132 search results - page 8 / 27 » Symbolic security analysis of ruby-on-rails web applications |
SEC
2007
13 years 9 months ago
2007
This paper deals with a joint use of a trust evaluation approach and access control mechanisms for improving security in Web-usage. Trust evaluation is achieved by means of both be...
PLDI
2009
ACM
14 years 2 months ago
2009
ACM
Taint analysis, a form of information-flow analysis, establishes whether values from untrusted methods and parameters may flow into security-sensitive operations. Taint analysis...
ACSAC
2008
IEEE
14 years 2 months ago
2008
IEEE
Mashups are new Web 2.0 applications that seamlessly combine contents from multiple heterogeneous data sources into one integrated browser environment. The hallmark of these appli...
ICSE
2009
IEEE-ACM
14 years 2 months ago
2009
IEEE-ACM
We present a technique for finding security vulnerabilities in Web applications. SQL Injection (SQLI) and crosssite scripting (XSS) attacks are widespread forms of attack in whic...
NDSS
2007
IEEE
14 years 1 months ago
2007
IEEE
Cross-site scripting (XSS) is an attack against web applications in which scripting code is injected into the output of an application that is then sent to a user’s web browser....