| Paper Abstract and Keywords |
| Presentation |
2007-07-19 16:10
Evaluation of a library against injection attacks
Takao Okubo (Fujitsu Labs./IISEC), Hidehiko Tanaka (IISEC) |
| Abstract |
(in Japanese) |
(See Japanese page) |
| (in English) |
Injection vulnerabilities, which enable attacks done by injecting command string into input data, have big percentage of total software vulnerabilities. Existing Programming techniques and libraries are not sufficient for complete solution and easy testing methods. We proposed a general convention set and a secure library for preventing and testing injection attacks. In this papaer, the library are evalluated with some sample application programs, and compared with other existing methods. And some improvement has done based on the results. |
| Keyword |
(in Japanese) |
(See Japanese page) |
| (in English) |
software / vulnerability / injection attacks / coding convention / library / / / |
| Reference Info. |
IEICE Tech. Rep., vol. 107, pp. 177-184, July 2007. |
| Paper # |
|
| Date of Issue |
2007-07-12 (ISEC, SITE) |
| ISSN |
Print edition: ISSN 0913-5685 Online edition: ISSN 2432-6380 |
| Download PDF |
|
| Conference Information |
| Committee |
ISEC SITE IPSJ-CSEC |
| Conference Date |
2007-07-19 - 2007-07-20 |
| Place (in Japanese) |
(See Japanese page) |
| Place (in English) |
Future University-Hakodate |
| Topics (in Japanese) |
(See Japanese page) |
| Topics (in English) |
|
| Paper Information |
| Registration To |
IPSJ-CSEC |
| Conference Code |
2007-07-ISEC-SITE-CSEC |
| Language |
Japanese |
| Title (in Japanese) |
(See Japanese page) |
| Sub Title (in Japanese) |
(See Japanese page) |
| Title (in English) |
Evaluation of a library against injection attacks |
| Sub Title (in English) |
|
| Keyword(1) |
software |
| Keyword(2) |
vulnerability |
| Keyword(3) |
injection attacks |
| Keyword(4) |
coding convention |
| Keyword(5) |
library |
| Keyword(6) |
|
| Keyword(7) |
|
| Keyword(8) |
|
| 1st Author's Name |
Takao Okubo |
| 1st Author's Affiliation |
Fujitsu Laboratories ltd./Institute of Information Security (Fujitsu Labs./IISEC) |
| 2nd Author's Name |
Hidehiko Tanaka |
| 2nd Author's Affiliation |
Institute of Information Security (IISEC) |
| 3rd Author's Name |
|
| 3rd Author's Affiliation |
() |
| 4th Author's Name |
|
| 4th Author's Affiliation |
() |
| 5th Author's Name |
|
| 5th Author's Affiliation |
() |
| 6th Author's Name |
|
| 6th Author's Affiliation |
() |
| 7th Author's Name |
|
| 7th Author's Affiliation |
() |
| 8th Author's Name |
|
| 8th Author's Affiliation |
() |
| 9th Author's Name |
|
| 9th Author's Affiliation |
() |
| 10th Author's Name |
|
| 10th Author's Affiliation |
() |
| 11th Author's Name |
|
| 11th Author's Affiliation |
() |
| 12th Author's Name |
|
| 12th Author's Affiliation |
() |
| 13th Author's Name |
|
| 13th Author's Affiliation |
() |
| 14th Author's Name |
|
| 14th Author's Affiliation |
() |
| 15th Author's Name |
|
| 15th Author's Affiliation |
() |
| 16th Author's Name |
|
| 16th Author's Affiliation |
() |
| 17th Author's Name |
|
| 17th Author's Affiliation |
() |
| 18th Author's Name |
|
| 18th Author's Affiliation |
() |
| 19th Author's Name |
|
| 19th Author's Affiliation |
() |
| 20th Author's Name |
|
| 20th Author's Affiliation |
() |
| 21st Author's Name |
|
| 21st Author's Affiliation |
() |
| 22nd Author's Name |
|
| 22nd Author's Affiliation |
() |
| 23rd Author's Name |
|
| 23rd Author's Affiliation |
() |
| 24th Author's Name |
|
| 24th Author's Affiliation |
() |
| 25th Author's Name |
|
| 25th Author's Affiliation |
() |
| 26th Author's Name |
/ / |
| 26th Author's Affiliation |
()
() |
| 27th Author's Name |
/ / |
| 27th Author's Affiliation |
()
() |
| 28th Author's Name |
/ / |
| 28th Author's Affiliation |
()
() |
| 29th Author's Name |
/ / |
| 29th Author's Affiliation |
()
() |
| 30th Author's Name |
/ / |
| 30th Author's Affiliation |
()
() |
| 31st Author's Name |
/ / |
| 31st Author's Affiliation |
()
() |
| 32nd Author's Name |
/ / |
| 32nd Author's Affiliation |
()
() |
| 33rd Author's Name |
/ / |
| 33rd Author's Affiliation |
()
() |
| 34th Author's Name |
/ / |
| 34th Author's Affiliation |
()
() |
| 35th Author's Name |
/ / |
| 35th Author's Affiliation |
()
() |
| 36th Author's Name |
/ / |
| 36th Author's Affiliation |
()
() |
| Speaker |
Author-1 |
| Date Time |
2007-07-19 16:10:00 |
| Presentation Time |
25 minutes |
| Registration for |
IPSJ-CSEC |
| Paper # |
ISEC2007-41, SITE2007-35 |
| Volume (vol) |
vol.107 |
| Number (no) |
no.140(ISEC), no.139(SITE) |
| Page |
pp.177-184 |
| #Pages |
8 |
| Date of Issue |
2007-07-12 (ISEC, SITE) |