NDLI logo
  • Content
  • Similar Resources
  • Metadata
  • Cite This
  • Log-in
  • Fullscreen
Log-in
Do not have an account? Register Now
Forgot your password? Account recovery
  1. Proceedings of the the 7th joint meeting of the European software engineering conference and the ACM SIGSOFT symposium on The foundations of software engineering (ESEC/FSE '09)
  2. Automated security testing of web widget interactions
Loading...

Please wait, while we are loading the content...

Asserting and checking determinism for multithreaded programs
Darwin: an approach for debugging evolving programs
The massification and webification of systems' modeling and simulation with virtual worlds
Backward-compatible constant-time exception-protected memory
Cross-project defect prediction: a large scale experiment on data vs. domain vs. process
Qos-driven runtime adaptation of service oriented architectures
Refactoring for reentrancy
Api hyperlinking via structural overlap
Insights from expert software design practice
Fitting the pieces together: a machine-checked model of safe composition
Debugging debugging: acm sigsoft impact paper award keynote
Facilitating software refactoring with appropriate resolution order of bad smells
Verification and performance evaluation of aadl models
Software architecture: many faces, many places, yet a central discipline
Synthesizing partial component-level behavior models from system specifications
Probabilistic environments in the quantitative analysis of (non-probabilistic) behaviour models
Engineering search computing applications: vision and challenges
DebugAdvisor: a recommender system for debugging
The challenge of pervasive software to the conventional wisdom of software engineering
Static data race detection for concurrent programs with asynchronous calls
Capturing propagation of infected program states
Automated security testing of web widget interactions
On the relationship between process maturity and geographic distribution: an empirical analysis of their impact on software quality
Automatic synthesis of behavior protocols for composable web-services
Monitoring probabilistic properties
Learning from examples to improve code completion systems
Ensuring interoperable service-oriented systems through engineered self-healing
Software change dynamics: evidence from 35 java projects
Reo2MC: a tool chain for performance analysis of coordination models
Supporting automatic model inconsistency fixing
Automatic steering of behavioral model inference
Graph-based mining of multiple object usage patterns
IQ routes and HD traffic: technology insights about tomtom's time-dynamic navigation concept
Symbolic pruning of concurrent program executions
Saturation-based testing of concurrent programs
Improving bug triage with bug tossing graphs
Data flow testing of service choreography
MSeqGen: object-oriented unit-test generation via mining source code
Improving slice accuracy by compression of data and control flow paths
Practical framework constraints
Smart views for analyzing problem reports: tool demo
Behavioral automata composition for automatic topology independent verification of parameterized systems
Sireum/Topi LDP: a lightweight semi-decision procedure for optimizing symbolic execution-based analyses
Fair and balanced?: bias in bug-fix datasets
Whitening SOA testing
Evaluating recovery aware components for grid reliability
SCA: a semantic conflict analyzer for parallel changes
Towards accurate probabilistic models using state refinement
Test case comparison and clustering using program profiles and static execution
ReCrashJ: a tool for capturing and reproducing program crashes in deployed applications
Javalanche: efficient mutation testing for Java
ConcernMorph: metrics-based detection of crosscutting patterns
Srijan: a graphical toolkit for sensor network macroprogramming

Similar Documents

...
Bezemer et. Al. – automated security testing of web widget interactions automated security testing of web widget interactions.

Article

...
An automated approach for testing the security of web applications against chained attacks

Article

...
Metrics for automated testability of web applications

Article

...
Web application security: Improving critical web-based applications quality through in-depth security analysis

Article

...
Server interface descriptions for automated testing of JavaScript web applications

Article

...
Solving Some Modeling Challenges when Testing Rich Internet Applications for Security

Article

...
A framework for automated testing of javascript web applications

Article

...
The automated web application testing (AWAT) system

Article

...
Automated Reverse Engineering of UML Sequence Diagrams for Dynamic Web Applications

