Bala Neerumalla: SQL Injections by truncation

Published: June 4, 2006, 11:10 p.m.

b'In this talk, I will discuss some ways to circumvent common mitigations of SQL Injection vulnerabilities in dynamic SQL. I will then suggest ways to protect against them.\\n\\t\\n\\tBala Neerumalla specializes in finding application security vulnerabilities. He worked as a security engineer for SQL Server 2000 and SQL Server 2005. He is currently working as a security engineer for Exchange Hosted Services."'