An attacker can use SQL injection to perform actions on a database that the developer did not intend, which can lead to modifying or revealing sensitive data. According to a University article, Journal of Digital Forensics, Security and Law (2017), it can lead to costs of up to $196,000 per successful attack. Because of the risks and costs involved, it is important we understand and can defend against these attacks. SQL Injection attacks can be one of the most effective attacks and difficult for a security team to deal with. From a penetration testers perspective, describe: • The techniques used to test for SQL Injection Vulnerabilities • Why testing for SQL vulnerabilities is difficult, • What are countermeasures that can be deployed to help defend against SQL injection attacks.

An attacker can use SQL injection to perform actions on a database that the developer did not intend, which can lead to modifying or revealing sensitive data. According to a University article, Journal of Digital Forensics, Security and Law (2017), it can lead to costs of up to $196,000 per successful attack. Because of the risks and costs involved, it is important we understand and can defend against these attacks. SQL Injection attacks can be one of the most effective attacks and difficult for a security team to deal with. From a penetration testers perspective, describe: • The techniques used to test for SQL Injection Vulnerabilities • Why testing for SQL vulnerabilities is difficult, • What are countermeasures that can be deployed to help defend against SQL injection attacks.