On the public citation graph
Efficiency and Effectiveness of Web Application Vulnerability Detection Approaches: A Review
0 signed · 131 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1007/978-3-319-21690-4_14openalex-snapshot
Effective Search-Space Pruning for Solvers of String Equations, Regular Expressions and Length Constraints
inferredcites →https://doi.org/10.1007/978-3-319-21690-4_29openalex-snapshot
Norn: An SMT Solver for String Constraints
inferredcites →https://doi.org/10.1007/978-3-319-26285-7_6openalex-snapshot
Proposal of a Hybrid Process to Manage Vulnerabilities in Web Applications
inferredcites →https://doi.org/10.1007/978-3-319-45243-2_34openalex-snapshot
A Solution for Automatically Malicious Web Shell and Web Application Vulnerability Detection
inferredcites →https://doi.org/10.1007/978-3-319-67274-8_6openalex-snapshot
Development of a Software Vulnerability Prediction Web Service Based on Artificial Neural Networks
inferredcites →https://doi.org/10.1007/978-3-642-22577-2_45openalex-snapshot
SQLIVD - AOP: Preventing SQL Injection Vulnerabilities Using Aspect Oriented Programming through Web Services
inferredcites →https://doi.org/10.1007/978-981-13-6052-7_41openalex-snapshot
Predicting Web Vulnerabilities in Web Applications Based on Machine Learning
inferredcites →https://doi.org/10.1007/978-981-16-2818-4openalex-snapshot
Optical and Wireless Technologies
inferredcites →https://doi.org/10.1007/s10009-017-0472-3openalex-snapshot
Knowledge-based security testing of web applications by logic programming
inferredcites →https://doi.org/10.1007/s10207-016-0334-0openalex-snapshot
Designing vulnerability testing tools for web services: approach, components, and tools
inferredcites →https://doi.org/10.1007/s10207-016-0355-8openalex-snapshot
Privacy-preserving smart metering revisited
inferredcites →https://doi.org/10.1007/s10207-016-0359-4openalex-snapshot
Black-box detection of XQuery injection and parameter tampering vulnerabilities in web applications
inferredcites →https://doi.org/10.1007/s10207-018-0423-3openalex-snapshot
You click, I steal: analyzing and detecting click hijacking attacks in web pages
inferredcites →https://doi.org/10.1007/s10664-010-9131-yopenalex-snapshot
An empirical investigation into open source web applications’ implementation vulnerabilities
inferredcites →https://doi.org/10.1007/s10703-013-0189-1openalex-snapshot
Automata-based symbolic string analysis for vulnerability detection
inferredcites →https://doi.org/10.1007/s11042-016-3735-1openalex-snapshot
XSS-secure as a service for the platforms of online social network-based multimedia web applications in cloud
inferredcites →https://doi.org/10.1007/s11432-017-9288-4openalex-snapshot
An adaptive system for detecting malicious queries in web attacks
inferredcites →https://doi.org/10.1007/s13369-015-1891-7openalex-snapshot
XSS-SAFE: A Server-Side Approach to Detect and Mitigate Cross-Site Scripting (XSS) Attacks in JavaScript Code
inferredcites →https://doi.org/10.1016/j.cose.2011.12.013openalex-snapshot
Have things changed now? An empirical study on input validation vulnerabilities in web applications
inferredcites →https://doi.org/10.1016/j.cose.2014.04.007openalex-snapshot
Detecting SQL injection attacks using query result size
inferredcites →https://doi.org/10.1016/j.cose.2015.11.004openalex-snapshot
A deliberately insecure RDF-based Semantic Web application framework for teaching SPARQL/SPARUL injection attacks and defense mechanisms
inferredcites →https://doi.org/10.1016/j.cose.2015.11.006openalex-snapshot
A study on Web security incidents in China by analyzing vulnerability disclosure platforms
inferredcites →https://doi.org/10.1016/j.future.2017.05.038openalex-snapshot
Hunting for DOM-Based XSS vulnerabilities in mobile cloud-based online social network
inferredcites →https://doi.org/10.1016/j.infsof.2008.01.006openalex-snapshot
Empirical studies of agile software development: A systematic review
