AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks
By William G. J. Halfond, Alessandro Orso. International Conference on Automated Software Engineering, 2005
721 citations recorded by the source corpus.
Subfields: Artificial Intelligence, Information Systems
View Paper: https://www.semanticscholar.org/paper/67813f3da5ded96a1c032124b78c4fb8d8d255ca
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Adam Kiezun
- Christopher Krügel
- Giovanni Vigna
- Philip J. Guo
- Michael D. Ernst
- Engin Kirda
- Zhendong Su
- Gary Wassermann
In Information Systems
- Adam Kiezun
- Zhendong Su
- Giovanni Vigna
- Christopher Krügel
- Davide Balzarotti
- Michael D. Ernst
- Philip J. Guo
- Gary Wassermann
Citations in the corpus
- Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications (2008, background): “For example, an application might check that the number of items to purchase, sent as part of a form submission, is actually provided as an integer value and not as a nonnumeric string or a float.”
- Review of Internet of Things (IoT) in Electric Power and Energy Systems (2018, background): “The SQL injection occurs if the queries formulated by the user are not properly validated before inclusion in the SQL query [196].”
- The essence of command injection attacks in web applications (2006, methodology): “To evaluate our implementation, we selected five real-world web applications that have been used for previous evaluations i n the literature [13].”
- A Comprehensive Study of Security of Internet-of-Things (2017, methodology): “Several recent research efforts have proposed IDS based methods to address the injection issue [150]–[153].”
- A Survey of Malware Detection Techniques (2007, background): “Halfond and Orso [20] present an implementation, Analysis and Monitoring for NEutralizing SQL-Injection Attacks (AMNESIA), designed to prevent SQL injection attacks.”
- Sound and precise analysis of web applications for injection vulnerabilities (2007, background): “’s Java string analyzer to construct a policy requiring user inputs to be single tokens in constructed queries, andenforces that policy at runtime [8].”
- Automatic creation of SQL Injection and cross-site scripting attacks (2009, background): “Static and dynamic approaches can be combined [14,15].”
- Taint-Enhanced Policy Enforcement: A Practical Approach to Defeat a Wide Range of Attacks (2006, background): “AMNESIA[12] is another interesting approach for detecting SQL injection attacks.”