A. Orso

Publications
Influence

AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks

William G. J. Halfond, A. Orso
Computer Science
ASE '05
7 November 2005

The use of web applications has become increasingly popular in our routine activities, such as reading the news, paying bills, and shopping on-line. Expand

A Classification of SQL-Injection Attacks and Countermeasures

William G. J. Halfond, Jeremy Viegas, A. Orso
Computer Science
2006

SQL injection attacks pose a serious security threat to Web applications: they allow attackers to obtain unrestricted access to the databases underlying the applications and to the potentially sensitive information these databases contain. Expand

Automated Test Input Generation for Android: Are We There Yet? (E)

S. R. Choudhary, Alessandra Gorla, A. Orso
Computer Science
30th IEEE/ACM International Conference on…
24 March 2015

We evaluate the state of the art in input generation for Android apps and identify future research directions that, if suitably investigated, could lead to more effective and efficient testing tools for Android. Expand

Dytan: a generic dynamic taint analysis framework

J. Clause, W. Li, A. Orso
Computer Science
ISSTA '07
9 July 2007

Dynamic taint analysis is gaining momentum. Techniques based on dynamic tainting have been successfully used in the context of application security, and now their use is also being explored in… Expand

Are automated debugging techniques actually helping programmers?

Chris Parnin, A. Orso
Computer Science
ISSTA '11
17 July 2011

We perform a preliminary study on developers by providing them with an automated debugging tool and two tasks to be performed with and without the tool. Expand

Regression test selection for Java software

M. J. Harrold, J. Jones, +6 authors Ashish Gujarathi
Computer Science
OOPSLA '01
1 October 2001

Safe regression-test-selection technique that, based on the use of a suitable representation, handles the features of the Java language. Expand

WASP: Protecting Web Applications Using Positive Tainting and Syntax-Aware Evaluation

William G. J. Halfond, A. Orso, P. Manolios
Computer Science
IEEE Transactions on Software Engineering
2008

This paper presents a new highly automated approach for protecting Web applications against SQL injection that has both conceptual and practical advantages over most existing techniques. Expand

Architectures for an Event Notification Service Scalable to Wide-area Networks

Antonio Carzaniga, L. Baresi, +16 authors Giovanni Vigna
Computer Science
2000

From the viewpoint of the designer of the event service, the ﬁrst solutionis deﬁnitely the easiest one to implement. Expand

Scaling regression testing to large software systems

A. Orso, N. Shi, M. J. Harrold
Computer Science
SIGSOFT '04/FSE-12
31 October 2004

This paper presents a new regression-test-selection technique for Java programs that is safe, precise, and yet scales to large systems. Expand

Leveraging field data for impact analysis and regression testing

A. Orso, T. Apiwattanapong, M. J. Harrold
Computer Science
ESEC/FSE-11
1 September 2003

We investigate the use of the Gamma approach to support and improve two fundamental tasks performed by software engineers during maintenance: impact analysis and regression testing. Expand

Recommended Authors