Command injection attacks, continuations, and the Lambek calculus
This paper shows connections between command injection attacks, continuations, and the Lambek calculus: certain command injections, such as the tautology attack on SQL, are shown to be a form of control effect that can be typed using the Lambek calculus, generalizing the double-negation typing of co...
Main Author: | |
---|---|
Format: | Article |
Language: | English |
Published: |
Open Publishing Association
2016-06-01
|
Series: | Electronic Proceedings in Theoretical Computer Science |
Online Access: | http://arxiv.org/pdf/1606.06382v1 |
_version_ | 1811331509581250560 |
---|---|
author | Hayo Thielecke |
author_facet | Hayo Thielecke |
author_sort | Hayo Thielecke |
collection | DOAJ |
description | This paper shows connections between command injection attacks, continuations, and the Lambek calculus: certain command injections, such as the tautology attack on SQL, are shown to be a form of control effect that can be typed using the Lambek calculus, generalizing the double-negation typing of continuations. Lambek's syntactic calculus is a logic with two implicational connectives taking their arguments from the left and right, respectively. These connectives describe how strings interact with their left and right contexts when building up syntactic structures. The calculus is a form of propositional logic without structural rules, and so a forerunner of substructural logics like Linear Logic and Separation Logic. |
first_indexed | 2024-04-13T16:21:37Z |
format | Article |
id | doaj.art-2fe759bf45fd4d5a8b0c5f07a7d7fd96 |
institution | Directory Open Access Journal |
issn | 2075-2180 |
language | English |
last_indexed | 2024-04-13T16:21:37Z |
publishDate | 2016-06-01 |
publisher | Open Publishing Association |
record_format | Article |
series | Electronic Proceedings in Theoretical Computer Science |
spelling | doaj.art-2fe759bf45fd4d5a8b0c5f07a7d7fd962022-12-22T02:39:54ZengOpen Publishing AssociationElectronic Proceedings in Theoretical Computer Science2075-21802016-06-01212Proc. WoC 2015819610.4204/EPTCS.212.6:6Command injection attacks, continuations, and the Lambek calculusHayo Thielecke0 Computer Science, University of Birmingham This paper shows connections between command injection attacks, continuations, and the Lambek calculus: certain command injections, such as the tautology attack on SQL, are shown to be a form of control effect that can be typed using the Lambek calculus, generalizing the double-negation typing of continuations. Lambek's syntactic calculus is a logic with two implicational connectives taking their arguments from the left and right, respectively. These connectives describe how strings interact with their left and right contexts when building up syntactic structures. The calculus is a form of propositional logic without structural rules, and so a forerunner of substructural logics like Linear Logic and Separation Logic.http://arxiv.org/pdf/1606.06382v1 |
spellingShingle | Hayo Thielecke Command injection attacks, continuations, and the Lambek calculus Electronic Proceedings in Theoretical Computer Science |
title | Command injection attacks, continuations, and the Lambek calculus |
title_full | Command injection attacks, continuations, and the Lambek calculus |
title_fullStr | Command injection attacks, continuations, and the Lambek calculus |
title_full_unstemmed | Command injection attacks, continuations, and the Lambek calculus |
title_short | Command injection attacks, continuations, and the Lambek calculus |
title_sort | command injection attacks continuations and the lambek calculus |
url | http://arxiv.org/pdf/1606.06382v1 |
work_keys_str_mv | AT hayothielecke commandinjectionattackscontinuationsandthelambekcalculus |