论文信息 - Securing the tangled web - 字舞流文

Securing the tangled web

Preventing script injection vulnerabilities through software design.

Christoph Kern | Christoph Kern

[1] Neil Daswani,et al. Foundations of Security - What Every Programmer Needs to Know , 2007 .

[2] Zhendong Su,et al. The essence of command injection attacks in web applications , 2006, POPL '06.

[3] Dawn Xiaodong Song,et al. Context-sensitive auto-sanitization in web templating languages using type qualifiers , 2011, CCS '11.

[4] Sundaresan Krishnan,et al. Building Useful Program Analysis Tools Using an Extensible Java Compiler , 2012, 2012 IEEE 12th International Working Conference on Source Code Analysis and Manipulation.

[5] Michal Zalewski. The Tangled Web: A Guide to Securing Modern Web Applications , 2011 .

[6] J. David Morgenthaler,et al. Searching for build debt: Experiences managing technical debt at Google , 2012, 2012 Third International Workshop on Managing Technical Debt (MTD).