The use of Internet services and web applications has grown rapidly because of user demand. At the same time, the number of web application vulnerabilities has increased as a result of mistakes in the development where some developers gave the security aspect a lower priority than aspects like application usability. An SQL (structure query language) injection is a common vulnerability in web applications as it allows the hacker or illegal user to have access to the web application's database and therefore damage the data, or change the information held in the database. This thesis proposes a new framework for the detection and prevention of new and common types of SQL injection attacks. The programme of research is divided in several work packages that start from addressing the problem of the web application in general and SQL injection in particular and discuss existing approaches. The other work packages follow a constructive research approach. The framework considers existing and new SQL injection attacks. The framework consists of three checking components; the first component will check the user input for existing attacks, the second component will check for new types of attacks, and the last component will block unexpected responses from the database engine. Additionally, our framework will keep track of an ongoing attack by recording and investigating user behaviour. The framework is based on the Anatempura tool, a runtime verification tool for Interval Temporal Logic properties. Existing attacks and good/bad user behaviours are specified using Interval Temporal Logic, and the detection of new SQL injection attacks is done using the database observer component. Moreover, this thesis discusses a case study where various types of user behaviour are specified in Interval Temporal Logic and show how these can be detected. The implementation of each component has been provided and explained in detail showing the input, the output and the process of each component. Finally, the functionality of each checking component is evaluated using a case study. The user behaviour component is evaluated using sample attacks and normal user inputs. This thesis is summarized at the conclusion chapter, the future work and the limitations will be discussed. This research has made the following contributions: • New framework for detection and prevention of SQL injection attacks. • Runtime detection: use runtime verification technique based on Interval Temporal logic to detect various types of SQL injection attacks. • Database observer: to detect possible new injection attacks by monitoring database transactions. • User's behaviour: investigates related SQL injection attacks using user input, and providing early warning against SQL injection attacks.

The popularity of cannabis and reduction of cannabis prohibition in the United States has led to increased consumption in human users. However, relatively little is understood about the abuse potential of cannabis and its main psychoactive ingredient, THC. One reason for the lack of insight into the addictive effects of THC is that the animal models investigating voluntary intake of THC have been hampered by low rates of behavior and THC intake often does not surpass intake of vehicle. We hypothesized that, in addition to supporting operant behavior (smoking, vaping, or consuming edibles) THC might increase the reinforcing effects of non-drug rewards (e.g., playing video games, listening to music, eating snacks). To investigate this hypothesis, we evaluated whether THC injections could increase responding for saccharin (0.2% w/v, SACC) in male and female rats. During our investigation we noted that the pharmacology of THC was complex, with potent motor suppressant effects, and that changes in behavior depended on the pharmacokinetics of THC administration. To further explore the pharmacokinetics, we conducted 3 experiments that manipulated THC dose (Experiment 1), Injection-Test interval (Experiment 2) and Injection-Injection interval (washout duration, Experiment 3). We hypothesized that THC would increase responding for SACC, but that this effect would depend on having a longer time between sessions to reduce motor-suppressing effects of THC accumulation. Male and female rats were shaped to respond for SACC under a progressive ratio (PR) schedule of reinforcement. The PR schedule measures motivation by increasing the response requirement after each reinforcer is earned. In Experiment 1 there was a significant effect of THC dose, with moderate doses (0.3-0.75 mg/kg) increasing motivation for SACC and high doses (3 mg/kg) causing significant motor suppression. In Experiment 2 (Injection-Test interval) we found that the timing of THC injections was critical – enhancing effects were observed soon after THC injections were administered (30-60 min) but after 120 min THC no longer increased motivation for SACC. Finally, in Experiment 3 (Injection-Injection interval) we found that daily injections of THC (24 h washout) resulted in significant decreases in motivation from Session 1 to session 8. In contrast, 72 h washout intervals resulted in stable enhancement of motivation for SACC by THC. These studies indicate that the reinforcement enhancing effects of THC are robust but depend critically on the pharmacokinetics and bioavailability of THC.