activity
20172022
most citedYou shall not pass: Mitigating SQL Injection Attacks on Legacy Web Applications

26 citations · 56 across the 6 of their papers we have counts for

collaborators
Showing cs.CRShow all

5 papers · 1 filter

cs.CR20222 cited

Polytope: Practical Memory Access Control for C++ Applications

Ioannis Agadakos, Manuel Egele, William Robertson

Designing and implementing secure software is inarguably more important than ever. However, despite years of research into privilege separating programs, it remains difficult to ac…

cs.CR20204 cited

Efficient Sealable Protection Keys for RISC-V

Leila Delshadtehrani, Sadullah Canakci, Manuel Egele +1

With the continuous increase in the number of software-based attacks, there has been a growing effort towards isolating sensitive data and trusted software components from untruste…

cs.CR202026 cited

You shall not pass: Mitigating SQL Injection Attacks on Legacy Web Applications

Rasoul Jahanshahi, Adam Doupé, Manuel Egele

SQL injection (SQLi) attacks pose a significant threat to the security of web applications. Existing approaches do not support object-oriented programming that renders these approa…

cs.CR202015 cited

HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing

William Blair, Andrea Mambretti, Sajjad Arshad +4

Contemporary fuzz testing techniques focus on identifying memory corruption vulnerabilities that allow adversaries to achieve either remote code execution or information disclosure…

cs.CR2018

The Art, Science, and Engineering of Fuzzing: A Survey

Valentin J. M. Manes, HyungSeok Han, Choongwoo Han +4

Among the many software vulnerability discovery techniques available today, fuzzing has remained highly popular due to its conceptual simplicity, its low barrier to deployment, and…