Back to Results
First PageMeta Content
Scripting languages / Software testing / Ajax / JavaScript / Cross-platform software / Cross-site scripting / JSON / Cross-site request forgery / Code injection / Computing / Computer security / Cyberwarfare


FLAX: Systematic Discovery of Client-side Validation Vulnerabilities in Rich Web Applications Prateek Saxena§ Steve Hanna§ Pongsin Poosankam‡§ Dawn Song§
Add to Reading List

Document Date: 2010-03-22 11:25:35


Open Document

File Size: 878,80 KB

Share Result on Facebook

Company

Google / Facebook / FLAX / /

/

Facility

University of California / /

IndustryTerm

web application code / cross-site / prototype tool / security applications / Web Applications / typical Web / backend server / web application / target web application / web vulnerabilities / web browser / reflected/stored cross-site / match algorithm / taint-based tool / input search space / blackbox fuzzing algorithm / online taint-tracking / target applications / symbolic execution tools / real-world applications / remote server / dynamic analysis tool / static analysis tools / desktop applications / data processing / untrusted web attacker / presentation tools / search space reduction / hidden processing / honest web server / web server / intermediate representation server / external web principal / chat applications / /

Organization

University of California / Berkeley / US Federal Reserve / Carnegie Mellon University / /

Position

JavaScript interpreter / interpreter / straight-forward / /

Product

Resulting Exploit Script injection / JavaScript / Command Injection / SQL injection / WebKit / /

ProgrammingLanguage

Java / JavaScript syntax / HTML / SQL / PHP / JavaScript / C++ / /

ProvinceOrState

California / /

Technology

substring match algorithm / PHP / JSON / HTML / AJAX / 4.1 Algorithm / blackbox fuzzing algorithm / Java / HTTP / DOM / web server / /

URL

http /

SocialTag