An integrated approach for effective injection vulnerability analysis of web applications through security slicing and hybrid constraint solving

• Main Authors: THOME, Julian, SHAR, Lwin Khin, BIANCULLI, Domenico, BRIAND, Lionel
• 格式: text
• 語言: English
• 出版: Institutional Knowledge at Singapore Management University 2018
• 主題: Vulnerability detection; constraint solving; static analysis; search-based software engineering; Information Security; Software Engineering
• 在線閱讀: https://ink.library.smu.edu.sg/sis_research/4892; https://ink.library.smu.edu.sg/context/sis_research/article/5895/viewcontent/an_integrated___AV.pdf
• 機構: Singapore Management University

Malicious users can attack Web applications by exploiting injection vulnerabilities in the source code. This work addresses the challenge of detecting injection vulnerabilities in the server-side code of Java Web applications in a scalable and effective way. We propose an integrated approach that se...