49 search results - page 3 / 10 » Securing web application code by static analysis and runtime... |
SIGSOFT
2003
ACM
14 years 6 months ago
2003
ACM
Writes via unchecked pointer dereferences rank high among vulnerabilities most often exploited by malicious code. The most common attacks use an unchecked string copy to cause a b...
CGO
2006
IEEE
14 years 3 days ago
2006
IEEE
The majority of security vulnerabilities published in the literature are due to software bugs. Many researchers have developed program transformation and analysis techniques to au...
CCS
2011
ACM
12 years 6 months ago
2011
ACM
Parameter tampering attacks are dangerous to a web application whose server fails to replicate the validation of user-supplied data that is performed by the client. Malicious user...
CSFW
2011
IEEE
12 years 5 months ago
2011
IEEE
—This paper introduces YARRA, a conservative extension to C to protect applications from non-control data attacks. YARRA programmers specify their data integrity requirements by ...
CSFW
2009
IEEE
14 years 24 days ago
2009
IEEE
Timeout mechanisms are a useful feature for web applications. However, these mechanisms need to be used with care because, if used as-is, they are vulnerable to timing attacks. Th...