Methods, systems and computer readable media for detecting command injection attacks

摘要

Methods and systems are described for detecting command injection attacks. A positive, taint inference method includes receiving signature fragments on one hand, converting command injection instructions into command fragments on another hand, thus identifying potential attacks upon the condition that a command injection instruction includes critical untrusted parts by using signature fragments. A system detects command injection attacks using this kind of method, and remediates and rejects potential attacks.

主权项

1. A system for detecting command injection attacks based on command instructions to be received from a client processor or client data memory, said system comprising:
a memory unit operative to store software code; and a processor configured to:
extract string fragments from said software code to provide extracted signature fragments;receive said client command instructions;convert the received command instructions into command fragments;identify critical parts from said command fragments: determine if said critical parts are untrusted or trusted by matching with said extracted signature fragments;
identify potential attacks upon the condition that a command includes critical parts that are untrusted; andcommunicate said identification of potential attacks to an output device, wherein the command fragments are different from external data processed by the software code, and the critical parts of the command fragments do not originate from previously identified command fragments.