JoanAudit: A tool for auditing common injection vulnerabilities

• Main Authors: THOME, Julian, SHAR, Lwin Khin, BIANCULLI, Domenico, BRIAND, Lionel
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2017
• Subjects: Security auditing; static analysis; vulnerability; automated code fixing; Programming Languages and Compilers; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/4776; https://ink.library.smu.edu.sg/context/sis_research/article/5779/viewcontent/JoanAudit_esec_fse2017_demo.pdf
• Institution: Singapore Management University

JoanAudit is a static analysis tool to assist security auditors in auditing Web applications and Web services for common injection vulnerabilities during software development. It automatically identifies parts of the program code that are relevant for security and generates an HTML report to guide s...