Browse wiki

From Navigators

Jump to: navigation, search
Publication:ENASE2021
Abstract The vast majority of online services we us The vast majority of online services we use nowadays provide their web application to the users. The correctness of the source code of these applications is crucial to prevent attackers from exploiting its vulnerabilities, leading to severe consequences like the disclosure of sensitive information or the degradation of the availability of the application. Currently, multiple existent solutions analyse and detect vulnerabilities in the source code. Attackers, however, do not usually have access to the source code and must work with the information that is made public. Their goals are clear -- exploit vulnerabilities without accessing the code --, and they resort of black-box fuzzing tools to achieve such. In this paper, we propose an ensemble fuzzing approach to check the correctness of the web applications from the point of view of an attacker and, in a posterior phase, analyse the source code to correlate with the collected information. The approach focuses first on the quality of fuzzers’ crawlers and afterwards on fuzzers capabilities of exploiting the results of all crawlers between them, in order to provide better coverage and precision in the detection of web vulnerabilities. Our preliminary results show that the ensemble performs better than fuzzers individually. performs better than fuzzers individually.
Author João Caseirito + , Ibéria Medeiros +
Booktitle In Proceedings of the International Conference on Evaluation of Novel Approaches to Software Engineering (ENASE)  +
Key ENASE2021  +
Month apr  +
NumPubDate 2,021.04  +
Project Project:SEAL +
ResearchLine Fault and Intrusion Tolerance in Open Distributed Systems (FIT) +
Title Improving Web Application Vulnerability Detection Leveraging Ensemble Fuzzing  +
Type inproceedings  +
Year 2021  +
Has improper value forThis property is a special property in this wiki. Url  +
Categories Publication  +
Modification dateThis property is a special property in this wiki. 19 March 2021 01:07:51  +
show properties that link here 

 

Enter the name of the page to start browsing from.
Views
Personal tools
Toolbox
Navigators toolbox