946 search results - page 141 / 190 » Software engineering for security: a roadmap |
EMSOFT
2005
Springer
15 years 3 months ago
2005
Springer
Passive monitoring or testing of complex systems and networks running in the field can provide valuable insights into their behavior in actual environments of use. In certain con...
ESSOS
2010
Springer
15 years 6 months ago
2010
Springer
Protecting users in the ubiquitous online world is becoming more and more important, as shown by web application security – or the lack thereof – making the mainstream news. On...
SAC
2010
ACM
15 years 4 months ago
2010
ACM
CAPTCHAs protect online resources and services from automated access. From an attacker’s point of view, they are typically perceived as an annoyance that prevents the mass creat...
ESSOS
2010
Springer
2010
Springer
Idea: Using System Level Testing for Revealing SQL Injection-Related Error Message Information Leaks
15 years 4 months ago
Completely handling SQL injection consists of two activities: properly protecting the system from malicious input, and preventing any resultant error messages caused by SQL injecti...
ICSE
2009
IEEE-ACM
15 years 4 months ago
2009
IEEE-ACM
We present a technique for finding security vulnerabilities in Web applications. SQL Injection (SQLI) and crosssite scripting (XSS) attacks are widespread forms of attack in whic...