Zhendong Su, Gary Wassermann. The essence of command injection attacks in web applications. In J. Gregory Morrisett, Simon L. Peyton Jones, editors, Proceedings of the 33rd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, POPL 2006, Charleston, South Carolina, USA, January 11-13, 2006. pages 372-382, ACM, 2006. [doi]
Abstract is missing.