inferredcites →https://doi.org/10.1016/j.infsof.2011.12.006openalex-snapshot
Automated removal of cross site scripting vulnerabilities in web applications
inferredcites →https://doi.org/10.1016/j.infsof.2013.02.006openalex-snapshot
A systematic mapping study of web application testing
inferredcites →https://doi.org/10.1016/j.infsof.2013.04.002openalex-snapshot
Predicting SQL injection and cross site scripting vulnerabilities through mining input sanitization patterns
inferredcites →https://doi.org/10.1016/j.infsof.2013.08.001openalex-snapshot
Comparison and integration of genetic algorithms and dynamic symbolic execution for security testing of cross-site scripting vulnerabilities
inferredcites →https://doi.org/10.1016/j.infsof.2014.07.010openalex-snapshot
Current state of research on cross-site scripting (XSS) – A systematic literature review
inferredcites →https://doi.org/10.1016/j.infsof.2016.02.005openalex-snapshot
Securing web applications from injection and logic vulnerabilities: Approaches and challenges
inferredcites →https://doi.org/10.1016/j.jnca.2015.11.017openalex-snapshot
Web application protection techniques: A taxonomy
inferredcites →https://doi.org/10.1016/j.jnca.2018.01.008openalex-snapshot
DetLogic: A black-box approach for detecting logic vulnerabilities in web applications
inferredcites →https://doi.org/10.1016/j.jss.2009.09.037openalex-snapshot
A family of code coverage-based heuristics for effective fault localization
inferredcites →https://doi.org/10.1016/j.jss.2010.07.007openalex-snapshot
Perturbation-based user-input-validation testing of web applications
inferredcites →https://doi.org/10.1016/j.jss.2017.02.040openalex-snapshot
Security slicing for auditing common injection vulnerabilities
inferredcites →https://doi.org/10.1016/j.mcm.2011.01.050openalex-snapshot
A novel method for SQL injection attack detection based on removing SQL query attribute values
inferredcites →https://doi.org/10.1016/j.procs.2015.03.078openalex-snapshot
Implementation of Pattern Matching Algorithm to Defend SQLIA
inferredcites →https://doi.org/10.1016/j.procs.2018.08.227openalex-snapshot
Static Taint Analysis Traversal with Object Oriented Component for Web File Injection Vulnerability Pattern Detection
inferredcites →https://doi.org/10.1016/j.protcy.2016.05.152openalex-snapshot
Enhanced XSS Defensive Framework for Web Applications Deployed in the Virtual Machines of Cloud Computing Environment
inferredcites →https://doi.org/10.1016/j.sysarc.2015.11.001openalex-snapshot
Multiple-path testing for cross site scripting using genetic algorithms
inferredcites →https://doi.org/10.1049/iet-sen.2011.0084openalex-snapshot
Auditing the XSS defence features implemented in web application programs
inferredcites →https://doi.org/10.1088/1742-6596/933/1/012011openalex-snapshot
Local File Disclosure Vulnerability: A Case Study of Public-Sector Web Applications
inferredcites →https://doi.org/10.1109/52.23121openalex-snapshot
Comments, with reply, on 'Adding data abstraction to Fortran Software' by K.W. Miller, et al
inferredcites →https://doi.org/10.1109/compsym.2010.5685537openalex-snapshot
An automated vulnerability scanner for injection attack based on injection point
inferredcites →https://doi.org/10.1109/iccsnt19621.2011openalex-snapshot
Proceedings of 2011 International Conference on Computer Science and Network Technology
inferredcites →https://doi.org/10.1109/icoia.2013.6650259openalex-snapshot
A black-box testing tool for detecting SQL injection vulnerabilities
inferredcites →https://doi.org/10.1109/icsess.2018.8663762openalex-snapshot
Proceedings of 2018 IEEE 9th International Conference on Software Engineering and Service Science
inferredcites →https://doi.org/10.1109/issre.2006.43openalex-snapshot
Software Security: Building Security In
inferredcites →https://doi.org/10.1109/itng.2009.34openalex-snapshot
An Approach for SQL Injection Vulnerability Detection
inferredcites →https://doi.org/10.1109/msp.2010.114openalex-snapshot
