Defining code-injection attacks

DOI10.1145/2103656.2103678MaRDI QIDQ2942871zbMATH OpenOpenAlexFDO

Authors Donald Ray, Jay Ligatti

Publication date 11 September 2015

Published in Proceedings of the 39th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1145/2103656.2103678

zbMATH Keywords

language-based securityweb-application security

Mathematics Subject Classification ID

Theory of programming languages (68N15) Database theory (68P15) Internet topics (68M11)

Recommendations

• Abstract code injection. A semantic approach based on abstract non-interference
• Applied Cryptography and Network Security
• The essence of command injection attacks in web applications
• Preventing injection attacks with syntax embeddings
• Boolean formulas for the static identification of injection attacks in Java

Cited in

(9)

• A novel method for SQL injection attack detection based on removing SQL query attribute values
• The essence of command injection attacks in web applications
• Preventing injection attacks with syntax embeddings
• scientific article; zbMATH DE number 7301783 (Why is no real title available?)
• Bug attacks
• Boolean formulas for the static identification of injection attacks in Java
• Formal methods for web security
• Applied Cryptography and Network Security
• Abstract code injection. A semantic approach based on abstract non-interference

This page was built for publication: Defining code-injection attacks

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2942871)