Abstract-A NoSQL injection attack targets interactive Web applications that employ NoSQL database services. These applications accept user inputs and use them to form query statements at runtime. During NoSQL injection attack, an attacker might provide malicious query segments as user input which could result in a different database request. In this paper, a testing tool is presented to detect NoSQL injection attacks in web application which is called "NoSQL Racket". The basic idea of this tool depends on checking the intended structure of the NoSQL query by comparing NoSQL statement structure in code query statement (static code analysis) and runtime query statement (dynamic analysis). But we faced a big challenge, there is no a common query language to drive NoSQL databases like the same way in relational database using SQL as a standardized query language. The proposed tool is tested on four different vulnerable web applications and its effectiveness is compared against three different well known testers, none of them is able to detect any NoSQL Injection attacks. However, the implemented testing tool has the ability to detect the NoSQL injection attacks.
The main objective of this paper is to propose a simple, low cost, reliable and scalable architecture for building Smart Home Systems (SHSs) that can be used to remotely automate and control home appliances, using microcontroller. The proposed architecture aims to take advantage of emerging technologies to make it easier to develop Smart Home systems and to provide more management by expanding its capabilities suitably. The suggested design intends to make it easier and more convenient for many applications to access context data, as well as providing a new schematic guide for creating as complete and comprehensive Smart Home Systems and data processing as possible. Related topics like smart homes and their intelligent systems will be addressed by examining prior work and proposing the authors' opinions in order to suggest the new architecture. The proposed advanced architecture's building blocks include Classic Smart Homes, Internet of Things (IoT), Context-awareness (CA), Cloud Computing (CC), and Rulebased Event Processing Systems (RbEPS). Finally, the proposed architecture is validated and evaluated by constructing a smart home system.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.