11 search results - page 2 / 3 » CANDID: Dynamic candidate evaluations for automatic preventi... |
ICSE
2009
IEEE-ACM
14 years 1 months ago
2009
IEEE-ACM
We present a technique for finding security vulnerabilities in Web applications. SQL Injection (SQLI) and crosssite scripting (XSS) attacks are widespread forms of attack in whic...
ACSAC
2007
IEEE
14 years 19 days ago
2007
IEEE
With the recent rapid increase in interactive web applications that employ back-end database services, an SQL injection attack has become one of the most serious security threats....
KBSE
2005
IEEE
13 years 12 months ago
2005
IEEE
The use of web applications has become increasingly popular in our routine activities, such as reading the news, paying bills, and shopping on-line. As the availability of these s...
MIDDLEWARE
2007
Springer
14 years 12 days ago
2007
Springer
Although there is a large body of research on detection and prevention of such memory corruption attacks as buffer overflow, integer overflow, and format string attacks, the web...
POPL
2006
ACM
14 years 6 months ago
2006
ACM
Web applications typically interact with a back-end database to retrieve persistent data and then present the data to the user as dynamically generated output, such as HTML web pa...