Matches in SemOpenAlex for { <https://semopenalex.org/work/W2128325590> ?p ?o ?g. }
- W2128325590 abstract "Many of today's web applications are built on frameworks that include sophisticated defenses against malicious adversaries. However, mistakes in the way developers deploy those defenses could leave applications open to attack. To address this issue, we introduce Rubyx, a symbolic executor that we use to analyze Ruby-on-Rails web applications for security vulnerabilities. Rubyx specifications can easily be adapted to variety of properties, since they are built from general assertions, assumptions, and object invariants. We show how to write Ruby specifications to detect susceptibility to cross-site scripting and cross-site request forgery, insufficient authentication, leaks of secret information, insufficient access control, as well as application-specific security properties. We used Rubyx to check seven web applications from various sources against out specifications. We found many vulnerabilities, and each application was subject to at least one critical attack. Encouragingly, we also found that it was relatively easy to fix most vulnerabilities, and that Rubyx showed the absence of attacks after our fixes. Our results suggest that Rubyx is a promising new way to discover security vulnerabilities in Ruby-on-Rails web applications." @default.
- W2128325590 created "2016-06-24" @default.
- W2128325590 creator A5038702707 @default.
- W2128325590 creator A5065727495 @default.
- W2128325590 date "2010-10-04" @default.
- W2128325590 modified "2023-09-23" @default.
- W2128325590 title "Symbolic security analysis of ruby-on-rails web applications" @default.
- W2128325590 cites W1896223928 @default.
- W2128325590 cites W1994208120 @default.
- W2128325590 cites W2008158744 @default.
- W2128325590 cites W2016604944 @default.
- W2128325590 cites W2037671236 @default.
- W2128325590 cites W2037786632 @default.
- W2128325590 cites W2047497632 @default.
- W2128325590 cites W2063073904 @default.
- W2128325590 cites W2072978486 @default.
- W2128325590 cites W2081212007 @default.
- W2128325590 cites W2085925880 @default.
- W2128325590 cites W2094873755 @default.
- W2128325590 cites W2097959001 @default.
- W2128325590 cites W2101512909 @default.
- W2128325590 cites W2125357166 @default.
- W2128325590 cites W2126207747 @default.
- W2128325590 cites W2126275975 @default.
- W2128325590 cites W2134429122 @default.
- W2128325590 cites W2136579066 @default.
- W2128325590 cites W2144621365 @default.
- W2128325590 cites W2144696387 @default.
- W2128325590 cites W2145653610 @default.
- W2128325590 cites W2161011930 @default.
- W2128325590 cites W2162671156 @default.
- W2128325590 cites W4237492309 @default.
- W2128325590 cites W4247465700 @default.
- W2128325590 doi "https://doi.org/10.1145/1866307.1866373" @default.
- W2128325590 hasPublicationYear "2010" @default.
- W2128325590 type Work @default.
- W2128325590 sameAs 2128325590 @default.
- W2128325590 citedByCount "54" @default.
- W2128325590 countsByYear W21283255902012 @default.
- W2128325590 countsByYear W21283255902013 @default.
- W2128325590 countsByYear W21283255902014 @default.
- W2128325590 countsByYear W21283255902015 @default.
- W2128325590 countsByYear W21283255902016 @default.
- W2128325590 countsByYear W21283255902017 @default.
- W2128325590 countsByYear W21283255902018 @default.
- W2128325590 countsByYear W21283255902019 @default.
- W2128325590 countsByYear W21283255902020 @default.
- W2128325590 countsByYear W21283255902022 @default.
- W2128325590 crossrefType "proceedings-article" @default.
- W2128325590 hasAuthorship W2128325590A5038702707 @default.
- W2128325590 hasAuthorship W2128325590A5065727495 @default.
- W2128325590 hasBestOaLocation W21283255902 @default.
- W2128325590 hasConcept C118643609 @default.
- W2128325590 hasConcept C131275738 @default.
- W2128325590 hasConcept C136764020 @default.
- W2128325590 hasConcept C148417208 @default.
- W2128325590 hasConcept C17744445 @default.
- W2128325590 hasConcept C180591056 @default.
- W2128325590 hasConcept C199360897 @default.
- W2128325590 hasConcept C199539241 @default.
- W2128325590 hasConcept C29983905 @default.
- W2128325590 hasConcept C35578498 @default.
- W2128325590 hasConcept C38652104 @default.
- W2128325590 hasConcept C39569185 @default.
- W2128325590 hasConcept C41008148 @default.
- W2128325590 hasConcept C527648132 @default.
- W2128325590 hasConcept C527821871 @default.
- W2128325590 hasConcept C59241245 @default.
- W2128325590 hasConcept C61423126 @default.
- W2128325590 hasConcept C62913178 @default.
- W2128325590 hasConcept C79373723 @default.
- W2128325590 hasConceptScore W2128325590C118643609 @default.
- W2128325590 hasConceptScore W2128325590C131275738 @default.
- W2128325590 hasConceptScore W2128325590C136764020 @default.
- W2128325590 hasConceptScore W2128325590C148417208 @default.
- W2128325590 hasConceptScore W2128325590C17744445 @default.
- W2128325590 hasConceptScore W2128325590C180591056 @default.
- W2128325590 hasConceptScore W2128325590C199360897 @default.
- W2128325590 hasConceptScore W2128325590C199539241 @default.
- W2128325590 hasConceptScore W2128325590C29983905 @default.
- W2128325590 hasConceptScore W2128325590C35578498 @default.
- W2128325590 hasConceptScore W2128325590C38652104 @default.
- W2128325590 hasConceptScore W2128325590C39569185 @default.
- W2128325590 hasConceptScore W2128325590C41008148 @default.
- W2128325590 hasConceptScore W2128325590C527648132 @default.
- W2128325590 hasConceptScore W2128325590C527821871 @default.
- W2128325590 hasConceptScore W2128325590C59241245 @default.
- W2128325590 hasConceptScore W2128325590C61423126 @default.
- W2128325590 hasConceptScore W2128325590C62913178 @default.
- W2128325590 hasConceptScore W2128325590C79373723 @default.
- W2128325590 hasLocation W21283255901 @default.
- W2128325590 hasLocation W21283255902 @default.
- W2128325590 hasOpenAccess W2128325590 @default.
- W2128325590 hasPrimaryLocation W21283255901 @default.
- W2128325590 hasRelatedWork W1968406821 @default.
- W2128325590 hasRelatedWork W1996788431 @default.
- W2128325590 hasRelatedWork W2037704314 @default.
- W2128325590 hasRelatedWork W2128325590 @default.
- W2128325590 hasRelatedWork W2338961676 @default.
- W2128325590 hasRelatedWork W3033957407 @default.