Dynamic taint propagation for Java

@article{Haldar2005DynamicTP,
  title={Dynamic taint propagation for Java},
  author={Vivek Haldar and Deepak Chandra and Michael Franz},
  journal={21st Annual Computer Security Applications Conference (ACSAC'05)},
  year={2005},
  pages={9 pp.-311}
}
Improperly validated user input is the underlying root cause for a wide variety of attacks on Web-based applications. Static approaches for detecting this problem help at the time of development, but require source code and report a number of false positives. Hence, they are of little use for securing fully deployed and rapidly evolving applications. We propose a dynamic solution that tags and tracks user input at runtime and prevents its improper use to maliciously affect the execution of the… CONTINUE READING
Highly Influential
This paper has highly influenced 10 other papers. REVIEW HIGHLY INFLUENTIAL CITATIONS
Highly Cited
This paper has 204 citations. REVIEW CITATIONS
140 Citations
13 References
Similar Papers

Citations

Publications citing this paper.
Showing 1-10 of 140 extracted citations

205 Citations

01020'08'11'14'17
Citations per Year
Semantic Scholar estimates that this publication has 205 citations based on the available data.

See our FAQ for additional information.

References

Publications referenced by this paper.

Similar Papers

Loading similar papers…