* SQL injection is a type of injection attack where malicious SQL statements are inserted into an entry field for execution.
* The primary way to prevent SQL injection is by validating and sanitizing user input. This involves checking the input for malicious content and ensuring it adheres to expected patterns.
* Prepared statements (parameterized queries) are also highly effective, as they treat user input as data rather than executable code.
* Implementing these practices ensures that any input received from users does not manipulate SQL queries in a harmful way.
References
* OWASP SQL Injection Prevention Cheat Sheet
* Best Practices for Input Validation and Sanitization
* Secure Coding Guidelines

The virtual address space for a Windows process is the set of virtual memory addresses that can be used by the process. Each process has its own virtual address space that is isolated from other processes. The virtual address space is divided into regions that have different attributes, such as read-only, read-write, execute, and so on. The virtual address space is mapped to the physical memory by the operating system using a data structure called a page table. References:
* Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) v1.0, Module 4: Host-Based Analysis, Lesson 4.1: Windows Operating System
* Virtual Address Space

The attack vector score in the Common Vulnerability Scoring System (CVSS) reflects how a vulnerability can be exploited. A higher score is given when the attack can be conducted remotely, making it easier for an attacker to exploit the vulnerability without physical access to the vulnerable component3. References: The CVSS specification document provides a detailed explanation of how the attack vector score is determined, emphasizing the impact of the ease of exploitation on the score