Session management vulnerabilities in today's web
inferredcites →https://doi.org/10.1109/scc.2004.1357971openalex-snapshot
Proceedings. 2004 IEEE International Conference on Services Computing
inferredcites →https://doi.org/10.1109/sp.2005.22openalex-snapshot
Proceedings. 2005 IEEE Symposium on Security and Privacy
inferredcites →https://doi.org/10.1109/tdsc.2014.2373377openalex-snapshot
Web Application Vulnerability Prediction Using Hybrid Program Analysis and Machine Learning
inferredcites →https://doi.org/10.1109/tr.2015.2457411openalex-snapshot
Detecting and Removing Web Application Vulnerabilities with Static Analysis and Data Mining
inferredcites →https://doi.org/10.1109/tr.2019.2900007openalex-snapshot
SEPTIC: Detecting Injection Attacks and Vulnerabilities Inside the DBMS
inferredcites →https://doi.org/10.1109/tr.2019.2910285openalex-snapshot
ART4SQLi: The ART of SQL Injection Vulnerability Discovery
inferredcites →https://doi.org/10.1109/tse.2007.70748openalex-snapshot
WASP: Protecting Web Applications Using Positive Tainting and Syntax-Aware Evaluation
inferredcites →https://doi.org/10.1109/tse.2011.103openalex-snapshot
A Systematic Literature Review on Fault Prediction Performance in Software Engineering
inferredcites →https://doi.org/10.1109/tse.2018.2844343openalex-snapshot
An Integrated Approach for Effective Injection Vulnerability Analysis of Web Applications Through Security Slicing and Hybrid Constraint Solving
inferredcites →https://doi.org/10.1145/143062openalex-snapshot
0897915046/International Conference on Software Engineering
inferredcites →https://doi.org/10.1145/1809100openalex-snapshot
Proceedings of the 2010 ICSE Workshop on Software Engineering for Secure Systems
inferredcites →https://doi.org/10.1145/2166956openalex-snapshot
Proceedings of the ACM SIGPLAN 6th Workshop on Programming Languages and Analysis for Security
inferredcites →https://doi.org/10.1145/2338965openalex-snapshot
Proceedings of the 2012 International Symposium on Software Testing and Analysis
inferredcites →https://doi.org/10.1145/2379776.2379780openalex-snapshot
Survey of scheduling techniques for addressing shared resources in multicore processors
inferredcites →https://doi.org/10.1145/2484313openalex-snapshot
Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security
inferredcites →https://doi.org/10.1145/2501654.2501663openalex-snapshot
Analyzing and defending against web-based malware
inferredcites →https://doi.org/10.1145/2522920.2522926openalex-snapshot
Path- and index-sensitive string analysis based on monadic second-order logic
inferredcites →https://doi.org/10.1145/2541315openalex-snapshot
A survey on server-side approaches to securing web applications
inferredcites →https://doi.org/10.1145/2543581.2543596openalex-snapshot
People reidentification in surveillance and forensics
inferredcites →https://doi.org/10.1145/2568225openalex-snapshot
Proceedings of the 36th International Conference on Software Engineering
inferredcites →https://doi.org/10.1145/266420openalex-snapshot
Proceedings of the 4th ACM conference on Computer and communications security
inferredcites →https://doi.org/10.1145/2699026openalex-snapshot
Proceedings of the 5th ACM Conference on Data and Application Security and Privacy
inferredcites →https://doi.org/10.1145/2810103openalex-snapshot
Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security
inferredcites →https://doi.org/10.1145/2931037openalex-snapshot
Proceedings of the 25th International Symposium on Software Testing and Analysis
inferredcites →https://doi.org/10.1145/3106237openalex-snapshot
Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering
inferredcites →https://doi.org/10.1145/3180155.3180235openalex-snapshot
Synthesizing qualitative research in software engineering
inferredcites →https://doi.org/10.1145/3264437openalex-snapshot
Proceedings of the 11th International Conference on Security of Information and Networks
