Preventing injection attacks with syntax embeddings

DOI10.1016/J.SCICO.2009.05.004zbMATH Open1211.68046OpenAlexW2084168235WikidataQ59780402 ScholiaQ59780402MaRDI QIDQ608228FDOQ608228

Authors: Martin Bravenboer, Eelco Dolstra, Eelco Visser 

Publication date: 25 November 2010

Published in: Science of Computer Programming (Search for Journal in Brave)

Full work available at URL: https://doi.org/10.1016/j.scico.2009.05.004

Recommendations

• Applied Cryptography and Network Security
• The essence of command injection attacks in web applications
• Defining code-injection attacks
• Abstract code injection. A semantic approach based on abstract non-interference
• A novel method for SQL injection attack detection based on removing SQL query attribute values

zbMATH Keywords

securityprogram generationprogram transformationconcrete object syntaxinjection attackssyntax embedding

Mathematics Subject Classification ID

Theory of programming languages (68N15)

Cites Work

• Title not available (Why is that?)
• Title not available (Why is that?)
• The essence of command injection attacks in web applications
• Title not available (Why is that?)
• The JastAdd system - modular extensible compiler construction
• Title not available (Why is that?)
• Title not available (Why is that?)

Cited In (6)

• Defining code-injection attacks
• The essence of command injection attacks in web applications
• A novel method for SQL injection attack detection based on removing SQL query attribute values
• Simple and safe SQL queries with \texttt{C++} templates
• Applied Cryptography and Network Security
• Abstract code injection. A semantic approach based on abstract non-interference

Uses Software

• Stratego
• JastAdd
• Haskell
• Polyglot
• AMNESIA
• dk.brics.automaton

This page was built for publication: Preventing injection attacks with syntax embeddings

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q608228)