302 search results - page 4 / 61 » Using Attack Injection to Discover New Vulnerabilities |
PRDC
2006
IEEE
14 years 1 months ago
2006
IEEE
Vulnerabilities such as buffer overflows exist in some programs, and such vulnerabilities are susceptible to address injection attacks. The input data tracking method, which was ...
ESSOS
2010
Springer
2010
Springer
Idea: Using System Level Testing for Revealing SQL Injection-Related Error Message Information Leaks
14 years 1 months ago
Completely handling SQL injection consists of two activities: properly protecting the system from malicious input, and preventing any resultant error messages caused by SQL injecti...
EDO
2005
Springer
14 years 17 days ago
2005
Springer
An SQL injection attack targets interactive web applications that employ database services. Such applications accept user input, such as form fields, and then include this input ...
SP
2006
IEEE
14 years 1 months ago
2006
IEEE
The number and the importance of Web applications have increased rapidly over the last years. At the same time, the quantity and impact of security vulnerabilities in such applica...
ACSAC
2009
IEEE
14 years 1 months ago
2009
IEEE
—To strengthen systems against code injection attacks, the write or execute only policy (W⊕X) and address space layout randomization (ASLR) are typically used in combination. T...