{"id":"https://openalex.org/W2766465278","doi":"https://doi.org/10.1145/3139337.3139341","title":"Using Precise Taint Tracking for Auto-sanitization","display_name":"Using Precise Taint Tracking for Auto-sanitization","publication_year":2017,"publication_date":"2017-10-30","ids":{"openalex":"https://openalex.org/W2766465278","doi":"https://doi.org/10.1145/3139337.3139341","mag":"2766465278"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1145/3139337.3139341","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068853939","display_name":"Tejas Saoji","orcid":null},"institutions":[{"id":"https://openalex.org/I51504820","display_name":"San Jose State University","ror":"https://ror.org/04qyvz380","country_code":"US","type":"funder","lineage":["https://openalex.org/I51504820"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tejas Saoji","raw_affiliation_strings":["San Jos\u00e9 State University, San Jose, CA, USA"],"affiliations":[{"raw_affiliation_string":"San Jos\u00e9 State University, San Jose, CA, USA","institution_ids":["https://openalex.org/I51504820"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079324753","display_name":"Thomas H. Austin","orcid":"https://orcid.org/0000-0003-2428-0687"},"institutions":[{"id":"https://openalex.org/I51504820","display_name":"San Jose State University","ror":"https://ror.org/04qyvz380","country_code":"US","type":"funder","lineage":["https://openalex.org/I51504820"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Thomas H. Austin","raw_affiliation_strings":["San Jos\u00e9 State University, San Jose, CA, USA"],"affiliations":[{"raw_affiliation_string":"San Jos\u00e9 State University, San Jose, CA, USA","institution_ids":["https://openalex.org/I51504820"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110315014","display_name":"Cormac Flanagan","orcid":null},"institutions":[{"id":"https://openalex.org/I185103710","display_name":"University of California, Santa Cruz","ror":"https://ror.org/03s65by71","country_code":"US","type":"funder","lineage":["https://openalex.org/I185103710"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cormac Flanagan","raw_affiliation_strings":["University of California, Santa Cruz, Santa Cruz, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California, Santa Cruz, Santa Cruz, CA, USA","institution_ids":["https://openalex.org/I185103710"]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.074,"has_fulltext":true,"fulltext_origin":"ngrams","cited_by_count":11,"citation_normalized_percentile":{"value":0.79624,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":86,"max":87},"biblio":{"volume":null,"issue":null,"first_page":"15","last_page":"24"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9999,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9999,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9992,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9801,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-Site Scripting","score":0.9723853},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.9172748},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL Injection","score":0.8086139},{"id":"https://openalex.org/keywords/perl","display_name":"Perl","score":0.71808034},{"id":"https://openalex.org/keywords/tracking","display_name":"Tracking (education)","score":0.41045603}],"concepts":[{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.9723853},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.9172748},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8544461},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.85161203},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.8086139},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.7510878},{"id":"https://openalex.org/C2777002779","wikidata":"https://www.wikidata.org/wiki/Q42478","display_name":"Perl","level":2,"score":0.71808034},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5764197},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.48991674},{"id":"https://openalex.org/C510870499","wikidata":"https://www.wikidata.org/wiki/Q47607","display_name":"SQL","level":2,"score":0.4673669},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.41045603},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.38855618},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.37740195},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3001547},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.24969336},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.17282975},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.12352058},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