7 search results - page 1 / 2 » Using positive tainting and syntax-aware evaluation to count... |
TSE
2008
13 years 4 months ago
2008
Many software systems have evolved to include a Web-based component that makes them available to the public via the Internet and can expose them to a variety of Web-based attacks. ...
SIGSOFT
2006
ACM
14 years 5 months ago
2006
ACM
ICSE
2009
IEEE-ACM
13 years 11 months ago
2009
IEEE-ACM
We present a technique for finding security vulnerabilities in Web applications. SQL Injection (SQLI) and crosssite scripting (XSS) attacks are widespread forms of attack in whic...
IJSSE
2010
13 years 2 months ago
2010
This paper presents an approach for retrofitting existing web applications with runtime protection against known as well as unseen SQL injection attacks (SQLIAs) without the invol...
MIDDLEWARE
2007
Springer
13 years 11 months ago
2007
Springer
Although there is a large body of research on detection and prevention of such memory corruption attacks as buffer overflow, integer overflow, and format string attacks, the web...