Noncespaces: Using randomization to defeat cross-site scripting attacks

Extensible markup language

Tim Bray, Jean Paoli, C. M. Sperberg‐McQueen · World Wide Web · 1997 · 1.7K citations

Countering code-injection attacks with instruction-set randomization

Gaurav S. Kc, Angelos D. Keromytis, Vassilis Prevelakis · 2003 · 654 citations · Full text

Computing, Computer Engineering, Computer Science +17

Finding security vulnerabilities in java applications with static analysis

V. Benjamin Livshits, Monica S. Lam · 2005 · 583 citations

Computing, Computer Science, Cybersecurity +17

The essence of command injection attacks in web applications

Zhendong Su, Gary Wassermann · 2006 · 518 citations

Computing, Computer Science, Cybersecurity +13

Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis.

Philipp Vogt, Florian Nentwich, Nenad Jovanović et al. · Network and Distributed System Security Symposium · 2007 · 486 citations

Computing, Computer Science, Cybersecurity +17