Fatal injection: a survey of modern code injection attack countermeasures

Abstract

With a code injection attack (CIA) an attacker can introduce malicious code into a computer program or system that fails to properly encode data that comes from an untrusted source. A CIA can have different forms depending on the execution context of the application and the location of the programming flaw that leads to the attack. Currently, CIAs are considered one of the most damaging classes of application attacks since they can severely affect an organisation's infrastructure and cause financial and reputational damage to it. In this paper we examine and categorize the countermeasures developed to detect the various attack forms. In particular, we identify two distinct categories. The first incorporates static program analysis tools used to eliminate flaws that can lead to such attacks during the development of the system. The second involves the use of dynamic detection safeguards that prevent code injection attacks while the system is in production mode. Our analysis is based on nonfunctional characteristics that are considered critical when creating security mechanisms. Such characteristics involve usability, overhead, implementation dependencies, false positives and false negatives. Our categorization and analysis can help both researchers and practitioners either to develop novel approaches, or use the appropriate mechanisms according to their needs. Subjects Security and Privacy

Attack Categorisation for IoT Applications in Critical Infrastructures, a Survey

“…The final category concerns Code Injection, which defines any threat that seeks to introduce malicious code onto a device through unsecured inputs [42]. Such attacks are quite common and generally target applications where inputs are fundamental to their function.…”

Internet of Things Security Requirements, Threats, Attacks, and Countermeasures

“…Physical devices essential and indispensable constituents of the physical layer of IoT architectures, for instance, radio frequency Identification (RFID), which are a major element of IoT-based systems. Within an internet-connected embedded system, RFID performs a considerable responsibility in designing microprocessors for wireless The exploitation of a misconfiguration All Improper configuration of amenities (i.e., databases, hosting system) related to IoT application enables the attacker to easily access an IoT application [72] Robust application design, execute checks and inspections constantly [73] Malicious code injection All An invader inserts a malevolent code into various packets with the main aim to sneak or change confidential application data [74] Static analysis, dynamic detection, firewalls [52] Malware…”

Code Injection Attacks in Wireless-Based Internet of Things (IoT): A Comprehensive Review and Practical Implementations

“…Code injection attacks are a type of cybersecurity threat in which an attacker injects malicious code into a vulnerable application or software. This code is designed to exploit security weaknesses in the application or software, allowing the attacker to gain unauthorized access to the system, steal sensitive data, or carry out other malicious activities and attacks [22,23]. Code injection attacks can be performed in various ways, including Structured Query Language (SQL) injection [24], Cross-Site Scripting (XSS) [25], and command injection [26], etc.…”