2 citations · 6 across the 6 of their papers we have counts for
4 papers · 1 filter
Command injection attacks, continuations, and the Lambek calculus
Hayo Thielecke
This paper shows connections between command injection attacks, continuations, and the Lambek calculus: certain command injections, such as the tautology attack on SQL, are shown t…
Static Analysis for Regular Expression Exponential Runtime via Substructural Logics (Extended)
Asiri Rathnayake, Hayo Thielecke
Regular expression matching using backtracking can have exponential runtime, leading to an algorithmic complexity attack known as REDoS in the systems security literature. In this…
Static Analysis for Regular Expression Denial-of-Service Attacks
James Kirrage, Asiri Rathnayake, Hayo Thielecke
Regular expressions are a concise yet expressive language for expressing patterns. For instance, in networked software, they are used for input validation and intrusion detection.…
Operational semantics for signal handling
Maxim Strygin, Hayo Thielecke
Signals are a lightweight form of interprocess communication in Unix. When a process receives a signal, the control flow is interrupted and a previously installed signal handler is…