inferredcites →https://doi.org/10.1145/3319535openalex-snapshot
Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security
inferredcites →https://doi.org/10.1145/3324884openalex-snapshot
Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering
inferredcites →https://doi.org/10.1145/3587135openalex-snapshot
Proceedings of the 20th ACM International Conference on Computing Frontiers
inferredcites →https://doi.org/10.1145/501983openalex-snapshot
Proceedings of the 8th ACM conference on Computer and Communications Security
inferredcites →https://doi.org/10.1186/1678-4804-20-4openalex-snapshot
An automated black box approach for web vulnerability identification and attack scenario generation
inferredcites →https://doi.org/10.1201/b19467openalex-snapshot
Evidence-Based Software Engineering and Systematic Reviews
inferredcites →https://doi.org/10.14569/ijacsa.2017.081254openalex-snapshot
Web Unique Method (WUM): An Open Source Blackbox Scanner for Detecting Web Vulnerabilities
inferredcites →https://doi.org/10.14722/ndss.2014.23262openalex-snapshot
Simulation of Built-in PHP Features for Precise Static Code Analysis
inferredcites →https://doi.org/10.14722/ndss.2020openalex-snapshot
Proceedings 2020 Network and Distributed System Security Symposium
inferredcites →https://doi.org/10.19101/ijacr.2018.838012openalex-snapshot
The approaches to quantify web application security scanners quality: a review
inferredcites →https://doi.org/10.3233/jcs-160554openalex-snapshot
SQLiDDS: SQL injection detection using document similarity measure
inferredcites →https://doi.org/10.4018/ijcac.2017070101openalex-snapshot
Detection, Avoidance, and Attack Pattern Mechanisms in Modern Web Application Vulnerabilities
inferredcites →https://doi.org/10.5120/18877-0144openalex-snapshot
Web Application Vulnerabilities: A Survey
inferredcites →https://doi.org/10.5555/2011304.2011305openalex-snapshot
Practical elimination of external interaction vulnerabilities in web applications
inferredcites →https://doi.org/10.5555/3370048.3370050openalex-snapshot
Text-mining and pattern-matching based prediction models for detecting vulnerable files in web applications
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1007/978-3-031-44207-0_26openalex-snapshot
VDCNet: A Vulnerability Detection and Classification System in Cross-Project Scenarios
inferred← citeshttps://doi.org/10.1007/978-3-032-13757-9_2openalex-snapshot
Performance and Productivity Trade-Offs in Modern PHP Frameworks: A Laravel Versus Symfony Analysis
inferred← citeshttps://doi.org/10.1007/978-3-032-28939-1_3openalex-snapshot
AI-Driven DevSecOps to Enhance Software Quality and Security
inferred← citeshttps://doi.org/10.1007/978-3-032-35576-8_34openalex-snapshot
Privacy Coverage Assessment of Code-Based Privacy Analysis Tools
inferred← citeshttps://doi.org/10.1007/978-981-96-5535-9_8openalex-snapshot
Vulnerability and Security Analysis of E-Commerce Websites
inferred← citeshttps://doi.org/10.1007/s11416-024-00518-0openalex-snapshot
Sniping at web applications to discover input-handling vulnerabilities
inferred← citeshttps://doi.org/10.1007/s12243-024-01022-8openalex-snapshot
Personal data filtering: a systematic literature review comparing the effectiveness of XSS attacks in web applications vs cookie stealing
inferred← citeshttps://doi.org/10.1016/j.comcom.2023.05.008openalex-snapshot
Efficient consensus algorithm based on improved DPoS in UAV-assisted mobile edge computing
inferred← citeshttps://doi.org/10.1016/j.comcom.2023.06.008openalex-snapshot
An O-MAPPO scheme for joint computation offloading and resources allocation in UAV assisted MEC systems
inferred← citeshttps://doi.org/10.1016/j.cose.2024.103797openalex-snapshot
NAISS: A reverse proxy approach to mitigate MageCart's e-skimmers in e-commerce
inferred← citeshttps://doi.org/10.1016/j.cose.2024.104059openalex-snapshot
A cosine similarity-based labeling technique for vulnerability type detection using source codes
