Abstract:Due to well-hidden and stage-triggered properties of second-order SQL injections in web applications, current approaches are ineffective in addressing them and still report high false negatives and false positives. To reduce false results, we propose a Proxy-based static analysis and dynamic execution mechanism towards detecting, locating and preventing second-order SQL injections (SQLPsdem). The static analysis first locates SQL statements in web applications and identifies all data sources and injection points (e.g., Post, Sessions, Database, File names) that injection attacks can exploit. After that, we reconstruct the SQL statements and use attack engines to jointly generate attacks to cover all the state-of-the-art attack patterns so as to exploit these applications. We then use proxy-based dynamic execution to capture the data transmitted between web applications and their databases. The data are the reconstructed SQL statements with variable values from the attack payloads. If a web application is vulnerable, the data will contain malicious attacks on the database. We match the data with rules formulated by attack patterns to detect first and second-order SQL injection vulnerabilities in web applications, particularly the second-order ones. We use a representative and complete coverage of attack patterns and precise matching rules to reduce false results. By escaping and truncating malicious payloads in the data transmitted from the web application to the database, we can eliminate the possible negative impact of the data on the database. In the evaluation, by generating 52,771 SQL injection attacks using four attack generators, SQLPsdem successfully detects 26 second-order (including 13 newly discovered ones) and 375 first-order SQL injection vulnerabilities in 12 open-source web applications. SQLPsdem can also 100% eliminate the malicious impact of the data with negligible overhead.

Exploring injection prevention technologies for security-aware distributed collaborative manufacturing on the Semantic Web

Insights on Cooperative Defense for Multiple Industrial Security Technologies

SAID: State-aware Defense Against Injection Attacks on In-vehicle Network

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

A Study on Networked Industrial Robots in Smart Manufacturing: Vulnerabilities, Data Integrity Attacks and Countermeasures

Exploring Defense of SQL Injection Attack in Penetration Testing

Distributed Attack Detection of Multi-area Power Systems Against False Data Injection Attacks

Intranet Based Security Infrastructure for Manufacturing Grid

Detection and Prevention of SQL Injection Attacks Using Semantic Equivalence

F-DDIA: A Framework for Detecting Data Injection Attacks in Nonlinear Cyber-Physical Systems.

Manufacturing Deep Web Service Management: Exploring Semantic Web Technologies

Distributed host-based collaborative detection for false data injection attacks in smart grid cyber-physical system

Managing Distributed Manufacturing Knowledge Through Multi-Perspective Modelling for Semantic Web Applications

SWMRD: a Semantic Web-based Manufacturing Resource Discovery System for Cross-Enterprise Collaboration

Secure strategy for networked manufacturing system

Modeling and detection of false data injection attacks in cyber-physical distribution system with load aggregator interaction

Research on the technology of detecting the SQL injection attack and non-intrusive prevention in WEB system

SQLPsdem: A Proxy-Based Mechanism Towards Detecting, Locating and Preventing Second-Order SQL Injections

An Automatic Unsafe States Reasoning Approach Towards Industry 5.0’s Human-Centered Manufacturing Via Digital Twin

SePanner: Analyzing Semantics of Controller Variables in Industrial Control Systems Based on Network Traffic

Anomaly detection using isomorphic analysis for false data injection attacks in industrial control systems