Matches in SemOpenAlex for { <https://semopenalex.org/work/W4308562562> ?p ?o ?g. }
Showing items 1 to 92 of
92
with 100 items per page.
- W4308562562 abstract "Improper input validation is still one of the most severe problem classes in web application security, although there are concepts with a good problem-solution fit, such as static taint analysis. In practice, however, existing static taint analyzers suffer from both high false positive and false negative rates, making them impractical for effective detection of new vulnerabilities. In this work, we present an approach that aims to systematically specialize existing taint analyzers toward software marketplaces to improve both recall and precision of their analyses. To validate whether our approach is suitable for finding new vulnerabilities in web applications, we applied a specialized taint-analyzer to a random sample of 1,000 plugins from the WordPress plugin store. As a result, we were able to disclose ten CVE entries, including two vulnerabilities with a high or even critical CVSS score. Our preliminary results indicate the principle feasibility of our approach and show that it may be suitable for mass vulnerability detection in software marketplaces, providing a promising foundation for future works in this domain." @default.
- W4308562562 created "2022-11-12" @default.
- W4308562562 creator A5027862454 @default.
- W4308562562 creator A5051730588 @default.
- W4308562562 creator A5082224136 @default.
- W4308562562 date "2022-11-08" @default.
- W4308562562 modified "2023-10-18" @default.
- W4308562562 title "Adapting Static Taint Analyzers to Software Marketplaces" @default.
- W4308562562 cites W1967446222 @default.
- W4308562562 cites W1968195039 @default.
- W4308562562 cites W1973581268 @default.
- W4308562562 cites W2001593152 @default.
- W4308562562 cites W2111487235 @default.
- W4308562562 cites W2113709047 @default.
- W4308562562 cites W2113714600 @default.
- W4308562562 cites W2125357166 @default.
- W4308562562 cites W2129362719 @default.
- W4308562562 cites W2135654257 @default.
- W4308562562 cites W2147478478 @default.
- W4308562562 cites W2539382385 @default.
- W4308562562 cites W2804217504 @default.
- W4308562562 cites W2887773459 @default.
- W4308562562 cites W2920909080 @default.
- W4308562562 cites W2953940813 @default.
- W4308562562 cites W2955471678 @default.
- W4308562562 cites W3005026984 @default.
- W4308562562 cites W3025451187 @default.
- W4308562562 cites W3090362160 @default.
- W4308562562 cites W3161807664 @default.
- W4308562562 cites W3162923072 @default.
- W4308562562 cites W3183955556 @default.
- W4308562562 cites W3194926883 @default.
- W4308562562 cites W4242704962 @default.
- W4308562562 doi "https://doi.org/10.1145/3560835.3564553" @default.
- W4308562562 hasPublicationYear "2022" @default.
- W4308562562 type Work @default.
- W4308562562 citedByCount "0" @default.
- W4308562562 crossrefType "proceedings-article" @default.
- W4308562562 hasAuthorship W4308562562A5027862454 @default.
- W4308562562 hasAuthorship W4308562562A5051730588 @default.
- W4308562562 hasAuthorship W4308562562A5082224136 @default.
- W4308562562 hasBestOaLocation W43085625621 @default.
- W4308562562 hasConcept C111919701 @default.
- W4308562562 hasConcept C115903868 @default.
- W4308562562 hasConcept C185592680 @default.
- W4308562562 hasConcept C198531522 @default.
- W4308562562 hasConcept C199360897 @default.
- W4308562562 hasConcept C22680326 @default.
- W4308562562 hasConcept C2777904410 @default.
- W4308562562 hasConcept C29983905 @default.
- W4308562562 hasConcept C38652104 @default.
- W4308562562 hasConcept C41008148 @default.
- W4308562562 hasConcept C43617362 @default.
- W4308562562 hasConcept C4924752 @default.
- W4308562562 hasConcept C527648132 @default.
- W4308562562 hasConcept C62913178 @default.
- W4308562562 hasConcept C63116202 @default.
- W4308562562 hasConcept C95713431 @default.
- W4308562562 hasConcept C97686452 @default.
- W4308562562 hasConceptScore W4308562562C111919701 @default.
- W4308562562 hasConceptScore W4308562562C115903868 @default.
- W4308562562 hasConceptScore W4308562562C185592680 @default.
- W4308562562 hasConceptScore W4308562562C198531522 @default.
- W4308562562 hasConceptScore W4308562562C199360897 @default.
- W4308562562 hasConceptScore W4308562562C22680326 @default.
- W4308562562 hasConceptScore W4308562562C2777904410 @default.
- W4308562562 hasConceptScore W4308562562C29983905 @default.
- W4308562562 hasConceptScore W4308562562C38652104 @default.
- W4308562562 hasConceptScore W4308562562C41008148 @default.
- W4308562562 hasConceptScore W4308562562C43617362 @default.
- W4308562562 hasConceptScore W4308562562C4924752 @default.
- W4308562562 hasConceptScore W4308562562C527648132 @default.
- W4308562562 hasConceptScore W4308562562C62913178 @default.
- W4308562562 hasConceptScore W4308562562C63116202 @default.
- W4308562562 hasConceptScore W4308562562C95713431 @default.
- W4308562562 hasConceptScore W4308562562C97686452 @default.
- W4308562562 hasLocation W43085625621 @default.
- W4308562562 hasOpenAccess W4308562562 @default.
- W4308562562 hasPrimaryLocation W43085625621 @default.
- W4308562562 hasRelatedWork W1486481742 @default.
- W4308562562 hasRelatedWork W2024544369 @default.
- W4308562562 hasRelatedWork W2143037118 @default.
- W4308562562 hasRelatedWork W2360920691 @default.
- W4308562562 hasRelatedWork W2383958993 @default.
- W4308562562 hasRelatedWork W2499489413 @default.
- W4308562562 hasRelatedWork W2982341996 @default.
- W4308562562 hasRelatedWork W4200028713 @default.
- W4308562562 hasRelatedWork W4361792401 @default.
- W4308562562 hasRelatedWork W2560421591 @default.
- W4308562562 isParatext "false" @default.
- W4308562562 isRetracted "false" @default.
- W4308562562 workType "article" @default.