Earticle

초록

영어

Web sites can be dynamic and static sometimes a combination of both. To assure security all the websites need protections to their database. This paper proposes a static analysis of various technique of detecting recently discovered web-based vulnerabilities such as cross-site scripting and HTTP splitting attacks with NoSQL injection. Today, the situation is¬ better, and traditional databases have introduced built-in protection mechanisms. But does this mean that NoSQL systems are immune to injections? Our study shows that although the security of the query language has largely improved; there are still techniques for injecting malicious queries. Some works already provide reports of NoSQL injection techniques. We also show the methods of accessing the dark web. We use TOR browser for the explanation of accessing dark web. The user entering into the website with different format rather than the original will be noticed, and they are not allowed to access our website. Instead of passing SQL queries into the input fields the user can also directly pass the objects inside it. Once the user enters in, with the actual format and attempts to upload .exe file the website tends to block that user's account.

목차

Abstract
 1. Introduction
 2. Methodology
 3. Implementation Modules
  3.1. Main Architecture of the Project
  3.2. NoSQL Injection Execution
  3.3. Object Injection
  3.4. Dark Web (Tor Browser Attack)
  3.5. Cross-site Injection Attack
  3.6. EXE File Uploads Attack
  3.7. Code Implementation
 4. Future Scope
 5. Conclusion
 Acknowledgment
 References

키워드

저자

• Hemn B. Abdalla [ School of Communication and Information Engineering, Chongqing University of Posts and Telecommunications, China, Chongqing ]
• Guoquang Li [ School of Communication and Information Engineering, Chongqing University of Posts and Telecommunications, China, Chongqing ]
• Jinzhao Lin [ School of Communication and Information Engineering, Chongqing University of Posts and Telecommunications, China, Chongqing ]
• Mustafa A. Alazeez [ School of Computer Science, Huazhong University of Science and Technology, China, Wuhan ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605