JTAER
2010
13 years 11 months ago
2010
An Input validation can be a critical issue. Typically, a little attention is paid to it in a web development project, because overenthusiastic validation can tend to cause failur...
ESEM
2010
ACM
13 years 11 months ago
2010
ACM
Open source software is often considered to be secure because large developer communities can be leveraged to find and fix security vulnerabilities. Eric Raymond states Linus’ L...
SAC
2002
ACM
14 years 2 days ago
2002
ACM
Avoidance and discovery of security vulnerabilities in information systems requires awareness of typical risks and a good understanding of vulnerabilities and their exploitations....
TON
2008
14 years 10 days ago
2008
Designing infrastructures that give untrusted third parties (such as end-hosts) control over routing is a promising research direction for achieving flexible and efficient communic...
CJ
2007
14 years 13 days ago
2007
In this paper we show that the group key agreement protocol proposed by Tseng suffers from a number of serious security vulnerabilities.
CCS
2010
ACM
14 years 19 days ago
2010
ACM
Many of today's web applications are built on frameworks that include sophisticated defenses against malicious adversaries. However, mistakes in the way developers deploy tho...
ASPLOS
2008
ACM
14 years 2 months ago
2008
ACM
Memory errors are a notorious source of security vulnerabilities that can lead to service interruptions, information leakage and unauthorized access. Because such errors are also ...
APSCC
2008
IEEE
14 years 2 months ago
2008
IEEE
Monitors have been used for real-time systems to ensure proper behavior; however, most approaches do not allow for the addition of relevant fields required to identify and react t...
WETICE
2000
IEEE
14 years 4 months ago
2000
IEEE
This paper presents joint work by the California Institute of Technology’s Jet Propulsion Laboratory and the University of California at Davis (UC Davis) sponsored by the Nation...
ICSM
2002
IEEE
14 years 5 months ago
2002
IEEE
Testing for software security is a lengthy, complex and costly process. Currently, security testing is done using penetration analysis and formal verification of security kernels....