Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely:  examines the effects and potential benefits of utilising b Application Firewalls (WAFs) and database proxies in SQL injection testing of b applications and services.  propose testing the WAF itself to refine and evaluate its security rules and prioritise fixing vulnerabilities that are not protected by the WAF.  also propose using database proxies as oracles for black-box security testing instead of relying only on the output of the application under test. The paper also presents a case study of our proposed approaches on two sets of b services. The results indicate that testing through WAFs can be used to prioritise vulnerabilities and that an oracle that uses a database proxy finds more vulnerabilities with fer tries than an oracle that relies only on the output of the application.
['Dennis Appelt', 'Nadia Alshahwan', 'Lionel C. Briand']
I am writing a research paper on a idea Assessing the Impact of Firewalls and Database Proxies on SQL Injection Testing
[{"from": "human", "value": "I am writing a research paper on a idea Assessing the Impact of Firewalls and Database Proxies on SQL Injection Testing"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely:  examines the effects and potential benefits of utilising b Application Firewalls (WAFs) and database proxies in SQL injection testing of b applications and services.  propose testing the WAF itself to refine and evaluate its security rules and prioritise fixing vulnerabilities that are not protected by the WAF.  also propose using database proxies as oracles for black-box security testing instead of relying only on the output of the application under test. The paper also presents a case study of our proposed approaches on two sets of b services. The results indicate that testing through WAFs can be used to prioritise vulnerabilities and that an oracle that uses a database proxy finds more vulnerabilities with fer tries than an oracle that relies only on the output of the application."}]