132 search results - page 8 / 27 » Symbolic security analysis of ruby-on-rails web applications |
75
Voted
SEC
2007
14 years 11 months ago
2007
This paper deals with a joint use of a trust evaluation approach and access control mechanisms for improving security in Web-usage. Trust evaluation is achieved by means of both be...
PLDI
2009
ACM
15 years 4 months ago
2009
ACM
Taint analysis, a form of information-flow analysis, establishes whether values from untrusted methods and parameters may flow into security-sensitive operations. Taint analysis...
ACSAC
2008
IEEE
15 years 4 months ago
2008
IEEE
Mashups are new Web 2.0 applications that seamlessly combine contents from multiple heterogeneous data sources into one integrated browser environment. The hallmark of these appli...
60
Voted
ICSE
2009
IEEE-ACM
15 years 4 months ago
2009
IEEE-ACM
We present a technique for finding security vulnerabilities in Web applications. SQL Injection (SQLI) and crosssite scripting (XSS) attacks are widespread forms of attack in whic...
106
click to vote
NDSS
2007
IEEE
15 years 3 months ago
2007
IEEE
Cross-site scripting (XSS) is an attack against web applications in which scripting code is injected into the output of an application that is then sent to a user’s web browser....