An integrated approach for effective injection vulnerability analysis of web applications through security slicing and hybrid constraint solving

• Main Authors: THOME, Julian, SHAR, Lwin Khin, BIANCULLI, Domenico, BRIAND, Lionel
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2018
• Subjects: Vulnerability detection; constraint solving; static analysis; search-based software engineering; Information Security; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/4892; https://ink.library.smu.edu.sg/context/sis_research/article/5895/viewcontent/an_integrated___AV.pdf
• Institution: Singapore Management University

Malicious users can attack Web applications by exploiting injection vulnerabilities in the source code. This work addresses the challenge of detecting injection vulnerabilities in the server-side code of Java Web applications in a scalable and effective way. We propose an integrated approach that se...