Model of rules for malicious input parameters detection


 This article is devoted to detection of advanced techniques malicious input parameter injections and web application firewall (WAF) bypass. The authors have proposed a hierarchical model for rules definition, which allows edit different fragments separately. has been implemented with the usage Backus-Naur form ANTLR4 (generator parsers lexers). solution tested using some popular scanners. testing environment created Python3. results research compared corresponding ones existing open source – libinjection. main accent made SQL injcetions Cross-Site Scripting attacks.