12 search results - page 2 / 3 » A String Constraint Solver for Detecting Web Application Vul... |
CCS
2003
ACM
13 years 10 months ago
2003
ACM
This paper addresses the issue of identifying buffer overrun vulnerabilities by statically analyzing C source code. We demonstrate a light-weight analysis based on modeling C stri...
ICSE
2008
IEEE-ACM
14 years 5 months ago
2008
IEEE-ACM
Web applications support many of our daily activities, but they often have security problems, and their accessibility makes them easy to exploit. In cross-site scripting (XSS), an...
RAID
2005
Springer
13 years 10 months ago
2005
Springer
Abstract. Injection vulnerabilities pose a major threat to applicationlevel security. Some of the more common types are SQL injection, crosssite scripting and shell injection vulne...
JOT
2010
13 years 3 months ago
2010
entional vulnerability detection fails to extend its generic form to an abstract level in coping with particular type of string validation. Consequently the security bypasses key ...
CCS
2010
ACM
13 years 3 months ago
2010
ACM
Web applications rely heavily on client-side computation to examine and validate form inputs that are supplied by a user (e.g., “credit card expiration date must be valid”). T...