Finding vulnerabilities in webapps by string analysis

Add to your list(s) Download to your calendar using vCal

• Marco Cova
• Tuesday 01 March 2011, 12:00-13:00
• CS 124.

If you have a question about this talk, please contact Dan Ghica.

ntegrity.

In this talk, we will discuss techniques to automatically detect vulnerabilities in web applications. In particular, we will focus on an approach that uses static string analysis to identify ineffective sanitization routines that lead to SQL injection and Cross-site scripting vulnerabilities.

In addition, we will discuss techniques to prevent certain classes of vulnerabilities in web application. In particular, we will review interesting works in the area of language-based security applied to web applications.

This talk is part of the Lab Lunch series.

This talk is included in these lists:

• CS 124
• Lab Lunch

Note that ex-directory lists are not shown.