Live briefing
Everything about Code injection
Computer security exploit using injected code
Code injection is a computer security exploit where a program fails to correctly process external data, such as user input, causing it to interpret the data as executable commands. An attacker using this method "injects" code into the program while it is running. Successful exploitation of a code injection vulnerability can result in data breaches, access to restricted or critical computer systems, and the spread of malware. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Code injectionA 5-minute orientation
- Skim a recent paper: Code Injection Attacks in Wireless-Based Internet of Things (IoT): A Comprehensive Review and Practical ImplementationsInfluential work since 2022
- Pick up a classic book: Dosage calculationsThe most-reprinted book on the subject
- Read the landmark paper: CODDLE: Code-Injection Detection With Deep LearningCited 65 times
- Go sideways: SQL injectionA closely related topic
- Go sideways: File inclusion vulnerabilityA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
CODDLE: Code-Injection Detection With Deep Learning
Enhancement of Fault Injection Techniques Based on the Modification of VHDL Code
Enhancement of the SPARC90 code to pool scrubbing events under jet injection regime
Runtime Defense against Code Injection Attacks Using Replicated Execution
New deep learning method to detect code injection attacks on hybrid applications
Runtime countermeasures for code injection attacks against C and C++ programs
Efficient Testing of Recovery Code Using Fault Injection
Defining code-injection attacks
🆕 Influential since 2022
Code Injection Attacks in Wireless-Based Internet of Things (IoT): A Comprehensive Review and Practical Implementations
Transport simulations of pre-thermal quench shattered pellet injection in ITER: code verification and assessment of key trends
Cross Channel Scripting and Code Injection Attacks on Web and Cloud-Based Applications: A Comprehensive Review
Multichain-Assisted Lightweight Security for Code Mutated False Data Injection Attacks in Connected Autonomous Vehicles
Standardized approach to treatment of retinal artery occlusion after intraarterial injection of soft tissue fillers: EYE-CODE
📚 Books worth reading
Dosage calculationsGloria D. Pickar, Amy P. Abernethy · 1982
Clean CodeRobert C. Martin · 2008- 📕Leadership, Management and Data ScienceJerry Ramonyai · 2022
The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
Discrete mathematicsNorman Biggs · 1985
Advanced automotive fault diagnosisTom Denton · 2006- 📕Abnormal fault-recovery characteristics of the fault-tolerant multiprocessor uncovered using a new fault-injection methodologyPeter A. Padilla · 1991
- 📕International agreement reportR. Bovalini, Università di Pisa · 1996
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- SQL injection In computing, SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into…
- File inclusion vulnerability A File Inclusion Vulnerability is a type of web vulnerability that is most commonly found to affect web applications that rely on a scripting run time…
- Web shell A web shell is a shell-like interface that facilitates remote access to a web server, commonly exploited for cyberattacks. Unlike traditional shells, it…
- Prepared statement In database management systems (DBMS), a prepared statement, parameterized statement, (not to be confused with parameterized query) is a feature where…
- Session poisoning Session poisoning (also referred to as "session data pollution" and "session modification") is a method to exploit insufficient input validation within…
- Code audit A software code audit is a comprehensive analysis of source code in a programming project with the intent of discovering bugs, security breaches or violations…
- LDAP injection In computer security, LDAP injection is a code injection technique used to exploit web applications which could reveal sensitive user information or modify…
- Common Gateway Interface In computing, Common Gateway Interface (CGI) is an interface specification that enables web servers to execute an external program to process HTTP or HTTPS…