Matches in SemOpenAlex for { <https://semopenalex.org/work/W2012802935> ?p ?o ?g. }
- W2012802935 abstract "Web application vulnerabilities are widely considered a serious concern. However, there are as of yet scarce data comparing the effectiveness of different security countermeasures or detailing the magnitude of the security issues associated with web applications. This paper studies the effort that is required by a professional penetration tester to find an input validation vulnerability in an enterprise web application that has been developed in the presence or absence of four security measures: (i) developer web application security training, (ii) type-safe API's, (iii) black box testing tools, or (iv) static code analyzers. The judgments of 21 experts are collected and combined using Cooke's classical method. The results show that 53 hours is enough to find a vulnerability with a certainty of 95% even though all measures have been employed during development. If no measure is employed 7 hours is enough to find a vulnerability with 95% certainty." @default.
- W2012802935 created "2016-06-24" @default.
- W2012802935 creator A5021818135 @default.
- W2012802935 creator A5072979990 @default.
- W2012802935 creator A5091355367 @default.
- W2012802935 date "2013-01-01" @default.
- W2012802935 modified "2023-09-30" @default.
- W2012802935 title "Effort Estimates on Web Application Vulnerability Discovery" @default.
- W2012802935 cites W1495864704 @default.
- W2012802935 cites W1566241536 @default.
- W2012802935 cites W1982950099 @default.
- W2012802935 cites W1996080364 @default.
- W2012802935 cites W1999436718 @default.
- W2012802935 cites W2008681738 @default.
- W2012802935 cites W2009083767 @default.
- W2012802935 cites W2053597171 @default.
- W2012802935 cites W2054250639 @default.
- W2012802935 cites W2065461065 @default.
- W2012802935 cites W2079025608 @default.
- W2012802935 cites W2111284364 @default.
- W2012802935 cites W2119852587 @default.
- W2012802935 cites W2121558310 @default.
- W2012802935 cites W2132811257 @default.
- W2012802935 cites W2145482311 @default.
- W2012802935 cites W2147042673 @default.
- W2012802935 cites W2152725427 @default.
- W2012802935 cites W2159306398 @default.
- W2012802935 cites W2163049969 @default.
- W2012802935 cites W2164128251 @default.
- W2012802935 cites W2171644977 @default.
- W2012802935 cites W2405292529 @default.
- W2012802935 cites W2489782956 @default.
- W2012802935 cites W83876155 @default.
- W2012802935 cites W2332631626 @default.
- W2012802935 doi "https://doi.org/10.1109/hicss.2013.190" @default.
- W2012802935 hasPublicationYear "2013" @default.
- W2012802935 type Work @default.
- W2012802935 sameAs 2012802935 @default.
- W2012802935 citedByCount "5" @default.
- W2012802935 countsByYear W20128029352013 @default.
- W2012802935 countsByYear W20128029352015 @default.
- W2012802935 crossrefType "proceedings-article" @default.
- W2012802935 hasAuthorship W2012802935A5021818135 @default.
- W2012802935 hasAuthorship W2012802935A5072979990 @default.
- W2012802935 hasAuthorship W2012802935A5091355367 @default.
- W2012802935 hasBestOaLocation W20128029352 @default.
- W2012802935 hasConcept C111472728 @default.
- W2012802935 hasConcept C112930515 @default.
- W2012802935 hasConcept C118643609 @default.
- W2012802935 hasConcept C136764020 @default.
- W2012802935 hasConcept C137176749 @default.
- W2012802935 hasConcept C138885662 @default.
- W2012802935 hasConcept C144133560 @default.
- W2012802935 hasConcept C15744967 @default.
- W2012802935 hasConcept C167063184 @default.
- W2012802935 hasConcept C172776598 @default.
- W2012802935 hasConcept C35578498 @default.
- W2012802935 hasConcept C38652104 @default.
- W2012802935 hasConcept C41008148 @default.
- W2012802935 hasConcept C542102704 @default.
- W2012802935 hasConcept C59241245 @default.
- W2012802935 hasConcept C7493553 @default.
- W2012802935 hasConcept C77088390 @default.
- W2012802935 hasConcept C79373723 @default.
- W2012802935 hasConcept C95713431 @default.
- W2012802935 hasConceptScore W2012802935C111472728 @default.
- W2012802935 hasConceptScore W2012802935C112930515 @default.
- W2012802935 hasConceptScore W2012802935C118643609 @default.
- W2012802935 hasConceptScore W2012802935C136764020 @default.
- W2012802935 hasConceptScore W2012802935C137176749 @default.
- W2012802935 hasConceptScore W2012802935C138885662 @default.
- W2012802935 hasConceptScore W2012802935C144133560 @default.
- W2012802935 hasConceptScore W2012802935C15744967 @default.
- W2012802935 hasConceptScore W2012802935C167063184 @default.
- W2012802935 hasConceptScore W2012802935C172776598 @default.
- W2012802935 hasConceptScore W2012802935C35578498 @default.
- W2012802935 hasConceptScore W2012802935C38652104 @default.
- W2012802935 hasConceptScore W2012802935C41008148 @default.
- W2012802935 hasConceptScore W2012802935C542102704 @default.
- W2012802935 hasConceptScore W2012802935C59241245 @default.
- W2012802935 hasConceptScore W2012802935C7493553 @default.
- W2012802935 hasConceptScore W2012802935C77088390 @default.
- W2012802935 hasConceptScore W2012802935C79373723 @default.
- W2012802935 hasConceptScore W2012802935C95713431 @default.
- W2012802935 hasLocation W20128029351 @default.
- W2012802935 hasLocation W20128029352 @default.
- W2012802935 hasOpenAccess W2012802935 @default.
- W2012802935 hasPrimaryLocation W20128029351 @default.
- W2012802935 hasRelatedWork W2012802935 @default.
- W2012802935 hasRelatedWork W2024164043 @default.
- W2012802935 hasRelatedWork W2326608314 @default.
- W2012802935 hasRelatedWork W3003488758 @default.
- W2012802935 hasRelatedWork W3090600625 @default.
- W2012802935 hasRelatedWork W3134342078 @default.
- W2012802935 hasRelatedWork W3167259036 @default.
- W2012802935 hasRelatedWork W3189007635 @default.
- W2012802935 hasRelatedWork W4280645126 @default.
- W2012802935 hasRelatedWork W922414892 @default.
- W2012802935 isParatext "false" @default.
- W2012802935 isRetracted "false" @default.