3 papers
cs.CR2018
Detecting Cross-Site Scripting Vulnerabilities through Automated Unit Testing
Mahmoud Mohammadi, Bill Chu, Heather Richter Lipford
The best practice to prevent Cross Site Scripting (XSS) attacks is to apply encoders to sanitize untrusted data. To balance security and functionality, encoders should be applied t…
cs.CR2018
Automatic Web Security Unit Testing: XSS Vulnerability Detection
Mahmoud Mohammadi, Bill Chu, Heather Richter Lipford +1
Integrating security testing into the workflow of software developers not only can save resources for separate security testing but also reduce the cost of fixing security vulnerab…
cs.CR2018
Using Unit Testing to Detect Sanitization Flaws
Mahmoud Mohammadi, Bill Chu, Heather Richter Lipford
Input sanitization mechanisms are widely used to mitigate vulnerabilities to injection attacks such as cross-site scripting. Static analysis tools and techniques commonly used to e…