The Experts below are selected from a list of 17421 Experts worldwide ranked by ideXlab platform
Xietao - One of the best experts on this subject based on the ideXlab platform.
-
On automated Prepared Statement generation to remove SQL injection vulnerabilities
Information & Software Technology, 2009Co-Authors: Thomasstephen, Williamslaurie, XietaoAbstract:Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). This paper presents an algorithm of Prepared Statement replacement for removing SQLIVs by replacing ...
Tao Xie - One of the best experts on this subject based on the ideXlab platform.
-
On automated Prepared Statement generation to remove SQL injection vulnerabilities
Information and Software Technology, 2009Co-Authors: Stephen Thomas, Laurie Williams, Tao XieAbstract:Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). This paper presents an algorithm of Prepared Statement replacement for removing SQLIVs by replacing SQL Statements with Prepared Statements. Prepared Statements have a static structure, which prevents SQL injection attacks from changing the logical structure of a Prepared Statement. We created a Prepared Statement replacement algorithm and a corresponding tool for automated fix generation. We conducted four case studies of open source projects to evaluate the capability of the algorithm and its automation. The empirical results show that Prepared Statement code correctly replaced 94% of the SQLIVs in these projects.
Thomasstephen - One of the best experts on this subject based on the ideXlab platform.
-
On automated Prepared Statement generation to remove SQL injection vulnerabilities
Information & Software Technology, 2009Co-Authors: Thomasstephen, Williamslaurie, XietaoAbstract:Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). This paper presents an algorithm of Prepared Statement replacement for removing SQLIVs by replacing ...
Stephen Thomas - One of the best experts on this subject based on the ideXlab platform.
-
On automated Prepared Statement generation to remove SQL injection vulnerabilities
Information and Software Technology, 2009Co-Authors: Stephen Thomas, Laurie Williams, Tao XieAbstract:Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). This paper presents an algorithm of Prepared Statement replacement for removing SQLIVs by replacing SQL Statements with Prepared Statements. Prepared Statements have a static structure, which prevents SQL injection attacks from changing the logical structure of a Prepared Statement. We created a Prepared Statement replacement algorithm and a corresponding tool for automated fix generation. We conducted four case studies of open source projects to evaluate the capability of the algorithm and its automation. The empirical results show that Prepared Statement code correctly replaced 94% of the SQLIVs in these projects.
Williamslaurie - One of the best experts on this subject based on the ideXlab platform.
-
On automated Prepared Statement generation to remove SQL injection vulnerabilities
Information & Software Technology, 2009Co-Authors: Thomasstephen, Williamslaurie, XietaoAbstract:Since 2002, over 10% of total cyber vulnerabilities were SQL injection vulnerabilities (SQLIVs). This paper presents an algorithm of Prepared Statement replacement for removing SQLIVs by replacing ...