Article

Automated security testing of web widget interactions

Content Provider ACM Digital Library
Author van Deursen, Arie Bezemer, Cor-Paul Mesbah, Ali
Abstract We present a technique for automatically detecting security vulnerabilities in client-side self-contained components, called web widgets, that can co-exist independently on a single web page. In this paper we focus on two security scenarios, namely the case in which (1) a malicious widget changes the content (DOM) of another widget, and (2) a widget steals data from another widget and sends it to the server via an HTTP request. We propose a dynamic analysis approach for automatically executing the web application and analyzing the runtime changes in the user interface, as well as the outgoing HTTP calls, to detect inter-widget interaction violations. Our approach, implemented in a number of open source ATUSA plugins, called DIVA, requires no modification of application code, and has few false positives. We discuss the results of an empirical evaluation of the violation revealing capabilities, performance, and scalability of our approach, by means of two case studies, on the Exact Widget Framework and Pageflakes, a commercial, widely used widget framework.
Starting Page 81
Ending Page 90
Page Count 10
File Format PDF
ISBN 9781605580012
DOI 10.1145/1595696.1595711
Language English
Publisher Association for Computing Machinery (ACM)
Publisher Date 2009-08-24
Publisher Place New York
Access Restriction Subscribed
Subject Keyword Security testing Web applications
Content Type Text
Resource Type Article
  • About
  • Disclaimer
  • Feedback
  • Sponsor
  • Contact
  • Chat with Us
About National Digital Library of India (NDLI)
NDLI logo

National Digital Library of India (NDLI) is a virtual repository of learning resources which is not just a repository with search/browse facilities but provides a host of services for the learner community. It is sponsored and mentored by Ministry of Education, Government of India, through its National Mission on Education through Information and Communication Technology (NMEICT). Filtered and federated searching is employed to facilitate focused searching so that learners can find the right resource with least effort and in minimum time. NDLI provides user group-specific services such as Examination Preparatory for School and College students and job aspirants. Services for Researchers and general learners are also provided. NDLI is designed to hold content of any language and provides interface support for 10 most widely used Indian languages. It is built to provide support for all academic levels including researchers and life-long learners, all disciplines, all popular forms of access devices and differently-abled learners. It is designed to enable people to learn and prepare from best practices from all over the world and to facilitate researchers to perform inter-linked exploration from multiple sources. It is developed, operated and maintained from Indian Institute of Technology Kharagpur.

Learn more about this project from here.

Disclaimer

NDLI is a conglomeration of freely available or institutionally contributed or donated or publisher managed contents. Almost all these contents are hosted and accessed from respective sources. The responsibility for authenticity, relevance, completeness, accuracy, reliability and suitability of these contents rests with the respective organization and NDLI has no responsibility or liability for these. Every effort is made to keep the NDLI portal up and running smoothly unless there are some unavoidable technical issues.

Feedback

Sponsor

Ministry of Education, through its National Mission on Education through Information and Communication Technology (NMEICT), has sponsored and funded the National Digital Library of India (NDLI) project.

Contact National Digital Library of India
Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302
See location in the Map
03222 282435
Mail: support@ndl.gov.in
Sl. Authority Responsibilities Communication Details
1 Ministry of Education (GoI),
Department of Higher Education
Sanctioning Authority https://www.education.gov.in/ict-initiatives
2 Indian Institute of Technology Kharagpur Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project https://www.iitkgp.ac.in
3 National Digital Library of India Office, Indian Institute of Technology Kharagpur The administrative and infrastructural headquarters of the project Dr. B. Sutradhar  bsutra@ndl.gov.in
4 Project PI / Joint PI Principal Investigator and Joint Principal Investigators of the project Dr. B. Sutradhar  bsutra@ndl.gov.in
Prof. Saswat Chakrabarti  will be added soon
5 Website/Portal (Helpdesk) Queries regarding NDLI and its services support@ndl.gov.in
6 Contents and Copyright Issues Queries related to content curation and copyright issues content@ndl.gov.in
7 National Digital Library of India Club (NDLI Club) Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach clubsupport@ndl.gov.in
8 Digital Preservation Centre (DPC) Assistance with digitizing and archiving copyright-free printed books dpc@ndl.gov.in
9 IDR Setup or Support Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops idr@ndl.gov.in
I will try my best to help you...
Cite this Content
Loading...