Forum Discussion

Nik_67256's avatar
Nik_67256
Icon for Nimbostratus rankNimbostratus
Mar 01, 2012

ASM - Dynamic SQL Injection Protection

Hello All,     We know that big IP ASM can protect against SQL Ijnection attacks.     But Does it protect against "Dynamic SQL Injection Attacks"? If yes , how does it do it.     A...
security
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Mar 02, 2012
Hi Nik,

 

 

ASM is positioned between HTTP clients and the front end web server tier. So ASM doesn't validate web app to SQL communication. It does look for suspicious user input using attack signatures, character set validation, size limits, etc. This should be the same whether the web app is using dynamic SQL queries or not.

 

 

Aaron