Command injection attacks, continuations, and the Lambek calculus

This paper shows connections between command injection attacks, continuations, and the Lambek calculus: certain command injections, such as the tautology attack on SQL, are shown to be a form of control effect that can be typed using the Lambek calculus, generalizing the double-negation typing of co...

Full description

Bibliographic Details
Main Author: Hayo Thielecke
Format: Article
Language:English
Published: Open Publishing Association 2016-06-01
Series:Electronic Proceedings in Theoretical Computer Science
Online Access:http://arxiv.org/pdf/1606.06382v1
_version_ 1811331509581250560
author Hayo Thielecke
author_facet Hayo Thielecke
author_sort Hayo Thielecke
collection DOAJ
description This paper shows connections between command injection attacks, continuations, and the Lambek calculus: certain command injections, such as the tautology attack on SQL, are shown to be a form of control effect that can be typed using the Lambek calculus, generalizing the double-negation typing of continuations. Lambek's syntactic calculus is a logic with two implicational connectives taking their arguments from the left and right, respectively. These connectives describe how strings interact with their left and right contexts when building up syntactic structures. The calculus is a form of propositional logic without structural rules, and so a forerunner of substructural logics like Linear Logic and Separation Logic.
first_indexed 2024-04-13T16:21:37Z
format Article
id doaj.art-2fe759bf45fd4d5a8b0c5f07a7d7fd96
institution Directory Open Access Journal
issn 2075-2180
language English
last_indexed 2024-04-13T16:21:37Z
publishDate 2016-06-01
publisher Open Publishing Association
record_format Article
series Electronic Proceedings in Theoretical Computer Science
spelling doaj.art-2fe759bf45fd4d5a8b0c5f07a7d7fd962022-12-22T02:39:54ZengOpen Publishing AssociationElectronic Proceedings in Theoretical Computer Science2075-21802016-06-01212Proc. WoC 2015819610.4204/EPTCS.212.6:6Command injection attacks, continuations, and the Lambek calculusHayo Thielecke0 Computer Science, University of Birmingham This paper shows connections between command injection attacks, continuations, and the Lambek calculus: certain command injections, such as the tautology attack on SQL, are shown to be a form of control effect that can be typed using the Lambek calculus, generalizing the double-negation typing of continuations. Lambek's syntactic calculus is a logic with two implicational connectives taking their arguments from the left and right, respectively. These connectives describe how strings interact with their left and right contexts when building up syntactic structures. The calculus is a form of propositional logic without structural rules, and so a forerunner of substructural logics like Linear Logic and Separation Logic.http://arxiv.org/pdf/1606.06382v1
spellingShingle Hayo Thielecke
Command injection attacks, continuations, and the Lambek calculus
Electronic Proceedings in Theoretical Computer Science
title Command injection attacks, continuations, and the Lambek calculus
title_full Command injection attacks, continuations, and the Lambek calculus
title_fullStr Command injection attacks, continuations, and the Lambek calculus
title_full_unstemmed Command injection attacks, continuations, and the Lambek calculus
title_short Command injection attacks, continuations, and the Lambek calculus
title_sort command injection attacks continuations and the lambek calculus
url http://arxiv.org/pdf/1606.06382v1
work_keys_str_mv AT hayothielecke commandinjectionattackscontinuationsandthelambekcalculus