Exploiting Input Sanitization for Regex Denial of Service

Web services use server-side input sanitization to guard against harmful input. Some web services publish their sanitization logic to make their client interface more usable, e.g., allowing clients to debug invalid requests locally. However, this usability practice poses a security risk. Specificall...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	2022 IEEE/ACM 44th International Conference on Software Engineering (ICSE) S. 883 - 895
Hauptverfasser:	Barlas, Efe, Du, Xin, Davis, James C.
Format:	Tagungsbericht
Sprache:	Englisch
Veröffentlicht:	ACM 01.05.2022
Schlagworte:	algorithmic complexity attacks denial of service Empirical software engineering Libraries Probes ReDoS regular expressions Security Servers Software Usability web security Web services
ISSN:	1558-1225
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!