Defining Injection Attacks

Abstract

Abstract. This paper defines and analyzes injection attacks. The definition is based on the NIE property, which states that an application's untrusted inputs must only produce Noncode Insertions or Expansions in output programs (e.g., SQL queries). That is, when applications generate output programs based on untrusted inputs, the NIE property requires that inputs only affect output programs by inserting or expanding noncode tokens (e.g., string and float literals, lambda values, pointers, etc). This paper calls attacks based on violating the NIE property BroNIEs (i.e., Broken NIEs) and shows that all code-injection attacks are BroNIEs. In addition, BroNIEs contain many malicious injections that do not involve injections of code; we call such attacks noncode-injection attacks. In order to mitigate both code-and noncode-injection attacks, this paper presents an algorithm for detecting and preventing BroNIEs.

Blockchain Technology for Secured Healthcare Data Communication among the Non-Terminal Nodes in IoT Architecture in 5G Network

“…The technology gap among the network devices leads to security breaches that had led to network attacks that include physical attacks that include node tampering, as stated by Burhan et al [5]; Samaila et al [6], malicious injection, as stated by Ray D. and Ligatti J. [7]; Chen, J. et al [8], software attacks, as mention by Mahmudul Hasan et al [9]; Oza A.D. et al [10] in their papers, privacy, and integrity attacks, as mention by Sumra I.A. et al [11]; Chenthara S et al [12].…”