Combining static analysis and runtime monitoring to counter SQL-injection attacks.

William G. J. Halfond Alessandro Orso

Published in: ACM SIGSOFT Softw. Eng. Notes (2005)

Keyphrases

static analysis
dynamic analysis
source code
web applications
sql injection attacks
java card
regular expressions
symbolic execution
abstract interpretation
test suite
case study
user interface
pattern matching
reverse engineering