Automatically hardening web applications using precise tainting

Automatically hardening web applications using precise tainting (2005)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Anh Nguyen-tuong , Salvatore Guarnieri , Doug Greene , David Evans

Venue:	In 20th IFIP International Information Security Conference
Citations:	122 - 2 self

BibTeX

@INPROCEEDINGS{Nguyen-tuong05automaticallyhardening,
    author = {Anh Nguyen-tuong and Salvatore Guarnieri and Doug Greene and David Evans},
    title = {Automatically hardening web applications using precise tainting},
    booktitle = {In 20th IFIP International Information Security Conference},
    year = {2005},
    pages = {372--382}
}

Years of Citing Articles

Bookmark

OpenURL

Abstract

Most web applications contain security vulnerabilities. The simple and natural ways of creating a web application are prone to SQL injection attacks and cross-site scripting attacks (among other less common vulnerabilities). In response, many tools have been developed for detecting or mitigating common web application vulnerabilities. Existing techniques either require effort from the site developer or are prone to false positives. This paper presents a fully automated approach to securely hardening web applications. It is based on precisely tracking taintedness of data and checking specifically for dangerous content in only in parts of commands and output that came from untrustworthy sources. Unlike previous work in which everything that is derived from tainted input is tainted, our approach precisely tracks taintedness within data values. We describe our results and prototype implementation on the predominant LAMP (Linux, Apache, MySQL, PHP) platform. 1.

Citations

458	Language-based information-flow security - Sabelfeld, Myers
380	Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software - Newsome, Song - 2005
366	Integrity considerations for secure computer systems - Biba - 1977
183	Valgrind: A Program Supervision Framework - Nethercote, Seward
146	Improving security using extensible lightweight static analysis - Evans, Larochelle, et al. - 2002
136	Securing Web Application Code by Static Analysis and Runtime Protection - Huang, Yu, et al. - 2004
103	Statistical testing of Web applications - Tonella, Ricca - 2004
68	SQLrand: Preventing SQL injection attacks - Boyd, Keromytis - 2004
63	Abstracting Application-level Web Security - Scott, Sharp
61	Exploiting Software: How to Break Code - HOGLUND, MCGRAW - 2004
55	Web Application Security Assessment by Fault Injection and Behavior Monitoring - Huang, Huang, et al. - 2003
51	VeriWeb: Automatically Testing Dynamic Web Sites - Benedikt, Freire, et al. - 2002
25	Detecting Format-String Vulnerabilities with Type Qualifiers - Shankar, Talwar, et al. - 2001
13	An Introduction to SQL Injection Attacks for Oracle Developer. White Paper.Integrigy Corporation - Kost
6	Integrity Considerations for Secure Computer - Biba - 1977
5	SQL Injection: Are your web applications vulnerable - Spett - 2004
3	et al. Securing web application code by static analysis and runtime protection - Huang, Yu, et al. - 2004
2	application security assessment by fault injection and behavior monitoring, in - Huang, Huang, et al. - 2003
2	Uses Google to Spread - Worm
2	SQL Server Security. McGraw-Hill Osborne - Litchfield - 2003
2	Programming Ruby: The Pragmatic Programmer’s Guide - Fowler - 2001
1	Security Hole Found in Gmail - Weidenfeld - 2004
1	Passport Account Hijack Attack: Hacking Hotmail and More, Hacker’s Digest - EyeonSecurity
1	et al., Veriweb: Automatically Testing Dynamic Web Sites - Benedikt - 2002
1	Php & Mysql for Dummies - Valade - 2002
1	Php Injection - JeiAr - 2004
1	Php Injection, (February 2004); http://www.linuxsecurity.com/advisories/gentoo_advisory-4015.html - Gentoo
1	Phpnuke Sql Injection - Armstrong - 2003
1	Cross-Site-Scripting Vulnerability in Microsoft.Com - Ivgi - 2004
1	Simple Google Cross Site Scripting Exploit - Ley - 2004
1	Review: Appshield and Review - Dyck - 2003
1	et al., Bypass Testing of Web Applications - Offutt - 2004
1	Kc et al., Countering Code-Injection Attacks with Instruction-Set Randomization - S - 2003
1	et al., Detecting Format-String Vulnerabilities with Type Qualifiers - Shankar
1	5.6 Documentation: Perl Security - Perl
1	et al., Programming Ruby: The - Thomas - 2004
1	PHPNuke SQL Injection. Bugtraq message - Armstrong - 2003
1	The Evolution of Cross-Site Scripting Attacks. iDEFENSE Labs - Endler - 2002
1	Passport Account Hijack Attack: Hacking Hotmail and More - Microsoft - 2002
1	Injection, Gentoo Linux Security Advisory - PHP - 2004
1	Remotely Exploitable Cross-Site Scripting in Hotmail and Yahoo - Software - 2004
1	InterDo Web Application Firewall - Kavado - 2004
1	1.0 PHP Injection - Centre - 2004
1	Web Technology Vulnerabilities. Phrack Magazine. Volume 8, Issue 54 - NT - 1998
1	PHPmyAdmin critical bug - Simbolon
1	AppShield 4.5 - Corporation
1	Security hole found in Gmail. Nana NetLife Magazine - Weidenfeld - 2004