Mining input sanitization patterns for predicting SQL injection and cross site scripting vulnerabilities

• المؤلفون الرئيسيون: Shar, Lwin Khin, Tan, Hee Beng Kuan
• مؤلفون آخرون: School of Electrical and Electronic Engineering
• التنسيق: Conference or Workshop Item
• اللغة: English
• منشور في: 2013
• الموضوعات: DRNTU::Engineering::Electrical and electronic engineering
• الوصول للمادة أونلاين: https://hdl.handle.net/10356/99523; http://hdl.handle.net/10220/12857

Static code attributes such as lines of code and cyclomatic complexity have been shown to be useful indicators of defects in software modules. As web applications adopt input sanitization routines to prevent web security risks, static code attributes that represent the characteristics of these routi...