State of the Art: Automated Black-Box Web Application Vulnerability Testing

No abstract is available for this paper.

• Publication year

  2010

• Venue

  IEEE Symposium on Security and Privacy

• Publication date

  2010-04-30

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/SP.2010.27
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Protecting a Moving Target: Addressing Web Application Concept Drift

  2009cited by this paper
• Automatic creation of SQL Injection and cross-site scripting attacks

  2009cited by this paper
• XCS: cross channel scripting and its impact on web applications

  2009cited by this paper
• Leveraging User Interactions for In-Depth Testing of Web Applications

  2008cited by this paper
• Securing web applications with static and dynamic information flow tracking

  2008cited by this paper
• Testing and Comparing Web Vulnerability Scanning Tools for SQL Injection and XSS Attacks

  2007cited by this paper
• Sound and precise analysis of web applications for injection vulnerabilities

  2007cited by this paper
• Power-Performance Trade-Off of a Dependable Multicore Processor

  2007cited by this paper
• Pixy: a static analysis tool for detecting Web application vulnerabilities

  2006cited by this paper
• Open Web Application Security Project

  2006cited by this paper
• SecuBat: a web vulnerability scanner

  2006cited by this paper
• Securing web application code by static analysis and runtime protection

  2004cited by this paper

• Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting

  2025cites this paper
• Approximate Optimal Active Learning of Decision Trees

  2025cites this paper
• MASTERING PENETRATION TESTING: THE ETHICAL HACKER’S TOOLKIT FOR UNCOVERING VULNERABILITIES

  2025cites this paper
• Scrooge: Detection of Changes in Web Applications to Enhance Security Testing

  2025cites this paper
• Denoised generative fusion networks for noise-robust few-shot image classification

  2025cites this paper
• An Automated Scanner for Detecting Common Web Application Vulnerabilities with a Focus on Enhanced Performance and Security.

  2025cites this paper
• An Innovative Method of Malicious Code Injection Attacks on Websites

  2024influential citation
• Ensuring Web Application Security: An OWASP Driven Development Methodology

  2024cites this paper
• AlphaSecure: A state of the art framework for Web Application Vulnerabilities Detection and Patch Recommendation Using Automated Techniques

  2024cites this paper
• SEO auditing using large language models as a key university marketing strategy component

  2024cites this paper
• Mitigating Cross-Site Request Forgery Vulnerabilities: An Examination of Prevention Systems

  2024cites this paper
• Maturity model for secure software testing

  2023cites this paper
• The Impact of the Information Security Policies on Organizational Performance

  2023cites this paper
• Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities

  2023cites this paper
• A Targeted Assessment of Cross-Site Scripting Detection Tools

  2023cites this paper
• BFTDETECTOR: Automatic Detection of Business Flow Tampering for Digital Content Service

  2023cites this paper
• Load-and-Act: Increasing Page Coverage of Web Applications

  2023cites this paper
• Ethical hacking for IoT: Security issues, challenges, solutions and recommendations

  2023cites this paper
• ReScan: A Middleware Framework for Realistic and Robust Black-box Web Application Scanning

  2023cites this paper
• Detection of Vulnerability in Websites Predominantly Against CSRF Using Machine Learning

  2023cites this paper
• Input Validation Vulnerabilities in Web Applications: Systematic Review, Classification, and Analysis of the Current State-of-the-Art

  2023cites this paper
• Overview on Case Study Penetration Testing Models Evaluation

  2023cites this paper
• Cross-Site Request Forgery as an Example of Machine Learning for Web Vulnerability Detection

  2023cites this paper
• A Comparative Study of Web Application Security Parameters: Current Trends and Future Directions

  2022cites this paper
• A Quantitative Assessment of the Detection Performance of Web Vulnerability Scanners

  2022cites this paper
• A Proactive Approach to assess web application security through the integration of security tools in a Security Orchestration Platform

  2022cites this paper
• On the Vulnerabilities of Text-to-SQL Models

  2022cites this paper
• On the Security Vulnerabilities of Text-to-SQL Models

  2022cites this paper
• RuleCache: Accelerating Web Application Firewalls by On-line Learning Traffic Patterns

  2022cites this paper
• Aprimoramento do módulo crawler em scanners de vulnerabilidades (open source) de aplicações web

  2022cites this paper
• Exploiting Input Sanitization for Regex Denial of Service

  2022cites this paper
• Metamorphic Testing for Web System Security

  2022cites this paper
• On the Cybersecurity of Traffic Signal Control System With Connected Vehicles

  2022cites this paper
• TChecker: Precise Static Inter-Procedural Analysis for Detecting Taint-Style Vulnerabilities in PHP Applications

  2022cites this paper
• Early web application attack detection using network traffic analysis

  2022cites this paper
• A Systematic Literature Review on the Characteristics and Effectiveness of Web Application Vulnerability Scanners

  2022cites this paper
• A Survey on Ethical Hacking: Issues and Challenges

  2021cites this paper
• A new semantic annotation approach for software vulnerability source code

  2021influential citation
• Resolving cross-site scripting attacks through genetic algorithm and reinforcement learning

  2021cites this paper
• HYDRA: Feedback-driven black-box exploitation of injection vulnerabilities

  2021cites this paper
• Understanding the Evolution of Android App Vulnerabilities

  2021influential citation
• HTTP-Request Classification in Automatic Web Application Crawling

