{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T09:32:54Z","timestamp":1743067974216,"version":"3.40.3"},"publisher-location":"Cham","reference-count":18,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030420505"},{"type":"electronic","value":"9783030420512"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-42051-2_9","type":"book-chapter","created":{"date-parts":[[2020,2,20]],"date-time":"2020-02-20T06:15:08Z","timestamp":1582179308000},"page":"123-139","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Difficult XSS Code Patterns for Static Code Analysis Tools"],"prefix":"10.1007","author":[{"given":"Felix","family":"Schuckert","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Basel","family":"Katt","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hanno","family":"Langweg","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,2,21]]},"reference":[{"key":"9_CR1","unstructured":"Juliet Test Suite. http:\/\/samate.nist.gov\/SRD\/testsuite.php"},{"key":"9_CR2","unstructured":"PHP static code analysis tools list. https:\/\/github.com\/exakat\/php-static-analysis-tools"},{"key":"9_CR3","unstructured":"CWE - Common Weakness Enumeration (2015). http:\/\/cwe.mitre.org\/"},{"key":"9_CR4","unstructured":"Exakat (2019). https:\/\/www.exakat.io\/"},{"key":"9_CR5","unstructured":"HTMLPurifier (2019). http:\/\/htmlpurifier.org\/"},{"key":"9_CR6","unstructured":"PHP manual (2019). https:\/\/www.php.net\/manual\/de\/function.unserialize.php"},{"key":"9_CR7","unstructured":"Software assurance reference dataset Testsuite (2019). https:\/\/samate.nist.gov\/SARD\/testsuite.php"},{"key":"9_CR8","unstructured":"Difficult source code patterns (2019). https:\/\/github.com\/fschuckert\/sca_patterns"},{"key":"9_CR9","unstructured":"Sonarcloud (2019). https:\/\/sonarcloud.io"},{"key":"9_CR10","doi-asserted-by":"publisher","unstructured":"AlBreiki, H.H., Mahmoud, Q.H.: Evaluation of static analysis tools for software security. In: 2014 10th International Conference on Innovations in Information Technology (IIT), pp. 93\u201398 (2014). https:\/\/doi.org\/10.1109\/INNOVATIONS.2014.6987569","DOI":"10.1109\/INNOVATIONS.2014.6987569"},{"key":"9_CR11","doi-asserted-by":"publisher","unstructured":"Basso, T., Fernandes, P.C.S., Jino, M., Moraes, R.: Analysis of the effect of Java software faults on security vulnerabilities and their detection by commercial web vulnerability scanner tool. In: Proceedings of the International Conference on Dependable Systems and Networks, pp. 150\u2013155 (2010). https:\/\/doi.org\/10.1109\/DSNW.2010.5542602","DOI":"10.1109\/DSNW.2010.5542602"},{"key":"9_CR12","doi-asserted-by":"publisher","unstructured":"Delaitre, A., Stivalet, B., Fong, E., Okun, V.: Evaluating bug finders - test and measurement of static code analyzers. In: 2015 IEEE\/ACM 1st International Workshop on Complex Faults and Failures in Large Software Systems (COUFLESS), pp. 14\u201320 (2015). https:\/\/doi.org\/10.1109\/COUFLESS.2015.10","DOI":"10.1109\/COUFLESS.2015.10"},{"issue":"8","key":"9_CR13","doi-asserted-by":"publisher","first-page":"1462","DOI":"10.1016\/j.infsof.2013.02.005","volume":"55","author":"G D\u00edaz","year":"2013","unstructured":"D\u00edaz, G., Bermejo, J.R.: Static analysis of source code security: assessment of tools against SAMATE tests. Inf. Softw. Technol. 55(8), 1462\u20131476 (2013). https:\/\/doi.org\/10.1016\/j.infsof.2013.02.005. ISSN 09505849","journal-title":"Inf. Softw. Technol."},{"key":"9_CR14","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1016\/j.infsof.2015.08.002","volume":"68","author":"K Goseva-Popstojanova","year":"2015","unstructured":"Goseva-Popstojanova, K., Perhinschi, A.: On the capability of static code analysis to detect security vulnerabilities. Inf. Softw. Technol. 68, 18\u201333 (2015). ISSN 09505849","journal-title":"Inf. Softw. Technol."},{"key":"9_CR15","doi-asserted-by":"crossref","unstructured":"Khare, S., Saraswat, S., Kumar, S.: Static program analysis of large embedded code base: an experience. In: Proceedings of the 4th India Software Engineering Conference 2011, pp. 99\u2013102 (2011)","DOI":"10.1145\/1953355.1953368"},{"key":"9_CR16","unstructured":"Schuckert, F., Hildner, M., Katt, B., Langweg, H.: Source code patterns of cross site scripting in PHP open source projects. In: Proceedings of the 11th Norwegian Information Security Conference (2018)"},{"key":"9_CR17","volume-title":"Information Retrieval","author":"CJ Van Rijsbergen","year":"1979","unstructured":"Van Rijsbergen, C.J.: Information Retrieval, 2nd edn. Butterworth, London (1979)","edition":"2"},{"key":"9_CR18","doi-asserted-by":"crossref","unstructured":"Zhioua, Z., Short, S., Roudier, Y.: Static code analysis for software security verification: problems and approaches. In: 2014 IEEE 38th International Computer Software and Applications Conference Workshops (COMPSACW), pp. 102\u2013109 (2014)","DOI":"10.1109\/COMPSACW.2014.22"}],"container-title":["Lecture Notes in Computer Science","Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-42051-2_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,19]],"date-time":"2025-02-19T23:03:14Z","timestamp":1740006194000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-42051-2_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030420505","9783030420512"],"references-count":18,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-42051-2_9","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"21 February 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"MSTEC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Workshop on Model-Driven Simulation and Training Environments for Cybersecurity","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Luxembourg City","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Luxembourg","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 September 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"mstec2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.threat-arrest.eu\/html\/mstec\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easychair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"15","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"47% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}