1548 search results - page 16 / 310 » Estimating Software Vulnerabilities |
94
Voted
COMPSAC
2007
IEEE
15 years 3 months ago
2007
IEEE
Recently SQL Injection Attack (SIA) has become a major threat to Web applications. Via carefully crafted user input, attackers can expose or manipulate the back-end database of a ...
ICST
2009
IEEE
15 years 4 months ago
2009
IEEE
GEGICK, MICHAEL CHARLES. Predicting Attack-prone Components with Source Code Static Analyzers. (Under the direction of Laurie Williams). No single vulnerability detection techniqu...
CORR
2006
Springer
14 years 9 months ago
2006
Springer
This paper describes a method for risk analysis based on the approach used in CRAMM, but instead of using discrete measures for threats and vulnerabilities and lookup tables to de...
ACSAC
2004
IEEE
15 years 1 months ago
2004
IEEE
1 A number of recent applications have been built on distributed hash tables (DHTs) based overlay networks. Almost all DHT-based schemes employ a tight deterministic data placement...
NDSS
2000
IEEE
15 years 1 months ago
2000
IEEE
We describe a new technique for finding potential buffer overrun vulnerabilities in security-critical C code. The key to success is to use static analysis: we formulate detection...