论文信息 - Securing the Tangled Web

Securing the Tangled Web

Script injection vulnerabilities are a bane of Web application development: deceptively simple in cause and remedy, they are nevertheless surprisingly difficult to prevent in large-scale Web development.

Christoph Kern

[1] Neil Daswani,et al. Foundations of Security - What Every Programmer Needs to Know , 2007 .

[2] Michal Zalewski. The Tangled Web: A Guide to Securing Modern Web Applications , 2011 .

[3] Michael G Burke. Top 10 list , 2007 .

[4] Dawn Xiaodong Song,et al. Context-sensitive auto-sanitization in web templating languages using type qualifiers , 2011, CCS '11.

[5] J. David Morgenthaler,et al. Searching for build debt: Experiences managing technical debt at Google , 2012, 2012 Third International Workshop on Managing Technical Debt (MTD).

[6] Zhendong Su,et al. The essence of command injection attacks in web applications , 2006, POPL '06.

[7] Sundaresan Krishnan,et al. Building Useful Program Analysis Tools Using an Extensible Java Compiler , 2012, 2012 IEEE 12th International Working Conference on Source Code Analysis and Manipulation.