3 papers
cs.CR2026
IDORacle: Template-Guided SQL-Sink Mediation for Object-Level Authorization in Java Applications
Yuewantong Song, Guanhang Shi, Yin Cai +5
Insecure Direct Object Reference (IDOR), often modeled as Broken Object-Level Authorization (BOLA), remains prevalent in Java database applications because identity and authorizati…
cs.CR2024
HuntFUZZ: Enhancing Error Handling Testing through Clustering Based Fuzzing
Jin Wei, Ping Chen, Jun Dai +4
Testing a program's capability to effectively handling errors is a significant challenge, given that program errors are relatively uncommon. To solve this, Software Fault Injection…
cs.CR2024
SQLaser: Detecting DBMS Logic Bugs with Clause-Guided Fuzzing
Jin Wei, Ping Chen, Kangjie Lu +2
Database Management Systems (DBMSs) are vital components in modern data-driven systems. Their complexity often leads to logic bugs, which are implementation errors within the DBMSs…