87 search results - page 2 / 18 » Dynamic vs. Static Flow-Sensitive Security Analysis |
IJISEC
2007
13 years 5 months ago
2007
This paper presents a language in which information flow is securely controlled by a type system, yet the security class of data can vary dynamically. Information flow policies ...
ISSTA
2010
ACM
13 years 9 months ago
2010
ACM
Whitebox fuzzing is a novel form of security testing based on dynamic symbolic execution and constraint solving. Over the last couple of years, whitebox fuzzers have found many ne...
SP
2008
IEEE
13 years 11 months ago
2008
IEEE
Web applications are ubiquitous, perform missioncritical tasks, and handle sensitive user data. Unfortunately, web applications are often implemented by developers with limited se...
NDSS
2007
IEEE
13 years 11 months ago
2007
IEEE
Cross-site scripting (XSS) is an attack against web applications in which scripting code is injected into the output of an application that is then sent to a user’s web browser....
WWW
2005
ACM
14 years 5 months ago
2005
ACM
Server-side programming is one of the key technologies that support today's WWW environment. It makes it possible to generate Web pages dynamically according to a user's...