inferred← citeshttps://doi.org/10.1016/j.cosrev.2025.100728openalex-snapshot
WebAssembly and security: A review
inferred← citeshttps://doi.org/10.1016/j.cosrev.2025.100753openalex-snapshot
The ML-based sensor data deception targeting cyber–physical systems: A review
inferred← citeshttps://doi.org/10.1016/j.eij.2024.100571openalex-snapshot
BACAD: AI-based framework for detecting vertical broken access control attacks
inferred← citeshttps://doi.org/10.1016/j.jnca.2025.104191openalex-snapshot
DRacv: Detecting and auto-repairing vulnerabilities in role-based access control in web application
inferred← citeshttps://doi.org/10.1016/j.procs.2026.05.196openalex-snapshot
Security Vulnerability Detection Algorithm for IoT Devices Based on Human-Computer Collaboration
inferred← citeshttps://doi.org/10.1016/j.scico.2026.103443openalex-snapshot
DATVD: A novel vulnerability detection method based on dynamic attention and hybrid convolutional pooling
inferred← citeshttps://doi.org/10.1038/s41598-025-93254-4openalex-snapshot
A simulation-driven computational framework for adaptive energy-efficient optimization in machine learning-based intrusion detection systems
inferred← citeshttps://doi.org/10.1109/dsa66321.2025.00036openalex-snapshot
A Framework for Brain-Based Digital Twins in Sport Motor Imagery
inferred← citeshttps://doi.org/10.1109/icebe68123.2025.00042openalex-snapshot
Blockchain Technologies and Their Applications in E-Business Ecosystems
inferred← citeshttps://doi.org/10.1109/icmcsi61536.2024.00124openalex-snapshot
Strategies for Building and Maintaining Secure Web Applications
inferred← citeshttps://doi.org/10.1109/isdfs69419.2026.11459007openalex-snapshot
DASTestBed: An Automated Benchmarking Framework for DAST Scanners with Extensible Ground Truth Modeling
inferred← citeshttps://doi.org/10.1109/ispa63168.2024.00099openalex-snapshot
AcVerifier: Cross-Domain Access Control Verification via Hybrid Static and Dynamic Analysis
inferred← citeshttps://doi.org/10.1109/itms59786.2023.10317708openalex-snapshot
Navigating Web Application Security: A Survey of Vulnerabilities and Detection Solutions
inferred← citeshttps://doi.org/10.1109/sds68531.2025.11409835openalex-snapshot
An Automated Scanner for Detecting Common Web Application Vulnerabilities with a Focus on Enhanced Performance and Security.
inferred← citeshttps://doi.org/10.1109/tr.2024.3521381openalex-snapshot
Enhancing Java Web Application Security: Injection Vulnerability Detection via Interprocedural Analysis and Deep Learning
inferred← citeshttps://doi.org/10.1109/tse.2024.3400404openalex-snapshot
SQLPsdem: A Proxy-Based Mechanism Towards Detecting, Locating and Preventing Second-Order SQL Injections
inferred← citeshttps://doi.org/10.1109/usbereit61901.2024.10583974openalex-snapshot
Explaining of Transformer-based Models for Vulnerable Function Detection
inferred← citeshttps://doi.org/10.1142/s0218194023500298openalex-snapshot
DetAC: Approach to Detect Access Control Vulnerability in Web Application Based on Sitemap Model with Global Information Representation
inferred← citeshttps://doi.org/10.11591/ijece.v14i1.pp772-781openalex-snapshot
Survey on detecting and preventing web application broken access control attacks
inferred← citeshttps://doi.org/10.23919/cisti58278.2023.10211415openalex-snapshot
IT/OT Convergence in Industry 4.0 : Risks and Analisy of the Problems
inferred← citeshttps://doi.org/10.4018/978-1-6684-6914-9.ch006openalex-snapshot
Design, Development, and Testing of Web Applications
inferred← citeshttps://doi.org/10.4018/979-8-2600-3465-1.ch006openalex-snapshot
Cybersecurity Frameworks and Risk Mitigation in IoT Ecosystems
inferred← citeshttps://doi.org/10.4236/jcc.2025.138003openalex-snapshot
Designing a Detection Model for SQL Injection Attack
inferred← citeshttps://doi.org/10.52436/1.jutif.2023.4.6.778openalex-snapshot
EFFECTIVENESS OF SECURITY THROUGH OBSCURITY METHODS TO AVOID WEB APPLICATION VULNERABILITY SCANNERS
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.