Program Slicing Stored XSS Bugs in Web Application

Web applications are vulnerable targets of security attacks. Among the well known attack type - XSS(Cross-Site Scripting), the most threatening is Stored XSS. Since most static analysis methods refer to Reflected XSS but few concentrate on Stored XSS which is more devastating, plus the fact that pure static analysis offers high false positive rate, we present a static Stored XSS detection algorithm integrated with program slicing method to generate the slices of web application related to possible Stored XSS. The slices are composed of two parts, threat injection and threat release, which reconstruct a Stored XSS attack scenario. They are of great value for later manual checking or other dynamic analysis. For manual checking, the programmer can directly check the code related to possible vulnerabilities. For dynamic analysis or model checking, the program coverage can be large or even complete because of the small size of these slices.