140 search results - page 1 / 28 » TAJ: effective taint analysis of web applications |
PLDI
2009
ACM
14 years 1 months ago
2009
ACM
Taint analysis, a form of information-flow analysis, establishes whether values from untrusted methods and parameters may flow into security-sensitive operations. Taint analysis...
NDSS
2007
IEEE
14 years 21 days ago
2007
IEEE
Cross-site scripting (XSS) is an attack against web applications in which scripting code is injected into the output of an application that is then sent to a user’s web browser....
SP
2010
IEEE
13 years 10 months ago
2010
IEEE
—Fuzz testing has proven successful in finding security vulnerabilities in large programs. However, traditional fuzz testing tools have a well-known common drawback: they are in...
MIDDLEWARE
2007
Springer
14 years 17 days ago
2007
Springer
Although there is a large body of research on detection and prevention of such memory corruption attacks as buffer overflow, integer overflow, and format string attacks, the web...
JOT
2010
13 years 4 months ago
2010
entional vulnerability detection fails to extend its generic form to an abstract level in coping with particular type of string validation. Consequently the security bypasses key ...