Замрій, І.В. and Шахматов, І.О. and Яскевич, Владислав Олександрович (2024) BlockchainSQLSecure: Integration of Blockchain to Strengthen Protection Against SQL Injections Вісник Київського національного університету імені Тараса Шевченка. Фізико-математичні науки (1(78)). pp. 160-168. ISSN 2218-2055
![]() |
Text
V_Yaskevych_I_Zamrii_I_Shakhmatov_BTSNUK_1_78_FITM_DUIKT.pdf - Published Version Download (1MB) |
Abstract
In the field of web development, there has been an increased necessity for tools to protect against SQL injections, which can have catastrophic consequences for databases. This article introduces the concept of BlockchainSQLSecure, a unique method that leverages the capabilities of blockchain technologies to establish an additional layer of security in Django applications. The central idea revolves around creating a blockchain ledger for each SQL query made to the database, ensuring data immutability and traceability. This level of transparency actively counteracts the possibility of unauthorized modifications or injection attempts, as any interference becomes immediately apparent. In the context of this article, mechanisms for validating SQL queries through smart contracts on the blockchain have been explored, which enable the automatic rejection of queries containing potential injections. Additionally, methods of decentralized log storage have been examined, providing for the distribution of information among network participants, thereby rendering the system resilient to attacks and attempts of external interference. Furthermore, BlockchainSQLSecure can be implemented as a plugin for Django, facilitating its integration into existing projects. In a broader sense, the presented concept demonstrates how the combination of traditional protection methods and modern blockchain technologies can offer a new level of security for web applications.
Item Type: | Article |
---|---|
Uncontrolled Keywords: | Blockchain; Django; security; integration; access restriction; Python; web applications |
Subjects: | Статті у базах даних > Index Copernicus Статті у базах даних > Scopus |
Divisions: | Факультет інформаційних технологій та математики > Кафедра комп'ютерних наук |
Depositing User: | Владислав Олександрович Яскевич |
Date Deposited: | 07 Nov 2024 08:51 |
Last Modified: | 07 Nov 2024 08:51 |
URI: | https://elibrary.kubg.edu.ua/id/eprint/50069 |
Actions (login required)
![]() |
View Item |