Command injection attacks, continuations, and the Lambek calculus

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Colleges, School and Institutes

Abstract

This paper shows connections between command injection attacks, continuations, and the Lambek calculus: certain command injections, such as the tautology attack on SQL, are shown to be a form of control effect that can be typed using the Lambek calculus, generalizing the double-negation typing of continuations. Lambek’s syntactic calculus is a logic with two implicational connectives taking their arguments from the left and right, respectively. These connectives describe how strings interact with their left and right contexts when building up syntactic structures. The calculus is a form of propositional logic without structural rules, and so a forerunner of substructural logics like Linear Logic and Separation Logic.

Details

Original languageEnglish
Title of host publication2015 Workshop on Continuations
Subtitle of host publicationpre-proceedings
EditorsOlivier Danvy
Publication statusPublished - 10 Apr 2015
Event2015 Workshop on Continuations - London, United Kingdom
Duration: 12 Apr 201512 Apr 2015

Conference

Conference2015 Workshop on Continuations
CountryUnited Kingdom
CityLondon
Period12/04/1512/04/15