학술논문

New mechanism to confront injection attacks
Document Type
Conference
Source
2011 IEEE 3rd International Conference on Communication Software and Networks Communication Software and Networks (ICCSN), 2011 IEEE 3rd International Conference on. :112-115 May, 2011
Subject
Communication, Networking and Broadcast Technologies
Computing and Processing
Signal Processing and Analysis
XML
HTML
Security
XML: Extensible Markup Language
XHTML: extensible Hypertext Markup Language
HTTP: Hyper Text Transfer Protocol
SMTP: Simple Mail Transfer Protocol
DTD: Document Type Definition
XML Schema
XML injection
DoS: Denial of service
SOAP: Simple Object Access Protocol
Language
Abstract
Computer as a functional and effective tool for changing and improving human life, concerns with variety of knowledge areas and techniques. These knowledge areas comprise both technical and managerial tools and skills. Moreover, developing a computer application using human resource and other technical resources drastically require fund and expense. In this case, making an appropriate and reliable infrastructure for developing software products is critical to assure IT projects success. This article concentrates on variant aspects of XML security environment and its related security attacks namely DoS and XML injection. Both of them are of the most abused techniques by hackers to disrupt web services data hoarding, to influence on web servers and to penetrate into the servers as a legal user. Then, it will offer a new method to prevent XML injection attacks by adding a new component to the software systems for changing the data section of the XML data code characters in such a way that it will become more secure in face of XML injection attacks.