Sound and precise analysis of web applications for injection vulnerabilities
By Gary Wassermann, Zhendong Su. ACM-SIGPLAN Symposium on Programming Language Design and Implementation, 2007
424 citations recorded by the source corpus.
Subfields: Artificial Intelligence, Information Systems, Signal Processing
View Paper: https://www.semanticscholar.org/paper/1dba737ed6207fbd69afd8a5bf9938a8790c4b92
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Adam Kiezun
- Philip J. Guo
- Michael D. Ernst
- Zhendong Su
- Gary Wassermann
- Karthick Jayaraman
- Pieter Hooimeijer
- Vijay Ganesh
In Information Systems
- Adam Kiezun
- Zhendong Su
- Michael D. Ernst
- Philip J. Guo
- Gary Wassermann
- Karthick Jayaraman
- Patrice Godefroid
- Vijay Ganesh
In Signal Processing
- Adam Kiezun
- Michael D. Ernst
- Philip J. Guo
- Patrice Godefroid
- Michael Y. Levin
- Zhendong Su
- Angelos Dennis Keromytis
- George Argyros
Citations in the corpus
- State of the Art: Automated Black-Box Web Application Vulnerability Testing (2010, background): “Work by Wassermann [20], Lam [21], Kieżun [22], Jovanovic [23], and Huang [24] all fall into this category.”
- Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications (2008, neutral): “The system that is probably closest to ours was developed by Wassermann and Su [43].”
- Automatic creation of SQL Injection and cross-site scripting attacks (2009, methodology): “Static approaches can, in principle, prove the absence of vulnerabilities [12, 19, 28, 29, 31].”
- Grammar-based whitebox fuzzing (2008, methodology): “Alternatively, the intersection can be computed without the explicit automata conversion [39], by an adaptation of the context-free reachability algorithm [27].”
- Back in Black: Towards Formal, Black Box Analysis of Sanitizers and Filters (2016, methodology): “Furthermore, we design an algorithm to convert the inferred models into BEK programs, which allows for further applications such as cross checking different sanitizer implementations and cross compiling sanitizers into different languages supported by the BEK backend.”
- HAMPI: a solver for string constraints (2009, methodology): “• SQL Injection Vulnerability Detection: We used Hampi in a static analysis tool [37] for identifying SQL injection vulnerabilities.”
- Static detection of cross-site scripting vulnerabilities (2008, methodology): “In order to construct a CFG from the extended CFG, the last phase of the string-taint analysis constructs the CFGs for the arguments to the string operations and models the string operations’ semantics using finite state transducers (FSTs).”