Background

With the birth and promotion of a series of new Internet services, such as Web2.0 and social networks, Internet applications based on Web environment are becoming more and more extensive, and more and more applications are migrating to HTTP protocol. Web APIs contain a wide range of functions. With API interfaces, network applications can be used for storage services, message services, computing services and other capabilities.

Web applications are mostly used for internal information management and external business processing of an enterprise, and Web business has become intruders' primary attack/invasion target. Intruders gains the control of a Web server by use of SQL injection vulnerability in enterprise Web applications to tamper with webpage contents or even steal important internal data.