  2021cites this paper
• webFuzz: Grey-Box Fuzzing for Web Applications

  2021cites this paper
• Black Widow: Blackbox Data-driven Web Scanning

  2021cites this paper
• Analysis of Security Testing Techniques

  2021cites this paper
• Analysis of Network Vulnerability through Pen Testing

  2021cites this paper
• Risk assessment of SQL injection: An experimental study

  2021cites this paper
• Spinner: Automated Dynamic Command Subsystem Perturbation

  2021cites this paper
• Multi-context Attention Fusion Neural Network for Software Vulnerability Identification

  2021cites this paper
• On using distributed representations of source code for the detection of C security vulnerabilities

  2021cites this paper
• SQL Injection

  2021cites this paper
• WEB APPLICATION FIREWALL: REVIEW

  2020cites this paper
• CLASSIFICATION ALGORITHM: WEB FIREWALL

  2020cites this paper
• Helper-in-the-Middle: Supporting Web Application Scanners Targeting Industrial Control Systems

  2020influential citation
• From Theory to Practice: Deployment-grade Tools and Methodologies for Software Security

  2020cites this paper
• An Analysis of Effectiveness of Black-Box Web Application Scanners in Detection of Stored SQL Injection and Stored XSS Vulnerabilities

  2020influential citation
• Validation Analysis of Scalable Vector Graphics (SVG) File Upload using Magic Number and Document Object Model (DOM)

  2020cites this paper
• Locality-Sensitive Hashing for Efficient Web Application Security Testing

  2020cites this paper
• "You've Got Your Nice List of Bugs, Now What?" Vulnerability Discovery and Management Processes in the Wild

  2020cites this paper
• Database Traffic Interception for Graybox Detection of Stored and Context-sensitive XSS

  2020cites this paper
• An Improving Way For Website Security Assessment

  2020cites this paper
• A Survey on Web Application Security

  2020cites this paper
• Machine Learning for Web Vulnerability Detection: The Case of Cross-Site Request Forgery

  2020cites this paper
• FUSE: Finding File Upload Bugs via Penetration Testing

  2020cites this paper
• A Survey of Cybersecurity Certification for the Internet of Things

  2020cites this paper
• Detection of structure query language injection vulnerability in web driven database application

  2020cites this paper
• Web Attack Classification Model Based on Payload Embedding Pre-Training

  2020cites this paper
• On Combining Static, Dynamic and Interactive Analysis Security Testing Tools to Improve OWASP Top Ten Security Vulnerability Detection in Web Applications

  2020cites this paper
• Web Vulnerability Finder (WVF): Automated Black- Box Web Vulnerability Scanner

  2020cites this paper
• Testing Approaches for Web and Mobile Applications: An Overview

  2020cites this paper
• Test Strategies for Blockchain Technology

  2020cites this paper
• EWVHunter: Grey-Box Fuzzing with Knowledge Guide on Embedded Web Front-Ends

  2020cites this paper
• The Tip of the Iceberg

  2020cites this paper
• Analytic Hierarchy Process-based Fuzzy Measurement to Quantify Vulnerabilities of Web Applications

  2020cites this paper
• Continuous Compliance

  2020cites this paper
• UNIVERSIDAD DE MURCIA ESCUELA INTERNACIONAL DE DOCTORADO Definition of a Methodology for the Security Evaluation of Internet of Things Devices Definición de una Metodoloǵıa para la Evaluación de Seguridad de Dispositivos del Internet de las Cosas

  2020cites this paper
• Testing for Integrity Flaws in Web Sessions

  2019cites this paper
• A Hybrid Framework for Secure Web Applications

  2019cites this paper
• Global Information Assurance Certification Paper

  2019influential citation
• A Distributed Vulnerability Scanning on Machine Learning

  2019cites this paper
• An algorithm for detecting SQL injection vulnerability using black-box testing

  2019cites this paper
• A study examining relationships between micro patterns and security vulnerabilities

  2019influential citation
• CROSS-SITE SCRIPTING ATTACKS AND THE SECURITY OF WEB APPLICATIONS

  2019cites this paper
• Dimensions of Robust Security Testing in Global Software Engineering

  2019cites this paper
• The Preparation of Cross-site Scripting in Automated Web Application Vulnerability Assessment: The Quantitative Analysis

  2019cites this paper
• Detection of Security Threats to Modern Websites

  2019cites this paper
• Towards the application of recommender systems to secure coding

  2019cites this paper
• Removal of Web Application Vulnerabilities using Taint Analyzer and Code Corrector

  2019cites this paper
• VulHunter: An Automated Vulnerability Detection System Based on Deep Learning and Bytecode

  2019cites this paper
• IoT Security: A review of vulnerabilities and security protocols

  2019cites this paper
• Automated security testing for web applications on industrial automation and control systems

  2019cites this paper
• Security assessment of four open source software systems

  2019cites this paper
• Metamorphic Security Testing for Web Systems

  2019cites this paper
• Automatic Generation of Tests to Exploit XML Injection Vulnerabilities in Web Applications

  2019cites this paper
• Smart Firewall Using Machine Learning

  2019cites this paper
• Athena: A framework to automatically generate security test oracle via extracting policies from source code and intended software behaviour

  2019cites this paper
• Security Certification in Payment Card Industry: Testbeds, Measurements, and Recommendations

  2019cites this paper
• Militarizing red teaming : agile and scalable process for cyber red teaming using adaptive planning and execution framework

  2019cites this paper
• Fixing Network Security Vulnerabilities in Local Area Network

  2019cites this paper
• IoT Vulnerability Data Crawling and Analysis

  2019cites this paper