{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T12:13:21Z","timestamp":1763468001545,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,10,4]],"date-time":"2010-10-04T00:00:00Z","timestamp":1286150400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,10,4]]},"DOI":"10.1145\/1866307.1866373","type":"proceedings-article","created":{"date-parts":[[2010,10,5]],"date-time":"2010-10-05T14:38:23Z","timestamp":1286289503000},"page":"585-594","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":40,"title":["Symbolic security analysis of ruby-on-rails web applications"],"prefix":"10.1145","author":[{"given":"Avik","family":"Chaudhuri","sequence":"first","affiliation":[{"name":"University of Maryland, College Park, College Park, MD, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jeffrey S.","family":"Foster","sequence":"additional","affiliation":[{"name":"University of Maryland, College Park, College Park, MD, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,10,4]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2009.80"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.31"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1481861.1481866"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455782"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2008.27"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1863543.1863560"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1698750.1698754"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1806596.1806612"},{"key":"e_1_3_2_1_9_1","volume-title":"USENIX Security","author":"Chong S.","year":"2007","unstructured":"}} S. Chong , K. Vikram , A.C. Myers , : Enforcing confidentiality and integrity in web applications . In USENIX Security , 2007 . }}S. Chong, K. Vikram, A.C. Myers, et al. SIF: Enforcing confidentiality and integrity in web applications. In USENIX Security, 2007."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1559845.1559875"},{"key":"e_1_3_2_1_11_1","volume-title":"Nemesis: Preventing Authentication &amp","author":"Dalton M.","year":"2009","unstructured":"}} M. Dalton , C. Kozyrakis , and N. Zeldovich . Nemesis: Preventing Authentication &amp ; Access Control Vulnerabilities in Web Applications. In USENIX Security , 2009 . }}M. Dalton, C. Kozyrakis, and N. Zeldovich. Nemesis: Preventing Authentication & Access Control Vulnerabilities in Web Applications. In USENIX Security, 2009."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"e_1_3_2_1_13_1","volume-title":"HOTOS","author":"Erlingsson U.","year":"2007","unstructured":"}} U. Erlingsson , B. Livshits , and Y. Xie . End-to-end web application security . In HOTOS , 2007 . }}U. Erlingsson, B. Livshits, and Y. Xie. End-to-end web application security. In HOTOS, 2007."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2007.7"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065036"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1526709.1526785"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/11863908_27"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.29"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/360248.360252"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.16"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1755688.1755691"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03549-4_15"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1094811.1094840"},{"key":"e_1_3_2_1_24_1","first-page":"62","author":"McCarthy J.","year":"1962","unstructured":"}} J. McCarthy . Towards a mathematical science of computation. Information Processing , 62 , 1962 . }}J. McCarthy. Towards a mathematical science of computation. Information Processing, 62, 1962.","journal-title":"Information Processing"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1022494.1022530"},{"key":"e_1_3_2_1_26_1","volume-title":"The ten most critical web application risks","author":"OWASP.","year":"2010","unstructured":"}} OWASP. The ten most critical web application risks , 2010 . http:\/\/www.owasp.org\/images\/0\/0f\/OWASP_T10_-_2010_rc1.pdf. }}OWASP. The ten most critical web application risks, 2010. http:\/\/www.owasp.org\/images\/0\/0f\/OWASP_T10_-_2010_rc1.pdf."},{"key":"e_1_3_2_1_27_1","volume-title":"The Pragmatic Bookshelf","author":"Ruby Sam","year":"2009","unstructured":"}} Sam Ruby , Dave Thomas , and David Heinemeier Hansson . Agile Web Development with Rails . The Pragmatic Bookshelf , 2009 . }}Sam Ruby, Dave Thomas, and David Heinemeier Hansson. Agile Web Development with Rails. The Pragmatic Bookshelf, 2009."},{"key":"e_1_3_2_1_29_1","unstructured":"}}SRI. Yices: An SMT solver. http:\/\/yices.csl.sri.com\/.  }}SRI. Yices: An SMT solver. http:\/\/yices.csl.sri.com\/."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1111037.1111070"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542486"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653685"},{"key":"e_1_3_2_1_33_1","volume-title":"NDSS","author":"Vogt P.","year":"2007","unstructured":"}} P. Vogt , F. Nentwich , N. Jovanovic , E. Kirda , C. Kruegel , and G. Vigna . Cross-site scripting prevention with dynamic data tainting and static analysis . In NDSS , 2007 . }}P. Vogt, F. Nentwich, N. Jovanovic, E. Kirda, C. Kruegel, and G. Vigna. Cross-site scripting prevention with dynamic data tainting and static analysis. In NDSS, 2007."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250739"},{"key":"e_1_3_2_1_35_1","volume-title":"Web application security statistics","author":"}}Web Application Security Consortium","year":"2008","unstructured":"}}Web Application Security Consortium . Web application security statistics , 2008 . http:\/\/projects.webappsec.org\/Web-Application-Security-Statistics. }}Web Application Security Consortium. Web application security statistics, 2008. http:\/\/projects.webappsec.org\/Web-Application-Security-Statistics."},{"key":"e_1_3_2_1_36_1","unstructured":"}}Heiko Webers. Ruby on rails security v2. OWASP report: http:\/\/www.owasp.org\/images\/2\/26\/Owasp-rails-security.pdf.  }}Heiko Webers. Ruby on rails security v2. OWASP report: http:\/\/www.owasp.org\/images\/2\/26\/Owasp-rails-security.pdf."},{"key":"e_1_3_2_1_37_1","volume-title":"USENIX Security","author":"Xie Y.","year":"2006","unstructured":"}} Y. Xie and A. Aiken . Static detection of security vulnerabilities in scripting languages . In USENIX Security , 2006 . }}Y. Xie and A. Aiken. Static detection of security vulnerabilities in scripting languages. In USENIX Security, 2006."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190252"}],"event":{"name":"CCS '10: 17th ACM Conference on Computer and Communications Security 2010","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Chicago Illinois USA","acronym":"CCS '10"},"container-title":["Proceedings of the 17th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866373","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1866307.1866373","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:08:59Z","timestamp":1750248539000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866373"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,10,4]]},"references-count":37,"alternative-id":["10.1145\/1866307.1866373","10.1145\/1866307"],"URL":"https:\/\/doi.org\/10.1145\/1866307.1866373","relation":{},"subject":[],"published":{"date-parts":[[2010,10,4]]},"assertion":[{"value":"2010-10-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}