Automatic Generation of XSS and SQL Injection Attacks with Goal-Directed Model Checking

Michael Martin, Monica S. Lam. Automatic Generation of XSS and SQL Injection Attacks with Goal-Directed Model Checking. In Paul C. van Oorschot, editor, Proceedings of the 17th USENIX Security Symposium, July 28-August 1, 2008, San Jose, CA, USA. pages 31-44, USENIX Association, 2008. [doi]

@inproceedings{MartinL08:0,
  title = {Automatic Generation of XSS and SQL Injection Attacks with Goal-Directed Model Checking},
  author = {Michael Martin and Monica S. Lam},
  year = {2008},
  url = {http://www.usenix.org/events/sec08/tech/full_papers/martin/martin.pdf},
  tags = {injection attack, model checking, meta-model, SQL, Meta-Environment},
  researchr = {https://researchr.org/publication/MartinL08%3A0},
  cites = {0},
  citedby = {0},
  pages = {31-44},
  booktitle = {Proceedings of the 17th USENIX Security Symposium, July 28-August 1, 2008, San Jose, CA, USA},
  editor = {Paul C. van Oorschot},
  publisher = {USENIX Association},
  isbn = {978-1-931971-60-7},
}