Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: A Formal Approach to Exploiting Multi-Stage Attacks based on File-System
  Vulnerabilities of Web Applications (Extended Version)   Web applications require access to the file-system for many different tasks.
When analyzing the security of a web application, secu- rity analysts should
thus consider the impact that file-system operations have on the security of
the whole application. Moreover, the analysis should take into consideration
how file-system vulnerabilities might in- teract with other vulnerabilities
leading an attacker to breach into the web application. In this paper, we first
propose a classification of file- system vulnerabilities, and then, based on
this classification, we present a formal approach that allows one to exploit
file-system vulnerabilities. We give a formal representation of web
applications, databases and file- systems, and show how to reason about
file-system vulnerabilities. We also show how to combine file-system
vulnerabilities and SQL-Injection vulnerabilities for the identification of
complex, multi-stage attacks. We have developed an automatic tool that
implements our approach and we show its efficiency by discussing several
real-world case studies, which are witness to the fact that our tool can
generate, and exploit, complex attacks that, to the best of our knowledge, no
other state-of-the-art-tool for the security of web applications can find.

18
The categories of this paper are: econ
31
The categories of this paper are: ao-sci
30
The categories of this paper are: q-alg
33
The categories of this paper are: plasm-ph
11
The categories of this paper are: hep-lat
13
The categories of this paper are: quant-ph
4
The categories of this paper are: cond-mat
16
The categories of this paper are: stat
21
The categories of this paper are: adap-org
35
The categories of this paper are: mtrl-th
26
The categories of this paper are: bayes-an
36
The categories of this paper are: cmp-lg
9
The categories of this paper are: nlin
37
The categories of this paper are: supr-con
8
The categories of this paper are: hep-ex
12
The categories of this paper are: nucl-th