Security slicing for auditing XML, XPath, and SQL injection vulnerabilities

• Main Authors: THOME, Julian, SHAR, Lwin Khin, BRIAND, Lionel
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2015
• Subjects: Security auditing; static analysis; vulnerability; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/4778; https://ink.library.smu.edu.sg/context/sis_research/article/5781/viewcontent/SecSlice_ISSRE15.pdf
• Institution: Singapore Management University

XML, XPath, and SQL injection vulnerabilities are among the most common and serious security issues for Web applications and Web services. Thus, it is important for security auditors to ensure that the implemented code is, to the extent possible, free from these vulnerabilities before deployment. Al...