Bala Neerumalla: SQL Injections by truncation




Black Hat Briefings, Las Vegas 2006 [Video] Presentations from the security conference show

Summary: "In this talk, I will discuss some ways to circumvent common mitigations of SQL Injection vulnerabilities in dynamic SQL. I will then suggest ways to protect against them. Bala Neerumalla specializes in finding application security vulnerabilities. He worked as a security engineer for SQL Server 2000 and SQL Server 2005. He is currently working as a security engineer for Exchange Hosted Services."