{"id":"https://openalex.org/W4299441945","doi":"https://doi.org/10.1145/3538969.3538999","title":"FileUploadChecker: Detecting and Sanitizing Malicious File Uploads in Web Applications at the Request Level","display_name":"FileUploadChecker: Detecting and Sanitizing Malicious File Uploads in Web Applications at the Request Level","publication_year":2022,"publication_date":"2022-08-17","ids":{"openalex":"https://openalex.org/W4299441945","doi":"https://doi.org/10.1145/3538969.3538999"},"language":"en","primary_location":{"id":"doi:10.1145/3538969.3538999","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3538969.3538999","pdf_url":null,"source":{"id":"https://openalex.org/S4363608926","display_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013951588","display_name":"Pascal Wichmann","orcid":"https://orcid.org/0000-0002-8969-4277"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Pascal Wichmann","raw_affiliation_strings":["Security in Distributed Systems, Universit\u00e4t Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security in Distributed Systems, Universit\u00e4t Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047306414","display_name":"Alexander Groddeck","orcid":null},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Alexander Groddeck","raw_affiliation_strings":["Universit\u00e4t Hamburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e4t Hamburg, Germany","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004687145","display_name":"Hannes Federrath","orcid":null},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hannes Federrath","raw_affiliation_strings":["Security in Distributed Systems, Universit\u00e4t Hamburg, Security in Distributed Systems, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security in Distributed Systems, Universit\u00e4t Hamburg, Security in Distributed Systems, Germany","institution_ids":["https://openalex.org/I159176309"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I159176309"],"apc_list":null,"apc_paid":null,"fwci":0.1845,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.36251032,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/upload","display_name":"Upload","score":0.848029613494873},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7837810516357422},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.6018643975257874},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4740825891494751},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.45390617847442627},{"id":"https://openalex.org/keywords/middleware","display_name":"Middleware (distributed applications)","score":0.43736347556114197},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4270191192626953},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4204959571361542},{"id":"https://openalex.org/keywords/file-server","display_name":"File server","score":0.412311315536499},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4055621027946472},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3493890166282654},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3026774525642395}],"concepts":[{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.848029613494873},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7837810516357422},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.6018643975257874},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4740825891494751},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.45390617847442627},{"id":"https://openalex.org/C169468491","wikidata":"https://www.wikidata.org/wiki/Q146923","display_name":"Middleware (distributed applications)","level":2,"score":0.43736347556114197},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4270191192626953},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4204959571361542},{"id":"https://openalex.org/C4373008","wikidata":"https://www.wikidata.org/wiki/Q513349","display_name":"File server","level":2,"score":0.412311315536499},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4055621027946472},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3493890166282654},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3026774525642395}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3538969.3538999","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3538969.3538999","pdf_url":null,"source":{"id":"https://openalex.org/S4363608926","display_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2139740492","https://openalex.org/W2215444025","https://openalex.org/W2291769357","https://openalex.org/W2895892359","https://openalex.org/W2945710818","https://openalex.org/W2998074434","https://openalex.org/W3009004523","https://openalex.org/W4229936741"],"related_works":["https://openalex.org/W2114047702","https://openalex.org/W179490073","https://openalex.org/W4245179730","https://openalex.org/W2225080631","https://openalex.org/W1499562749","https://openalex.org/W2486166101","https://openalex.org/W1603027386","https://openalex.org/W1564498062","https://openalex.org/W994791990","https://openalex.org/W2507338157"],"abstract_inverted_index":{"Improper":[0],"handling":[1],"of":[2,55,68],"file":[3,30],"uploads":[4,31],"in":[5,32,41],"web":[6,33,48,56,70],"applications":[7,34],"induces":[8],"threats":[9],"to":[10,25,65,81,84],"the":[11,47,52,66,85],"application":[12],"and":[13,35],"its":[14],"users.":[15],"In":[16],"this":[17],"paper,":[18],"we":[19],"propose":[20],"FileUploadChecker,":[21],"a":[22],"server-side":[23],"tool":[24],"automatically":[26],"detect":[27],"potentially":[28],"malicious":[29,39],"reject":[36],"or":[37,88],"sanitize":[38],"content":[40],"files.":[42],"FileUploadChecker":[43,59],"works":[44],"transparently":[45],"on":[46],"request":[49],"level,":[50],"using":[51],"middleware":[53],"concept":[54],"frameworks.":[57],"Thus,":[58],"can":[60],"be":[61,93],"deployed":[62],"without":[63],"modifications":[64],"code":[67],"existing":[69],"applications,":[71],"for":[72,78],"example,":[73],"if":[74,89],"it":[75],"is":[76],"infeasible":[77],"server":[79],"administrators":[80],"maintain":[82],"patches":[83],"underlying":[86],"software":[87,91],"proprietary":[90],"cannot":[92],"patched.":[94]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}