• Difficult SQLi Code Patterns for Static Code Analysis Tools 

      Schuckert, Felix; Katt, Basel; Langweg, Hanno (Peer reviewed; Journal article, 2020)
      We compared vulnerable and xed versions of the source code of 50 dierent PHP open source projects based on CVE reports for SQL injection vulnerabilities. We scanned the source code with commercial and open source tools for ...
    • Opportunities of Insecurity Refactoring for Training and Software Development 

      Schuckert, Felix (Doctoral theses at NTNU;2024:106, Doctoral thesis, 2024)
      Teaching software security is complex and should involve practical exercises. Practical exercises require software artifacts and projects that contain vulnerabilities. The vulnerabilities can be exploited to understand ...
    • Source Code Patterns of Buffer Overflow Vulnerabilities in Firefox 

      Schuckert, Felix; Hildner, Max; Katt, Basel; Langweg, Hanno (Chapter, 2018)
      We investigated 50 randomly selected buffer overflow vulnerabilities in Firefox. The source code of these vulnerabilities and the corresponding patches were manually reviewed and patterns were identified. Our main contribution ...
    • Source Code Patterns of Cross Site Scripting in PHP Open Source Projects 

      Schuckert, Felix; Hildner, Max; Katt, Basel; Langweg, Hanno (Journal article; Peer reviewed, 2018)
      To get a better understanding of Cross Site Scripting vulnerabilities, we investigated 50 randomly selected CVE reports which are related to open source projects. The vulnerable and patched source code was manually reviewed ...