A new approach to preventing injection attacks on the Web Application Stack

Registration | Hotel | Walter E. Washington Convention Center

The presentation

Code injection vulnerabilities such as, SQL injection, javascript injection, byte-code injection, etc… constitute the most susceptible path of entry for rogue hackers into the corporate networks of an organization. This paper discusses the core components of Web Application code-injection attacks; the limitations of existing approaches (such as regular expression searches) to prevent such attacks; the paper introduces a new generalized approach to solving the code-injection problem by building new solution vectors based on compiler theory, in particular GLR parser theory combined with learning engines to solve the attack identification problem. An brief introduction to Trustifier ryū is provided as an example of practical implementation of the theories and concepts put forth in this paper.

Ahmed Masud

Speaker bio will be posted shortly.