"Presenting a new angle on a popular attack vector on databases: SQL Injection."

We will describe types and techniques of SQL Injection attacks on both RDBMS-based web applications and built-in database stored program units, and show how simple SQL Injection can be used to own the database server through the means of privilege escalation.

We will also list ways of preventing SQL Injection attacks - ranging from secure coding practices to various external tools that will alert and prevent SQL Injection attempts, and demonstrate how hacker techniques of evasion can be used to subvert them.

Finally, we will introduce new deep inspection tools for Microsoft SQL Server that can prevent SQL injection, even in zero-day scenarios.

Take away points:

.             How SQL Injection attacks work

.             Secure coding practices

.             Existing tools for SQL Injection prevention and techniques to evade them

.             New resilient technologies used to solve entirely SQL injections, even those exploiting zero-day vulnerabilities