SQL Injection Attacks among Threats to Company Data

Sony recently received its third major attack by hackers. This attack was claimed by Lulz Security, which claimed to use a simple SQL injection. So, what is a SQL injection? And has your company undertaken a data protection and data security audit that would ensure precautions are taken against an SQL injection, amongst other threats?

An SQL injection, or a "Structured Query Language" injection, is a common technique used by hackers to steal data from within a database. This technique involves a hacker entering SQL commands or code into an input box, such as a login and/or password box, to obtain access to a company's database.

Typically, when a legitimate website visitor enters his or her username and password, an SQL query is generated from such information and submitted to the database. If the information is verified, the user is allowed access; otherwise, access is denied.