Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis
By P. Vogt, Florian Nentwich, Nenad Jovanovic, Engin Kirda, Christopher Krügel, Giovanni Vigna. Network and Distributed System Security Symposium, 2007
597 citations recorded by the source corpus.
View Paper: https://www.semanticscholar.org/paper/1a7160058a87a2a7dedd2f6e95f25892ec4f3d35
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
- Dawn Song
- M. Kang
- David Brumley
- Edward J. Schwartz
- Zhendong Su
- Thanassis Avgerinos
- Stephen McCamant
- Pongsin Poosankam
Citations in the corpus
- Panorama: capturing system-wide information flow for malware detection and analysis (2007, methodology): “the JaveScript engine with dynamic taint analysis to prevent cross-site scripting attacks [38].”
- Polyglot: automatic extraction of protocol message format using dynamic binary analysis (2007, unknown): “Dynamic Taint Analysis: Previous work has used dynamic taint analysis to tackle problems such as: exploit detection [13, 15, 28, 35], worm containment [14, 34], signature generation [29], and cross-site scripting detection [36].”
- Static detection of cross-site scripting vulnerabilities (2008, background): “propose a client-side, information flow-based policy to mitigate the effects of XSS [24].”
- StruQ: Defending Against Prompt Injection with Structured Queries (2024, unknown): “The concept of an injection attack is a classic computer security concept that dates back many decades [31, 32].”
- A Survey on Security Issues in Cloud Computing (2011, background): “is permanently stored into a resource managed by the web application and the actual attack is carried out when the victim requests a dynamic page that is constructed from the contents of this resource [70].”
- An empirical study of privacy-violating information flows in JavaScript web applications (2010, methodology): “[30] modified the browser’s JavaScript engine to track a taint bit that determines whether a piece of data is sensitive and report an XSS attack if this data is sent to a domain other than the page’s domain, and Dhawan and Ganapathy [8] used similar techniques to analyze confidentiality properties o”
- All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask) (2010, background): “Many analyses of Web applications utilize dynamic taint analysis to detect common attacks such as SQL injections [5, 39, 40, 51, 56, 62] and cross-site scripting attacks [54, 56, 61].”
- DTA++: Dynamic Taint Analysis with Targeted Control-Flow Propagation (2011, background): “The main ideas are also similar in analyzing malicious software components leaking sensitive user information on the system [15,22,25,33,36,37].”
- An analysis of the dynamic behavior of JavaScript programs (2010, background): “Researchers have proposed approaches that marry static analysis and runtime monitoring to prevent a subset of known attacks [6, 12, 21, 27, 26].”