Usage of data validation techniques in online banking: A perspective and case study

Pixy: a static analysis tool for detecting Web application vulnerabilities

Nenad Jovanović, Christopher Kruegel, Engin Kirda · 2006 · 712 citations

Sql Injection, Engineering, Information Security +17

Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications

Davide Balzarotti, Marco Cova, Nenad Jovanović et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 2008 · 381 citations

Engineering, Information Security, Software Systems +21

Web application security assessment by fault injection and behavior monitoring

Yao‐Wen Huang, Shih-Kun Huang, Tsung-Po Lin et al. · 2003 · 319 citations

Software Maintenance, Sql Injection, Engineering +19

Bypass Testing of Web Applications

Jeff Offutt, Ye Wu, Xiaochen Du et al. · 2005 · 109 citations

Engineering, Information Security, Verification +18

Securing web applications with static and dynamic information flow tracking

Monica S. Lam, Michael C. Martin, Benjamin Livshits et al. · 2008 · 103 citations

Sql Injection, Engineering, Information Security +22