Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: A Simple and Intuitive Algorithm for Preventing Directory Traversal
  Attacks   With web applications becoming a preferred method of presenting graphical
user interfaces to users, software vulnerabilities affecting web applications
are becoming more and more prevalent and devastating. Some of these
vulnerabilities, such as directory traversal attacks, have varying defense
mechanisms and mitigations that can be difficult to understand, analyze, and
test. Gaps in the testing of these directory traversal defense mechanisms can
lead to vulnerabilities that allow attackers to read sensitive data from files
or even execute malicious code. This paper presents an analysis of some
currently used directory traversal attack defenses and presents a new,
stack-based algorithm to help prevent these attacks by safely canonicalizing
user-supplied path strings. The goal of this algorithm is to be small, easy to
test, cross-platform compatible, and above all, intuitive. We provide a proof
of correctness and verification strategies using symbolic execution for the
algorithm. We hope that the algorithm is simple and effective enough to help
move developers towards a unified defense against directory traversal attacks.

29
The categories of this paper are: funct-an
34
The categories of this paper are: chem-ph
26
The categories of this paper are: bayes-an
37
The categories of this paper are: supr-con
3
The categories of this paper are: physics
15
The categories of this paper are: nucl-ex
5
The categories of this paper are: gr-qc
24
The categories of this paper are: dg-ga
36
The categories of this paper are: cmp-lg
17
The categories of this paper are: q-fin
11
The categories of this paper are: hep-lat
21
The categories of this paper are: adap-org
4
The categories of this paper are: cond-mat
27
The categories of this paper are: comp-gas
10
The categories of this paper are: q-bio
8
The categories of this paper are: hep-ex