Abstracting application-level web security

By Dave Scott, Richard Sharp. The Web Conference, 2002

308 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/149fadb68c5d7ea6d43eb2cbc1a27aa34b4f5660

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

1. Zhendong Su
2. Gary Wassermann
3. Christopher Krügel
4. Giovanni Vigna
5. Engin Kirda
6. Nenad Jovanovic
7. Yichen Xie
8. A. Aiken

In Information Systems

1. Zhendong Su
2. Gary Wassermann
3. Giovanni Vigna
4. Christopher Krügel
5. Engin Kirda
6. Nenad Jovanovic
7. Yichen Xie
8. A. Aiken

In Signal Processing

1. Christopher Krügel
2. Giovanni Vigna
3. Engin Kirda
4. Zhendong Su
5. Gary Wassermann
6. A. Aiken
7. Pavel Laskov
8. Konrad Rieck

Citations in the corpus

• The essence of command injection attacks in web applications (2006, background): “Recent research efforts provide ways of systematically specifying a d enforcing constraints on user inputs [5, 35, 36].”
• Noxes: a client-side solution for mitigating cross-site scripting attacks (2006, background): “Scott and Sharp [15] describe a web proxy that is located between the users and the web application, and that makes sure that a web application adheres to pre-written security policies.”
• AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks (2005, unknown): “Scott and Sharp [23] use a proxy to filter input and output data streams for a web application based on policy rules defined at the enterprise level.”
• Static Detection of Security Vulnerabilities in Scripting Languages (2006, background): “Scott and Sharp [14] proposed an application-level firewall to centralize sanitization of client input.”