Multi-module vulnerability analysis of web-based applications

In recent years, web applications have become tremendously popular, and nowadays they are routinely used in security-critical environments, such as medical, financial, and military systems. As the use of web applications for critical services has increased, the number and sophistication of attacks against these applications have grown as well. Current approaches to securing web applications focus either on detecting and blocking web-based attacks using application-level firewalls, or on using vulnerability analysis techniques to identify security problems before deployment. The vulnerability analysis of web applications is made difficult by a number of factors, such as the use of scripting languages, the structuring of the application logic into separate pages and code modules, and the interaction with back-end databases. So far, approaches to web application vulnerability analysis have focused on single application modules to identify insecure uses of information provided as input...

• Type: Conference
• Year: 2007
• Where: CCS
• Authors: Davide Balzarotti, Marco Cova, Viktoria Felmetsger, Giovanni Vigna
• Keywords: CCS 2007, Security Privacy, Vulnerability Analysis, Vulnerability Analysis Technique, Web Application