A string constraint solver for detecting web application vulnerability

SEKE 2010 - Proceedings of the 22nd International Conference on Software Engineering and Knowledge Engineering

Volumn , Issue , 2010, Pages 535-542

  Fu, Xiang ^a   Li, Chung Chih ^b  

^a HOFSTRA UNIVERSITY   (United States)

^b ILLINOIS STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK PATTERNS; ATTACK SIGNATURE; BYTECODES; CONSTRAINT SOLVERS; CONSTRAINT SOLVING; FINITE STATE TRANSDUCERS; LINEAR STRINGS; PATH CONDITION; RECURSIVE ALGORITHMS; SECURITY ANALYSIS; SOFTWARE SYSTEMS; TARGET SYSTEMS; WEB APPLICATION; WEB APPLICATION VULNERABILITY;

ALGORITHMS; KNOWLEDGE ENGINEERING; LAKES; NETWORK SECURITY; NONLINEAR EQUATIONS; SOFTWARE ENGINEERING; TEXT PROCESSING; WORD PROCESSING; WORLD WIDE WEB;

JAVA PROGRAMMING LANGUAGE;

EID: 79952423152     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. N. Bjørner, N. Tillmann, and A. Voronkov. Path feasibility analysis for string-manipulating programs. In Proceedings of the 15th International Conference on Tools AND Algorithms for the Construction and Analysis of Systems (TACAS 2009), pages 322-336. Springer, 2009.
2. A. S. Christensen, A. Møler, and M. I. Schwartzbach. Extending java for high-level web service construction. ACM Trans. Program. Lang. Syst., 25(6):814-875, 2003. (Pubitemid 41283893)
3. A. S. Christensen, A. Møller, and M. I. Schwartzbach. Precise analysis of string expressions. In Proc. 10th International Static Analysis Symposium, SAS'03, volume 2694 of LNCS, pages 1-18. Springer-Verlag, June 2003. Available from http://www.brics.dk/JSA/.
4. CIRT INC. Nikto. available at http://www.cirt.net/nikto2.
5. X. Fu and C. Li. Modeling regular replacement for string constraint solving. In Proc. of the 2nd NASA Formal Methods Symposium, pages 67-76, 2010.
6. X. Fu, X. Lu, B. Peltsverger, S. Chen, K. Qian, and L. Tao. A Static Analysis Framework for Detecting SQL Injection Vulnerabilities. In Proceedings of 31st Annual International Computer Software and Applications Conference (COMPSAC 2007), pages 87 - 96, 2007.
7. C. Gould, Z. Su, and P. Devanbu. JDBC Checker: A Static Analysis Tool for SQL/JDBC Applications. In Proceedings of the 26th International Conference on Software Engineering, pages 697-698, 2004.
8. W.Halfond and A. Orso. AMNESIA:Analysis andMonitoring for NEutralizing SQL-Injection Attacks. In Proceedings of the 20th IEEE/ACM international Conference on Automated Software Engineering, pages 174-183, 2005.
9. P. Hooimeijer and W.Weimer. A decision procedure for subset constraints over regular languagees. In Proceedings of the 2009 ACM SIGPLAN conference on Programming language design and implementation, pages 188-198, 2009.
10. J. Hopcroft and J. Ullman. Introduction to Automata Theory, Languages, and Computation. Addison Wesley, 1979.
11. Y. Huang, S. Huang, T. Lin, and C. Tsai. Web application security assessment by fault injection and behavior monitoring. In Proceedings of the 11th International World Wide Web Conference (WWW 2003), 2003.
12. R. M. Kaplan and M. Kay. Regular models of phonological rule systems. Computational Linguistic, 20(3):331-378, 1994.
13. A. Kiezun, V. Ganesh, P. J. Guo, P. Hooimeijer, and M. D. Ernst. Hampi: A solver for string constraints. In Proc. of 2009 International Symposium on Testing and Analysis (ISSTA' 09), 2009.
14. J. C. King. Symbolic execution and program testing. Communications of the ACM, 19(7):385-394, 1976.
15. C. Kirkegaard and A. Møller. Static analysis for Java Servlets and JSP. In Proc. 13th International Static Analysis Symposium, SAS'06, volume 4134 of LNCS, August 2006.
16. labs@gdssecurity.com. Adobe flex sdk input validation bug in'index.template.html' permits cross-site scripting attacks. http://www.securitytracker.com/alerts/2009/Aug/1022748.html, 2009.
17. M. Lothaire. Algebraic Combinatorics on Words. Cambridge University Press, 2002.
18. A. Møller. The dk.brics.automaton package. available at http://www.brics.dk/automaton/.
19. A. Nguyen-Tuong, S. Guarnieri, D. Greene, J. Shirley, and D. Evans. Automatically hardening web applications using precise tainting. In Proceedings of the 20th IFIP International Information Security Conference, 2005.
20. SPI Dynamics. Webinspect: Security throughout the application lifecycle. Datasheet. http://www.spidynamics.com/assets/documents/WebInspect-DataSheets. pdf.
21. G. Wassermann and Z. Su. Static detection of cross-site scripting vulnerabilities. In Proc. of the 30th International Conference on Software Engineering, pages 171-180, 2008.
22. F. Yu, M. Alkhalaf, and T. Bultan. Generating vulnerability signatures for string manipulating programs using automatabased forward and backward symbolic analyses. In Proceedings of the 24th IEEE/ACMInternational Conference on Automated Software Engineering (ASE 2009), 2009.
23. F. Yu, T. Bultan, M. Cova, and O. H. Ibarra. Symbolic string verification: An automata-based approach. In Proc. of the 15th SPIN Workshop on Model Checking Software, pages 306-324, 2008.