{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T19:49:25Z","timestamp":1784404165033,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":22,"publisher":"ACM","license":[{"start":{"date-parts":[[2007,10,28]],"date-time":"2007-10-28T00:00:00Z","timestamp":1193529600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2007,10,28]]},"DOI":"10.1145\/1315245.1315250","type":"proceedings-article","created":{"date-parts":[[2007,11,15]],"date-time":"2007-11-15T14:30:20Z","timestamp":1195137020000},"page":"25-35","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":64,"title":["Multi-module vulnerability analysis of web-based applications"],"prefix":"10.1145","author":[{"given":"Davide","family":"Balzarotti","sequence":"first","affiliation":[{"name":"University of California: Santa Barbara, Santa Barbara, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marco","family":"Cova","sequence":"additional","affiliation":[{"name":"University of California: Santa Barbara, Santa Barbara, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Viktoria V.","family":"Felmetsger","sequence":"additional","affiliation":[{"name":"University of California: Santa Barbara, Santa Barbara, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Giovanni","family":"Vigna","sequence":"additional","affiliation":[{"name":"University of California: Santa Barbara, Santa Barbara, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2007,10,28]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Compilers: Principles, Techniques, and Tools","author":"Aho A. V.","year":"1986","unstructured":"A. V. Aho , R. Sethi , and J. D. Ullman . Compilers: Principles, Techniques, and Tools . Addison-Wesley Longman Publishing Co., Inc. , 1986 . A. V. Aho, R. Sethi, and J. D. Ullman. Compilers: Principles, Techniques, and Tools. Addison-Wesley Longman Publishing Co., Inc., 1986."},{"key":"e_1_3_2_1_2_1","first-page":"157","volume-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS)","author":"Almgren M.","year":"2000","unstructured":"M. Almgren , H. Debar , and M. Dacier . A Lightweight Tool for Detecting Web Server Attacks . In Proceedings of the Network and Distributed System Security Symposium (NDSS) , pages 157 -- 170 , February 2000 . M. Almgren, H. Debar, and M. Dacier. A Lightweight Tool for Detecting Web Server Attacks. In Proceedings of the Network and Distributed System Security Symposium (NDSS), pages 157--170, February 2000."},{"key":"e_1_3_2_1_3_1","volume-title":"Advanced SQL Injection in SQL Server Applications. Technical report","author":"Anley C.","year":"2002","unstructured":"C. Anley . Advanced SQL Injection in SQL Server Applications. Technical report , Next Generation Security Software, Ltd , 2002 . C. Anley. Advanced SQL Injection in SQL Server Applications. Technical report, Next Generation Security Software, Ltd, 2002."},{"key":"e_1_3_2_1_4_1","volume-title":"http:\/\/www.cve.mitre.org\/","year":"2006","unstructured":"Common Vulnerabilities and Exposures. http:\/\/www.cve.mitre.org\/ , 2006 . Common Vulnerabilities and Exposures. http:\/\/www.cve.mitre.org\/, 2006."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.21"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1101908.1101935"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988679"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECCOMW.2006.359531"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.29"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1134744.1134751"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1141277.1141357"},{"key":"e_1_3_2_1_12_1","volume-title":"Technical report","author":"Klein A.","year":"2002","unstructured":"A. Klein . Cross Site Scripting Explained. Technical report , Sanctum Inc ., 2002 . A. Klein. Cross Site Scripting Explained. Technical report, Sanctum Inc., 2002."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948144"},{"key":"e_1_3_2_1_14_1","first-page":"271","volume-title":"Proceedings of the USENIX Security Symposium (USENIX'05)","author":"Livshits B.","year":"2005","unstructured":"B. Livshits and M. Lam . Finding Security Vulnerabilities in Java Applications with Static Analysis . In Proceedings of the USENIX Security Symposium (USENIX'05) , pages 271 -- 286 , August 2005 . B. Livshits and M. Lam. Finding Security Vulnerabilities in Java Applications with Static Analysis. In Proceedings of the USENIX Security Symposium (USENIX'05), pages 271--286, August 2005."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-25660-1_20"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_7"},{"key":"e_1_3_2_1_17_1","volume-title":"November","author":"Ristic I.","year":"2006","unstructured":"I. Ristic . ModSecurity. http:\/\/www.modsecurity.org\/ , November 2006 . I. Ristic. ModSecurity. http:\/\/www.modsecurity.org\/, November 2006."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/511446.511498"},{"key":"e_1_3_2_1_19_1","volume-title":"Program Flow Analysis: Theory and Applications","author":"Sharir M.","year":"1981","unstructured":"M. Sharir and A. Pnueli . Two Approaches to Interprocedural Data Flow Analysis . In N. Jones and S. Muchnick, editors, Program Flow Analysis: Theory and Applications , chapter 7. Prentice Hall , 1981 . M. Sharir and A. Pnueli. Two Approaches to Interprocedural Data Flow Analysis. In N. Jones and S. Muchnick, editors, Program Flow Analysis: Theory and Applications, chapter 7. Prentice Hall, 1981."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1111037.1111070"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.5555\/956415.956437"},{"key":"e_1_3_2_1_22_1","first-page":"271","volume-title":"Proceedings of the USENIX Security Symposium (USENIX'06)","author":"Xie Y.","year":"2006","unstructured":"Y. Xie and A. Aiken . Static Detection of Security Vulnerabilities in Scripting Languages . In Proceedings of the USENIX Security Symposium (USENIX'06) , pages 271 -- 286 , August 2006 . Y. Xie and A. Aiken. Static Detection of Security Vulnerabilities in Scripting Languages. In Proceedings of the USENIX Security Symposium (USENIX'06), pages 271--286, August 2006."}],"event":{"name":"CCS07: 14th ACM Conference on Computer and Communications Security 2007","location":"Alexandria Virginia USA","acronym":"CCS07","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 14th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1315245.1315250","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1315245.1315250","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:56:12Z","timestamp":1750254972000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1315245.1315250"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,10,28]]},"references-count":22,"alternative-id":["10.1145\/1315245.1315250","10.1145\/1315245"],"URL":"https:\/\/doi.org\/10.1145\/1315245.1315250","relation":{},"subject":[],"published":{"date-parts":[[2007,10,28]]},"assertion":[{"value":"2007-10-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}