PAAMS
2010
Springer
13 years 9 months ago
2010
Springer
This paper presents an improvement of the SCMAS architecture aimed at securing SQL-run databases. The main goal of such architecture is the detection and prevention of SQL injectio...
ISSRE
2010
IEEE
13 years 10 months ago
2010
IEEE
—We study the vulnerability reports in the Common Vulnerability and Exposures (CVE) database by using topic models on their description texts to find prevalent vulnerability typ...
CCS
2010
ACM
13 years 10 months ago
2010
ACM
We present the first sound program transformation approach for automatically transforming the code of a legacy web application to employ PREPARE statements in place of unsafe SQL...
TSE
2008
13 years 11 months ago
2008
Many software systems have evolved to include a Web-based component that makes them available to the public via the Internet and can expose them to a variety of Web-based attacks. ...
HAIS
2008
Springer
14 years 17 days ago
2008
Springer
This paper presents an agent specially designed for the prevention and detection of SQL injection at the database layer of an application. The agent incorporates a Case-based reaso...
FC
2010
Springer
14 years 3 months ago
2010
Springer
We present the first sound program source transformation approach for automatically transforming the code of a legacy web application to employ PREPARE statements in place of unsa...
EDO
2005
Springer
14 years 5 months ago
2005
Springer
An SQL injection attack targets interactive web applications that employ database services. Such applications accept user input, such as form fields, and then include this input ...
KBSE
2005
IEEE
14 years 5 months ago
2005
IEEE
The use of web applications has become increasingly popular in our routine activities, such as reading the news, paying bills, and shopping on-line. As the availability of these s...
ACMSE
2006
ACM
14 years 5 months ago
2006
ACM
SQL injection attacks potentially affect all applications, especially web applications, that utilize a database backend. While these attacks are generally against the application...
ACSAC
2007
IEEE
14 years 5 months ago
2007
IEEE
With the recent rapid increase in interactive web applications that employ back-end database services, an SQL injection attack has become one of the most serious security threats....