Exploiting input sanitization for regex denial of service-Reference-Cited by-同舟云学术

Exploiting input sanitization for regex denial of service

Published:2022-05-21 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 44th International Conference on Software Engineering
language:
Short-container-title:

Author:

Barlas Efe¹,Du Xin¹,Davis James C.¹

Affiliation:

1. Purdue University

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3510003.3510047

Reference113 articles.

1. 2014. Documentation | API Blueprint. https://apiblueprint.org/documentation/ 2014. Documentation | API Blueprint. https://apiblueprint.org/documentation/

2. 2015. Support interdependencies between query parameters · Issue #256 · OAI/OpenAPI-Specification. https://github.com/OAI/OpenAPI-Specification/issues/256 2015. Support interdependencies between query parameters · Issue #256 · OAI/OpenAPI-Specification. https://github.com/OAI/OpenAPI-Specification/issues/256

3. 2019. GitHub - davisjam/vuln-regex-detector: Detect vulnerable regexes in your project. https://github.com/davisjam/vuln-regex-detector 2019. GitHub - davisjam/vuln-regex-detector: Detect vulnerable regexes in your project. https://github.com/davisjam/vuln-regex-detector

4. 2019. Prism | Open-Source HTTP Mock and Proxy Server. https://stoplight.io/open-source/prism 2019. Prism | Open-Source HTTP Mock and Proxy Server. https://stoplight.io/open-source/prism

5. 2020. About RAML. https://raml.org/about-raml 2020. About RAML. https://raml.org/about-raml

Cited by 8 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Testing RESTful APIs: A Survey;ACM Transactions on Software Engineering and Methodology;2023-11-24

2. Black Ostrich: Web Application Scanning with String Solvers;Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security;2023-11-15

3. Leader: Defense Against Exploit-Based Denial-of-Service Attacks on Web Applications;Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses;2023-10-16

4. AGORA: Automated Generation of Test Oracles for REST APIs;Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis;2023-07-12

5. Improving Developers’ Understanding of Regex Denial of Service Tools through Anti-Patterns and Fix Strategies;2023 IEEE Symposium on Security and Privacy (SP);2023-05