An integrated approach for effective injection vulnerability analysis of web applications through security slicing and hybrid constraint solving

• Main Authors: Thome, Julian, Shar, Lwin Khin, Bianculli, Domenico, Briand, Lionel
• Other Authors: School of Computer Science and Engineering
• Format: Article
• Language: English
• Published: 2021
• Subjects: Engineering::Computer science and engineering; Security; Benchmark Testing
• Online Access: https://hdl.handle.net/10356/154605
• Institution: Nanyang Technological University

Malicious users can attack Web applications by exploiting injection vulnerabilities in the source code. This work addresses the challenge of detecting injection vulnerabilities in the server-side code of Java Web applications in a scalable and effective way. We propose an integrated approach that se...