LDAP Injection Techniques

摘要：

The increase in the number of databases accessed only by some applications has made code injection attacks an important threat to almost any current system. If one of these applications accepts inputs from a client and executes these inputs without first validating them, the attackers are free to execute their own queries and therefore, to extract, modify or delete the content of the database associated to the application. In this paper a deep analysis of the LDAP injection techniques is presented. Furthermore, a clear distinction between classic and blind injection techniques is made.

关键词： Web applications security code injection techniques LDAP.

作者: Jose Maria Alonso Rodolfo Bordon Marta Beltran Antonio Guzman

作者单位: Informatica64 c/Juan Ramon Jimenez 828933 Mostoles,Madrid,Spain. Computing Department,Universidad Rey Juan Carlos,1018 Rectorado 28933 Mostoles,Madrid,Spain.

会议类型: 国际会议

会议名称: The 11th IEEE International Conference on Communications Systems(第11届电子和电气工程师协会国际通信系统会议)(IEEE ICCS 2008)

会议地点: 广州

会议语种:英文

在线出版日期: 2008-11-19（万方平台首次上网日期，不代表论文的发表时间）