I-Corps: Automated Web Application Analysis
I-Corps: Automated Web Application Analysis
批准号:
1248717
负责人:
Venkat Venkatakrishnan
金额:
$5.0万
依托单位国家:
美国
项目类别:
Standard Grant
财政年份:
2012
资助国家:
美国
项目状态:
已结题
起止时间:
2012-07-01 至 2013-12-31
中文摘要
该项目将解决Web应用程序中存在的参数篡改安全漏洞问题。目前的市场工具似乎不具备自动检测这些安全漏洞的能力。参数篡改漏洞在商业和开源Web应用程序中非常猖獗。此外,事实证明,这些漏洞可能会被恶意行为者利用来获取经济利益。值得注意的是,建议的解决方案是独一无二的,因为它不仅提供了检测网络安全的功能,还提供了通过更正代码来修复问题的功能。如果部署成功,这一努力有望以既强大又具有成本效益的方式应对新出现的安全威胁。
英文摘要
This project will address the presence of parameter-tampering security holes in web applications. Current market tools do not appear to have the capabilities to detect these security holes in an automatic fashion. Parameter tampering vulnerabilities are rampant in commercial as well as open source web applications. Further, it has been shown that these vulnerabilities could be exploited by malicious actors to make financial gains. It is important to note that the proposed solution is unique in the sense that it offers not only to detect the web security, but also to fix the issue by correcting the code. If successfully deployed, this effort holds the promise of addressing an emerging security threat in a manner that is both robust and cost-effective.
期刊论文(0)
专著(0)
科研奖励(0)
会议论文
SaTC: CORE: Medium: Collaborative: RADAR: Real-time Advanced Detection and Attack Reconstruction
-
批准号:1918542
-
项目类别:Standard Grant
-
资助金额:$61.2万
-
财政年份:2019
-
负责人:Venkat Venkatakrishnan
-
依托单位:
TWC: TTP Option: Medium: Collaborative: MALDIVES: Developing a Comprehensive Understanding of Malware Delivery Mechanisms
-
批准号:1514472
-
项目类别:Standard Grant
-
资助金额:$55.0万
-
财政年份:2015
-
负责人:Venkat Venkatakrishnan
-
依托单位:
SFS Scholarships in Cybersecurity and Information Assurance
-
批准号:1241685
-
项目类别:Continuing Grant
-
资助金额:$150.53万
-
财政年份:2012
-
负责人:Venkat Venkatakrishnan
-
依托单位:
IGERT: Electronic Security and Privacy: Technological, Human, Enterprise and Legal Considerations
-
批准号:1069311
-
项目类别:Continuing Grant
-
资助金额:$126.0万
-
财政年份:2011
-
负责人:Venkat Venkatakrishnan
-
依托单位:
TC: Medium: Collaborative Research: Securing Web Advertisements: Fixing the Short-term Crisis and Addressing Long-term Challenges
-
批准号:1065537
-
项目类别:Standard Grant
-
资助金额:$61.58万
-
财政年份:2011
-
负责人:Venkat Venkatakrishnan
-
依托单位:
A Series of Workshops on Security in Emerging Areas
-
批准号:1139947
-
项目类别:Standard Grant
-
资助金额:$2.94万
-
财政年份:2011
-
负责人:Venkat Venkatakrishnan
-
依托单位:
CAREER: A Framework for Preventing Web-based Attacks
-
批准号:0845894
-
项目类别:Standard Grant
-
资助金额:$40.5万
-
财政年份:2009
-
负责人:Venkat Venkatakrishnan
-
依托单位:
TC: A U.S.-France Collaborative Symposium of Young Engineering Scientists (YESS 2009)
-
批准号:0946768
-
项目类别:Standard Grant
-
资助金额:$4.99万
-
财政年份:2009
-
负责人:Venkat Venkatakrishnan
-
依托单位:
TC: Small: Keeping Jack in the Box: Confining the Role of Untrusted Inputs in Web Scenarios
-
批准号:0917229
-
项目类别:Standard Grant
-
资助金额:$45.0万
-
财政年份:2009
-
负责人:Venkat Venkatakrishnan
-
依托单位:
CT-ER : Runtime Techniques for protecting confidential data in large scale software
-
批准号:0716584
-
项目类别:Continuing Grant
-
资助金额:$0.0万
-
财政年份:2007
-
负责人:Venkat Venkatakrishnan
-
依托单位:
海外基金