library PHP Navigator phpBB PHP PHP PHP / M. Frans Kaashoek Massachusetts Institute of Technology / /
IndustryTerm
real Web applications / cross-site / Web applications / assurance against malicious server / Web site vulnerabilities / real applications / Web application / Web forum application / file systems / malicious whois server / whois server / Web application programmers / Web server / trusted computing base / /
NaturalFeature
I/O channel / /
Organization
Massachusetts Institute of Technology / PC / /
Person
Alexander Yip / R ESIN / /
Position
manager HotCRP PHP PHP / File Thingie file manager / program chair / Protection General / interpreter / author / PHP interpreter / threat model / site administrator / application programmer / Runtime Programmer Programmer Programmer / programmer / weaker threat model / /
Product
ACLs / Directory Traversal Server-Side Script Injection / Vulnerability SQL injection / A SQL injection / Apache / Server-Side Script Injection / SQL injection / Cross-site scripting Information leakage Predictable resource location SQL injection / Cross-Site Scripting SQL injection / Vulnerability type SQL injection / This / data flows / data / data flow / /
ProgrammingLanguage
R / C / Python / HTML / SQL / PHP / JavaScript / /
ProvinceOrState
Montana / /
Technology
virtual machine / PHP / JSON / API / HTML / Operating Systems / access control list / CGI / encryption / artificial intelligence / flow control / HTTP / Web server / /
Improving Application Security with Data Flow Assertions Alexander Yip, Xi Wang, Nickolai Zeldovich, and M. Frans Kaashoek Massachusetts Institute of Technology – Computer Science and Artificial Intelligence Laboratory