Static analysis for detecting taint-style vulnerabilities in web applications

Authors :: Jovanovic, Nenad
Kruegel, Christopher
Kirda, Engin
Jovanovic, Nenad
Kruegel, Christopher
Kirda, Engin
Source :: Journal of Computer Security, Vol 18, N°5, August 2010
Publication Year :: 2010
Publisher :: IOS Press, 2010.

Subjects :: Program analysis, static analysis, data flow analysis, alias analysis, web application security, scripting languages security, cross-site scripting, SQL injection, PHP

Tools