• Difficult SQLi Code Patterns for Static Code Analysis Tools 

      Schuckert, Felix; Katt, Basel; Langweg, Hanno (Peer reviewed; Journal article, 2020)
      We compared vulnerable and xed versions of the source code of 50 dierent PHP open source projects based on CVE reports for SQL injection vulnerabilities. We scanned the source code with commercial and open source tools for ...
    • Source Code Patterns of Buffer Overflow Vulnerabilities in Firefox 

      Schuckert, Felix; Hildner, Max; Katt, Basel; Langweg, Hanno (Chapter, 2018)
      We investigated 50 randomly selected buffer overflow vulnerabilities in Firefox. The source code of these vulnerabilities and the corresponding patches were manually reviewed and patterns were identified. Our main contribution ...
    • Source Code Patterns of Cross Site Scripting in PHP Open Source Projects 

      Schuckert, Felix; Hildner, Max; Katt, Basel; Langweg, Hanno (Journal article; Peer reviewed, 2018)
      To get a better understanding of Cross Site Scripting vulnerabilities, we investigated 50 randomly selected CVE reports which are related to open source projects. The vulnerable and patched source code was manually reviewed ...