or would be replacing their signature-based IT security systems with behavioral analysis based IT security systems within the next 24 months
- 49 percent said they would be using behavioral analysis based systems specifically for database transaction security
The link below has more information:-
No comments:
Post a Comment