Result evaluation of field authentication based SQL injection and XSS attack exposure
暂无分享,去创建一个
[1] Laurie Ann Williams,et al. Towards a taxonomy of techniques to detect cross-site scripting and SQL injection vulnerabilities , 2008 .
[2] Christopher Krügel,et al. Precise alias analysis for static detection of web application vulnerabilities , 2006, PLAS '06.
[3] Monica S. Lam,et al. Automatic Generation of XSS and SQL Injection Attacks with Goal-Directed Model Checking , 2008, USENIX Security Symposium.
[4] Lionel C. Briand,et al. Automated testing for SQL injection vulnerabilities: an input mutation approach , 2014, ISSTA 2014.
[5] Me,et al. Eliminate Sql Injection Using LINQ , 2014 .
[6] Prateek Saxena,et al. An Empirical Analysis of XSS Sanitization in Web Application Frameworks , 2011 .
[7] Gaurav Prasad,et al. Analysis of XSS attack Mitigation techniques based on Platforms and Browsers , 2012 .
[8] Lionel C. Briand,et al. Mining SQL injection and cross site scripting vulnerabilities using hybrid program analysis , 2013, 2013 35th International Conference on Software Engineering (ICSE).
[9] Etienne Janot,et al. Preventing SQL Injections in Online Applications : Study , Recommendations and Java Solution Prototype Based on the SQL DOM , 2008 .
[10] Abhishek Kumar Baranwal. Approaches to detect SQL injection and XSS in web applications , 2012 .
[11] Phyllis G. Frankl,et al. Preventing SQL Injection through Automatic Query Sanitization with ASSIST , 2010, TAV-WEB.
[12] Praveen Kumar,et al. Sql-Injection Tool for finding the Vulnerability and Automatic Creation of Attacks on JSP , 2012 .
[13] Erwin Adi,et al. Detect and Sanitise Encoded Cross-Site Scripting and SQL Injection Attack Strings Using a Hash Map , 2010 .
[14] Vadim Okun,et al. Building a Test Suite for Web Application Scanners , 2008, Proceedings of the 41st Annual Hawaii International Conference on System Sciences (HICSS 2008).
[15] Mattia Monga,et al. A hybrid analysis framework for detecting web application vulnerabilities , 2009, 2009 ICSE Workshop on Software Engineering for Secure Systems.