.08766627},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.0},{"id":"https://openalex.org/C19417346","wikidata":"https://www.wikidata.org/wiki/Q7922","display_name":"Pedagogy","level":1,"score":0.0},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.0},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1145/3139337.3139341","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[],"grants":[],"datasets":[],"versions":[],"referenced_works_count":46,"referenced_works":["https://openalex.org/W114581357","https://openalex.org/W1222699389","https://openalex.org/W1505465226","https://openalex.org/W1511560695","https://openalex.org/W1577719850","https://openalex.org/W1582331515","https://openalex.org/W1598083179","https://openalex.org/W1777693579","https://openalex.org/W1969883639","https://openalex.org/W1984440144","https://openalex.org/W1987647365","https://openalex.org/W1994197051","https://openalex.org/W1998180710","https://openalex.org/W2008332764","https://openalex.org/W2024811322","https://openalex.org/W2060218972","https://openalex.org/W2061640969","https://openalex.org/W2069307783","https://openalex.org/W2085939020","https://openalex.org/W2089745089","https://openalex.org/W2102970979","https://openalex.org/W2122312154","https://openalex.org/W2125357166","https://openalex.org/W2139672701","https://openalex.org/W2144696387","https://openalex.org/W2146717998","https://openalex.org/W2150138014","https://openalex.org/W2152225177","https://openalex.org/W2153684747","https://openalex.org/W2155735696","https://openalex.org/W2162671156","https://openalex.org/W2165304392","https://openalex.org/W2177614278","https://openalex.org/W2296102517","https://openalex.org/W2401235936","https://openalex.org/W2467714986","https://openalex.org/W2519680833","https://openalex.org/W2527850347","https://openalex.org/W2530307082","https://openalex.org/W2602111867","https://openalex.org/W2621195269","https://openalex.org/W2687548538","https://openalex.org/W2759927279","https://openalex.org/W4206358530","https://openalex.org/W4240951837","https://openalex.org/W4250404129"],"related_works":["https://openalex.org/W4312406950","https://openalex.org/W4254049844","https://openalex.org/W3188339517","https://openalex.org/W2887773459","https://openalex.org/W2766465278","https://openalex.org/W2295858576","https://openalex.org/W2184634743","https://openalex.org/W2117353399","https://openalex.org/W2066529931","https://openalex.org/W189846524"],"abstract_inverted_index":{"Taint":[0],"analysis":[1,33],"has":[2],"been":[3],"used":[4,41,58,80,149],"in":[5,42,59,110,123,137],"numerous":[6],"scripting":[7,26],"languages":[8],"such":[9,23],"as":[10,24],"Perl":[11],"and":[12,28,133,139,155],"Ruby":[13],"to":[14,61,100,121,126,150],"defend":[15,151],"against":[16,152],"various":[17],"form":[18],"of":[19,85,163,174],"code":[20],"injection":[21,154],"attacks,":[22],"cross-site":[25],"(XSS)":[27],"SQL-injection.":[29],"However,":[30],"most":[31],"taint":[32,54,135,144,169],"systems":[34],"simply":[35,67],"fail":[36],"when":[37],"tainted":[38,83],"information":[39],"is":[40],"a":[43,72,86],"possibly":[44],"unsafe":[45,111],"manner.":[46],"In":[47,113],"this":[48,89,164],"paper,":[49],"we":[50,69],"explore":[51],"how":[52,141],"precise":[53,134,143,168],"tracking":[55,136,145,170],"can":[56,77,96,147],"be":[57,79,101,148],"order":[60],"secure":[62],"web":[63],"content.":[64],"Rather":[65],"than":[66],"crashing,":[68],"propose":[70],"that":[71,167],"library-writer":[73],"defined":[74],"sanitization":[75],"function":[76],"instead":[78],"on":[81],"the":[82,161],"portions":[84],"string.":[87],"With":[88],"approach,":[90,165],"library":[91],"writers":[92],"or":[93],"framework":[94],"developers":[95,106],"design":[97],"their":[98],"tools":[99],"resilient,":[102],"even":[103],"if":[104],"inexperienced":[105],"misuse":[107],"these":[108],"libraries":[109],"ways.":[112],"other":[114],"words,":[115],"developer":[116],"mistakes":[117],"do":[118],"not":[119],"have":[120],"result":[122],"system":[124],"crashes":[125],"guarantee":[127],"security.":[128],"We":[129,158],"implement":[130],"both":[131],"coarse-grained":[132],"JavaScript,":[138],"show":[140],"our":[142],"API":[146],"SQL":[153],"XSS":[156],"attacks.":[157],"further":[159],"evaluate":[160],"performance":[162],"showing":[166],"involves":[171],"an":[172],"overhead":[173],"approximately":[175],"22%.":[176]},"abstract_inverted_index_v3":null,"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W2766465278","counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":2}],"updated_date":"2025-04-16T03:33:38.065386","created_date":"2017-11-10"}