Computer · 2012 · 99 citations · 21 references
ComputingComputer ScienceCybersecurityComputer SecurityVulnerability AnalysisWeb SecurityDatabase SecurityInjection VulnerabilitiesSql InjectionVulnerability ManagementWeb Application SecurityWeb Application VulnerabilitiesAutomated Vulnerability DetectionInjection Attack MitigationInjection Attack PreventionInjection AttacksInjection PreventionMitigation StrategiesSql Injection DetectionVulnerability Detection
The best strategy for combating SQL injection, which has emerged as the most widespread website security risk, calls for integrating defensive coding practices with both vulnerability detection and runtime attack prevention methods.
21
Securing web application code by static analysis and runtime protection
Yao‐Wen Huang, Fang Yu, Christian Hang et al. · 2004 · 566 citations
The essence of command injection attacks in web applications
Zhendong Su, Gary Wassermann · 2006 · 518 citations
Static detection of security vulnerabilities in scripting languages
Yichen Xie, Alex Aiken · 2006 · 370 citations