{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T17:33:55Z","timestamp":1783791235306,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,6,10]],"date-time":"2006-06-10T00:00:00Z","timestamp":1149897600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,6,10]]},"DOI":"10.1145\/1134744.1134751","type":"proceedings-article","created":{"date-parts":[[2006,7,24]],"date-time":"2006-07-24T16:53:01Z","timestamp":1153759981000},"page":"27-36","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":97,"title":["Precise alias analysis for static detection of web application vulnerabilities"],"prefix":"10.1145","author":[{"given":"Nenad","family":"Jovanovic","sequence":"first","affiliation":[{"name":"Technical University of Vienna"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christopher","family":"Kruegel","sequence":"additional","affiliation":[{"name":"Technical University of Vienna"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Engin","family":"Kirda","sequence":"additional","affiliation":[{"name":"Technical University of Vienna"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2006,6,10]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Compilers: principles, techniques, and tools","author":"Aho Alfred V.","year":"1986","unstructured":"Alfred V. Aho , Ravi Sethi , and Jeffrey D. Ullman . Compilers: principles, techniques, and tools . Addison-Wesley Longman Publishing Co., Inc. , Boston, MA, USA , 1986 . Alfred V. Aho, Ravi Sethi, and Jeffrey D. Ullman. Compilers: principles, techniques, and tools. Addison-Wesley Longman Publishing Co., Inc., Boston, MA, USA, 1986."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/829514.830533"},{"key":"e_1_3_2_1_4_1","unstructured":"BugTraq. BugTraq Mailing List Archive. http:\/\/www.securityfocus.com\/archive\/1 2005.  BugTraq. BugTraq Mailing List Archive. http:\/\/www.securityfocus.com\/archive\/1 2005."},{"key":"e_1_3_2_1_5_1","unstructured":"CERT. CERT Advisory CA-2000-02: Malicious HTML Tags Embedded in Client Web Requests. http:\/\/www.cert.org\/advisories\/CA-2000-02.html 2005.  CERT. CERT Advisory CA-2000-02: Malicious HTML Tags Embedded in Client Web Requests. http:\/\/www.cert.org\/advisories\/CA-2000-02.html 2005."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/93542.93585"},{"key":"e_1_3_2_1_7_1","unstructured":"CUP. CUP: LALR Parser Generator in Java. http:\/\/www2.cs.tum.edu\/projects\/cup\/ 2005.  CUP. CUP: LALR Parser Generator in Java. http:\/\/www2.cs.tum.edu\/projects\/cup\/ 2005."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251229.1251230"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/502034.502041"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/301618.301665"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/379605.379665"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/775152.775174"},{"key":"e_1_3_2_1_13_1","volume-title":"DSN","author":"Huang Yao-Wen","year":"2004","unstructured":"Yao-Wen Huang , Fang Yu , Christian Hang , Chung-Hung Tsai , D. T. Lee , and Sy-Yen Kuo . Verifying web applications using bounded model checking . In DSN , 2004 . Yao-Wen Huang, Fang Yu, Christian Hang, Chung-Hung Tsai, D. T. Lee, and Sy-Yen Kuo. Verifying web applications using bounded model checking. In DSN, 2004."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988679"},{"key":"e_1_3_2_1_15_1","unstructured":"JFlex. JFlex: The Fast Scanner Generator for Java. http:\/\/jflex.de 2005.  JFlex. JFlex: The Fast Scanner Generator for Java. http:\/\/jflex.de 2005."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.29"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"Nenad Jovanovic Christopher Kruegel and Engin Kirda. Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Technical Report). http:\/\/www.seclab.tuwien.ac.at\/projects\/pixy\/ 2006.  Nenad Jovanovic Christopher Kruegel and Engin Kirda. Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Technical Report). http:\/\/www.seclab.tuwien.ac.at\/projects\/pixy\/ 2006.","DOI":"10.1109\/SP.2006.29"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1141277.1141357"},{"key":"e_1_3_2_1_19_1","volume-title":"Secure Systems Lab","author":"Lab Secure Systems","year":"2006","unstructured":"Secure Systems Lab . Secure Systems Lab , Technical University of Vienna . http:\/\/www.seclab.tuwien.ac.at, 2006 . Secure Systems Lab. Secure Systems Lab, Technical University of Vienna. http:\/\/www.seclab.tuwien.ac.at, 2006."