Exploring injection prevention technologies for security-aware distributed collaborative manufacturing on the Semantic Web

International Journal of Advanced Manufacturing Technology

Volumn 54, Issue 9-12, 2011, Pages 1167-1177

  Yang, Xiaohu ^a   Chen, Yixi ^a   Zhang, Wenyu ^b   Zhang, Shuai ^b  

^a ZHEJIANG UNIVERSITY   (China)

^b ZHEJIANG UNIVERSITY OF FINANCE AND ECONOMICS   (China)

Author keywords

Collaborative manufacturing; Distributed manufacturing; Injection prevention; Security; Semantic Web

Indexed keywords

ACCESS CONTROL MODELS; COLLABORATIVE MANUFACTURING; COLLABORATIVE MANUFACTURING SYSTEM; COLLABORATIVE SYSTEMS; CONTEXT INFORMATION; DATABASE TABLES; DISTRIBUTED MANUFACTURING; ILLEGAL ACCESS; PARSE TREES; PREVENTION TECHNOLOGIES; PROTOTYPE SYSTEM; RDF DATABASE; RUNTIMES; SECURITY; SECURITY-AWARE; SEMANTIC WEB APPLICATIONS;

ACCESS CONTROL; COMPUTER AIDED MANUFACTURING; DISTRIBUTED DATABASE SYSTEMS; MANUFACTURE; NETWORK SECURITY; SEMANTICS; USER INTERFACES;

SEMANTIC WEB;

EID: 79958824080     PISSN: 02683768     EISSN: 14333015     Source Type: Journal    
DOI: 10.1007/s00170-010-2983-x     Document Type: Article

References (23)

1. JW Yin WY Zhang M Cai 2009 Weaving an agent-based semantic grid for distributed collaborative manufacturing Int J Prod Res 48 7 2109 2126 10.1080/00207540802582870
2. WebCohort Inc. (2004) Only 10% Web applications secured against common hacking techniques. http://www.imperva.com/company/news/2004-feb-02.html
3. Armorize Technologies (2005) http://www.armorize.com/, [Accessed 2 Dec 2008]
4. MY Huang YJ Lin H Xu 2004 A framework for Web-based product data management using J2EE Int J Adv Manuf Technol 24 847 852 10.1007/s00170-003- 1697-8 (Pubitemid 40002993)
5. Q Liu YJ Shi 2008 Grid manufacturing: a new solution for cross-enterprise collaboration Int J Adv Manuf Technol 36 205 212 10.1007/s00170-006-0832-8 (Pubitemid 351222577)
6. GD Sun YP Chen ZD Zhou ZB Min 2008 A configurable access control system for networked manufacturing monitoring using XML Int J Adv Manuf Technol 39 1252 1261 10.1007/s00170-007-1292-5
7. KK Leong KM Yu WB Lee 2003 A security model for distributed product data management system Comput Ind 50 179 193 10.1016/S0166-3615(02)00119-7
8. Fu X, Qian K (2008) SAFELI: SQL injection scanner using symbolic execution. Proceedings of the 2008 Workshop on Testing, Analysis, and Verification of Web Services and Applications TAV-WEB 2008. pp 34-39
9. Kosuga Y, Kono K, Hanaoka M, Hishiyama M, Takahama Y (2007) Sania: syntactic and semantic analysis for automated testing against SQL injection. In: Proceedings of 23rd Annual Computer Security Applications Conference, 2007 (ACSAC 2007). Miami, Dec 2007, pp 107-117
10. Huang YW, Yu F, Hang C, Tsai CH, Lee DT, Kuo SY (2004) Securing Web application code by static analysis and runtime protection. Proceedings of the 13th International Conference on World Wide Web. New York, May 17-22
11. Buehrer GT, Weide BW, Sivilotti PAG (2005) Using parse tree validation to prevent SQL injection attacks. Proceedings of the 5th International Workshop on Software Engineering and Middleware (SEM'05). Lisbon, Portugal, pp 106-113
12. Su Z, Wassermann G (2006) The essence of command injection attacks in Web applications, Proc. 33 rd Ann. Symp. Principles of Programming Languages. pp 372-382
13. Boyd SW, Keromytis AD (2004) SQLrand: preventing SQLInjection attacks. Proc. Second Int'l Conf. Applied Cryptography and Network Security. pp 292-302
14. Almeida A, Orduna P, Aguilera U, Larizgoitia I, Laiseca X (2008) SPARQL/RDQL/SPARUL Injection. http://www.morelab.deusto.es/
15. Eric P, Andy S (2008) SPARQL Query Language for RDF, W3C. Recommendation 15 January 2008. http://www.w3.org/TR/rdf-sparql-query/
16. Christian W, Soren A (2007) Implementing SPARQL support for relational databases and possible enhancements. The 1st Conference on Social Semantic Web 2007. pp 69-80
17. Jena-a Semantic Web framework for Java. http://jena.sourceforge.net
18. Arjohn K, Jeen B (2002) Sesame: RDF schema querying and storage, http://www.openrdf.org, [Accessed 14 Nov 2008]
19. Richard C (2005) Sparql2sql: a query engine for SPARQL over Jena triple stores, http://jena.sourceforge.net/sparql2sql/, [Accessed 1 Jan 2009]
20. Stephen T, Laurie W (2007) Using automated fix generation to secure SQL statements. Third International Workshop on Software Engineering for Secure Systems (SESS '07)
21. Sreeni, JavaCC (1996) https://javacc.dev.java.net/, [Accessed 3 Nov 2008]
22. JsqlParser (2004) http://jsqlparser.sourceforge.net/, [Accessed 13 Jan 2009]
23. ARQ-A SPARQL Processor for Jena (2004) http://jena.sourceforge.net/ARQ/, [Accessed 13 Jan 2009]