Search

Your search keyword '"Lee, Scott Uk-Jin"' showing total 41 results
Start Over Author "Lee, Scott Uk-Jin"
41 results on '"Lee, Scott Uk-Jin"'

8. An MDE-Based Approach for Solving Configuration Problems: An Application to the Eclipse Platform

Author

Doux, Guillaume, Albert, Patrick, Barbier, Gabriel, Cabot, Jordi, Del Fabro, Marcos Didonet, Lee, Scott Uk-Jin, Hutchison, David, Series editor, Kanade, Takeo, Series editor, Kittler, Josef, Series editor, Kleinberg, Jon M., Series editor, Mattern, Friedemann, Series editor, Mitchell, John C., Series editor, Naor, Moni, Series editor, Nierstrasz, Oscar, Series editor, Pandu Rangan, C., Series editor, Steffen, Bernhard, Series editor, Sudan, Madhu, Series editor, Terzopoulos, Demetri, Series editor, Tygar, Doug, Series editor, Vardi, Moshe Y., Series editor, Weikum, Gerhard, Series editor, France, Robert B., editor, Kuester, Jochen M., editor, Bordbar, Behzad, editor, and Paige, Richard F., editor

Published
2011
Full Text
View/download PDF

9. Security Analysis of Web Open-Source Projects Based on Java and PHP.

Author

Yin, Zhen and Lee, Scott Uk-Jin

Subjects
PROGRAMMING languages, WEB design, WEB development, WEB-based user interfaces, INTERNET publishing
Abstract

During website development, the selection of suitable computer language and reasonable use of relevant open-source projects is imperative. Although the two languages, PHP and Java, have been extensively investigated in this context, there are not many security test reports based on their open-source projects. In this article, we conducted separate security analyses on web-related open-source projects based on PHP and Java. To this end, different open-source frameworks and services are used to design websites used to test experimental attacks on 12 popular open-source filters available on GitHub, as well as investigate the use of Lightweight Directory Access Protocol (LDAP) in the Firefox browser environment. Using malicious payloads published by Open Web Application Security Project (OWASP) and others, Cross-site Scripting (XSS), Local File Inclusion (LFI), SQL injection, and LDAP injection are performed on the test targets. The experimental results reveal that although PHP-based open-source projects are more vulnerable to attacks than Java-based ones, there is significant room for improvement. Finally, a whitelist-based filtering scheme is proposed. This scheme filters the inline attributes of label elements so that the filter has an excellent detection rate of malicious payloads while having an excellent pass rate of benign payloads. Effective references and suggestions for web developers are also included to aid the selection of open-source web projects, and feasible solutions to improve filter performance are proposed. [ABSTRACT FROM AUTHOR]

Published
2023
Full Text
View/download PDF

10. Research into Verifying Semistructured Data

Author

Dobbie, Gillian, Sun, Jing, Li, Yuan Fang, Lee, Scott UK-Jin, Hutchison, David, editor, Kanade, Takeo, editor, Kittler, Josef, editor, Kleinberg, Jon M., editor, Mattern, Friedemann, editor, Mitchell, John C., editor, Naor, Moni, editor, Nierstrasz, Oscar, editor, Pandu Rangan, C., editor, Steffen, Bernhard, editor, Sudan, Madhu, editor, Terzopoulos, Demetri, editor, Tygar, Dough, editor, Vardi, Moshe Y., editor, Weikum, Gerhard, editor, Madria, Sanjay K., editor, Claypool, Kajal T., editor, Kannan, Rajgopal, editor, Uppuluri, Prem, editor, and Gore, Manoj Madhava, editor

Published
2006
Full Text
View/download PDF

Catalog

Books, media, physical & digital resources
See catalog results