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/143095.143137"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1094811.1094848"},{"key":"e_1_3_2_1_22_1","volume-title":"Proceedings of the 14th Usenix Security Symposium","author":"Benjamin Livshits V.","year":"2005","unstructured":"V. Benjamin Livshits and Monica S. Lam . Finding security errors in Java programs with static analysis . In Proceedings of the 14th Usenix Security Symposium , August 2005 . V. Benjamin Livshits and Monica S. Lam. Finding security errors in Java programs with static analysis. In Proceedings of the 14th Usenix Security Symposium, August 2005."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1060745.1060809"},{"key":"e_1_3_2_1_24_1","volume-title":"Morgan Kaufmann","author":"Muchnick Steven S.","year":"1997","unstructured":"Steven S. Muchnick . Advanced Compiler Design and Implementation . Morgan Kaufmann , 1997 . Steven S. Muchnick. Advanced Compiler Design and Implementation. Morgan Kaufmann, 1997."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-25660-1_20"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-662-03811-6","volume-title":"Principles of Program Analysis","author":"Nielson Flemming","year":"1999","unstructured":"Flemming Nielson , Hanne R. Nielson , and Chris Hankin . Principles of Program Analysis . Springer-Verlag New York, Inc. , Secaucus, NJ, USA , 1999 . Flemming Nielson, Hanne R. Nielson, and Chris Hankin. Principles of Program Analysis. Springer-Verlag New York, Inc., Secaucus, NJ, USA, 1999."},{"key":"e_1_3_2_1_27_1","unstructured":"PHP. PHP: Hypertext Preprocessor. http:\/\/www.php.net 2005.  PHP. PHP: Hypertext Preprocessor. http:\/\/www.php.net 2005."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_7"},{"key":"e_1_3_2_1_29_1","volume-title":"Proceedings of the 10th USENIX Security Symposium","author":"Shankar Umesh","year":"2001","unstructured":"Umesh Shankar , Kunal Talwar , Jeffrey S. Foster , and David Wagner . Detecting format string vulnerabilities with type qualifiers . In Proceedings of the 10th USENIX Security Symposium , 2001 . Umesh Shankar, Kunal Talwar, Jeffrey S. Foster, and David Wagner. Detecting format string vulnerabilities with type qualifiers. In Proceedings of the 10th USENIX Security Symposium, 2001."},{"key":"e_1_3_2_1_30_1","volume-title":"Two approaches to interprocedural data flow analysis","author":"Sharir M.","year":"1981","unstructured":"M. Sharir and A. Pnueli . Two approaches to interprocedural data flow analysis , chapter 7. Prentice-Hall , 1981 . M. Sharir and A. Pnueli. Two approaches to interprocedural data flow analysis, chapter 7. Prentice-Hall, 1981."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/237721.237727"},{"key":"e_1_3_2_1_32_1","volume-title":"Programming Perl","author":"Wall Larry","year":"1996","unstructured":"Larry Wall , Tom Christiansen , Randal L. Schwartz , and Stephan Potter . Programming Perl ( 2 nd ed.). O'Reilly & Associates, Inc. , Sebastopol, CA, USA , 1996 . Larry Wall, Tom Christiansen, Randal L. Schwartz, and Stephan Potter. Programming Perl (2nd ed.). O'Reilly & Associates, Inc., Sebastopol, CA, USA, 1996.","edition":"2"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/996841.996859"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/207110.207111"},{"key":"e_1_3_2_1_35_1","unstructured":"Yichen Xie and Alex Aiken. Static Detection of Security Vulnerabilities in Scripting Languages. http:\/\/glide.stanford.edu\/yichen\/research\/sec.ps 2006.  Yichen Xie and Alex Aiken. Static Detection of Security Vulnerabilities in Scripting Languages. http:\/\/glide.stanford.edu\/yichen\/research\/sec.ps 2006."}],"event":{"name":"PLAS06: Programming Languages and Analysis for Security Workshop","location":"Ottawa Ontario Canada","acronym":"PLAS06","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 2006 workshop on Programming languages and analysis for security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1134744.1134751","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1134744.1134751","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T15:14:28Z","timestamp":1750259668000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1134744.1134751"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,6,10]]},"references-count":34,"alternative-id":["10.1145\/1134744.1134751","10.1145\/1134744"],"URL":"https:\/\/doi.org\/10.1145\/1134744.1134751","relation":{},"subject":[],"published":{"date-parts":[[2006,6,10]]},"assertion":[{"value":"2006-06-10","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}