Static detection of cross-site scripting vulnerabilities
By Gary Wassermann, Zhendong Su. 2008 ACM/IEEE 30th International Conference on Software Engineering, 2008
429 citations recorded by the source corpus.
Subfields: Artificial Intelligence, Information Systems, Software
View Paper: https://www.semanticscholar.org/paper/5f42dd5c4c05728a3d62e700902d048aae699ed8
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Rongxing Lu
- Vijay Ganesh
- Ali Akbar Ghorbani
- Wenke Lee
- Guofei Jiang
- Pieter Hooimeijer
- Adam Kiezun
- Philip J. Guo
In Information Systems
- Rongxing Lu
- Vijay Ganesh
- Ali Akbar Ghorbani
- Wenke Lee
- Pieter Hooimeijer
- Adam Kiezun
- Philip J. Guo
- Karthick Jayaraman
In Software
- Adam Kiezun
- Michael D. Ernst
- Philip J. Guo
- Pieter Hooimeijer
- Vijay Ganesh
- Wenke Lee
- Karthick Jayaraman
- Koushik Sen
Citations in the corpus
- CHEX: statically vetting Android apps for component hijacking vulnerabilities (2012, background): “A similar study has been carried for cross site scripting vulnerabilities [33].”
- Automatic creation of SQL Injection and cross-site scripting attacks (2009, methodology): “Static approaches can, in principle, prove the absence of vulnerabilities [12, 19, 28, 29, 31].”
- CICIoT2023: A Real-Time Dataset and Benchmark for Large-Scale Attacks in IoT Environment (2023, background): “, traffic redirection) [82]; • Browser Hijacking: a type of cyber attack in which an attacker modifies a web browser’s settings, such as the home page, default search engine, or bookmarks in order to redirect the user to a different website or display unwanted ads.”
- HAMPI: a solver for string constraints (2009, methodology): “We added 1 large application (claroline, a builder for online education courses, with 169 kLOC) from another paper by the same authors [38].”