Turning evil regexes harmless
2017 (Engelska)Ingår i: SAICSIT '17: Proceedings of the South African Institute of Computer Scientists and Information Technologists, ACM Digital Library, 2017, artikel-id 38Konferensbidrag, Publicerat paper (Refereegranskat)
Abstract [en]
We explore the relationship between ambiguity in automata and regular expressions on the one hand, and the matching time of backtracking regular expression matchers on the other. We focus in particular on the extreme cases where we have either an exponential amount of ambiguity or no ambiguity at all. We also investigate techniques to reduce or remove ambiguity from regular expressions, which can then be used to transform regular expressions which might be exploited by using algorithmic complexity, into harmless equivalent expressions.
Ort, förlag, år, upplaga, sidor
ACM Digital Library, 2017. artikel-id 38
Nyckelord [en]
algorithmic complexity attack, ReDoS, regular expression, backtracking matcher, ambiguity
Nationell ämneskategori
Datavetenskap (datalogi)
Identifikatorer
URN: urn:nbn:se:umu:diva-192862DOI: 10.1145/3129416.3129440ISI: 000426499000060Scopus ID: 2-s2.0-85032647990ISBN: 978-1-4503-5250-5 (tryckt)OAI: oai:DiVA.org:umu-192862DiVA, id: diva2:1641654
Konferens
SAICSIT '17: South African Institute of Computer Scientists and Information Technologists, Thaba 'Nchu, South Africa, September 26-28, 2017
2022-03-022022-03-022022-03-03Bibliografiskt granskad