DocumentCode :
700389
Title :
Protecting web applications via Unicode extension
Author :
Zekan, Boze ; Shtern, Mark ; Tzerpos, Vassilios
Author_Institution :
Electr. Eng. & Comput. Sci., York Univ., Toronto, ON, Canada
fYear :
2015
fDate :
2-6 March 2015
Firstpage :
419
Lastpage :
428
Abstract :
Protecting web applications against security attacks, such as command injection, is an issue that has been attracting increasing attention as such attacks are becoming more prevalent. Taint tracking is an approach that achieves protection while offering significant maintenance benefits when implemented at the language library level. This allows the transparent re-engineering of legacy web applications without the need to modify their source code. Such an approach can be implemented at either the string or the character level.
Keywords :
program debugging; security of data; software maintenance; command injection; language library level; legacy Web application; maintenance benefit; security attack; taint tracking; unicode extension; Databases; Java; Operating systems; Prototypes; Security; Servers;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Software Analysis, Evolution and Reengineering (SANER), 2015 IEEE 22nd International Conference on
Conference_Location :
Montreal, QC
Type :
conf
DOI :
10.1109/SANER.2015.7081852
Filename :
7081852
Link To Document :
بازگشت