2018 14th European Dependable Computing Conference (EDCC)最新文献_第4页

Analyzing the Shared Information in Social Networks 分析社交网络中的共享信息

2018 14th European Dependable Computing Conference (EDCC) Pub Date : 2018-09-01 DOI: 10.1109/EDCC.2018.00042

Bogdan Aman, Gabriel Ciobanu

引用次数: 0

An Efficient Strategy for Model Composition in the Möbius Modeling Environment Möbius建模环境中一种有效的模型组合策略

2018 14th European Dependable Computing Conference (EDCC) Pub Date : 2018-09-01 DOI: 10.1109/EDCC.2018.00029

Giulio Masetti, S. Chiaradonna, F. Giandomenico, B. Feddersen, W. Sanders

引用次数: 4

Message from SERENE 2018 Workshop Program Chairs 来自SERENE 2018研讨会项目主席的信息

2018 14th European Dependable Computing Conference (EDCC) Pub Date : 2018-09-01 DOI: 10.1109/edcc.2018.00011

引用次数: 0

Finding SQL Injection and Cross Site Scripting Vulnerabilities with Diverse Static Analysis Tools 使用各种静态分析工具查找SQL注入和跨站点脚本漏洞

2018 14th European Dependable Computing Conference (EDCC) Pub Date : 2018-09-01 DOI: 10.1109/EDCC.2018.00020

Areej Algaith, P. Nunes, J. Fonseca, Ilir Gashi, M. Vieira

{"title":"Finding SQL Injection and Cross Site Scripting Vulnerabilities with Diverse Static Analysis Tools","authors":"Areej Algaith, P. Nunes, J. Fonseca, Ilir Gashi, M. Vieira","doi":"10.1109/EDCC.2018.00020","DOIUrl":"https://doi.org/10.1109/EDCC.2018.00020","url":null,"abstract":"The use of Static Analysis Tools (SATs) is mandatory when developing secure software and searching for vulnerabilities in legacy software. However, the performance of the various SATs concerning the detection of vulnerabilities and false alarm rate is usually unknown and depends on many factors. The simultaneous use of several tools should increase the detection capabilities, but also the number of false alarms. In this paper, we study the problem of combining several SATs to best meet the developer needs. We present results of analyzing the performance of diverse static analysis tools, based on a previously published dataset that resulted from the use of five diverse SATs to find two types of vulnerabilities, namely SQL Injections (SQLi) and Cross-Site Scripting (XSS), in 132 plugins of the WordPress Content Management System (CMS). We present the results based on well-established measures for binary classifiers, namely sensitivity and specificity for all possible diverse combinations that can be constructed using these 5 SAT tools. We then provide empirically supported guidance on which combinations of SAT tools provide the most benefits for detecting vulnerabilities with low false positive rates.","PeriodicalId":129399,"journal":{"name":"2018 14th European Dependable Computing Conference (EDCC)","volume":"29 7","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114034954","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 19