Work

Research on Java Source Code Static Analysis Based on Taint Tracking

Year: 2014

Type: article

Abstract: Java applications have proliferated rapidly in recent years, and the security issue in the source code seems to bring a great threat which cannot be ignored. SQL injection and cross-site scripting vulnerabilities, path traversal, and so on are common Java security vulnerabilities. These vulnerabilities are usually caused by improper handling of user input and we call them input validation vulnerabilities [1].In this paper, we propose a Java source code analysis method based on the taint tracking. By means of vulnerability pattern match, we keep track of the introduction of tainted data and its propagation in different contexts, leading to comprehensive and accurate test results. Actually, we have applied this method to some of the open-source Java projects. Compared to other similar software, our technique presents good feasibility and superiority.

Source: Applied Mechanics and Materials

DOI: 10.4028/www.scientific.net/amm.602-605.3846

Authors: Li Fang Han, Ting Ting Hou, Kun Lun Gao, Nan Liu, Bao Jiang Cui

Institutions: China Electric Power Research Institute, Beijing University of Posts and Telecommunications

Language: English

Topic: Web Application Security Vulnerabilities

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

Funder: National Science Foundation

OpenAlex ID: W2009176194

FWCI: 0.505

Cites: 7

Cited by: 1

Related to: 10