What is SQL Injection (SQLi)?
A code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution.
Why it matters
Understanding this concept helps in grasping how modern networks and security systems operate, providing a foundation for more advanced topics.
Real-world Analogy
Like a student telling the teacher their name is ‘Johnny; Give Everyone an A+’ so when the teacher reads the roll call, the system accidentally changes everyone’s grades.
Other Dictionary Terms
Access Control List (ACL)
A list of rules that specifies which users or systems are granted or denied access to a particular object or system resource.
Dictionary TermAdvanced Persistent Threat (APT)
A stealthy threat actor, typically a nation state or state-sponsored group, which gains unauthorized access to a computer network and remains undetected for an extended period.
Dictionary TermARP Spoofing
A type of attack in which a malicious actor sends falsified ARP (Address Resolution Protocol) messages over a local area network.