{"id":"https://openalex.org/W4249792249","doi":"https://doi.org/10.1145/775173.775174","title":"Web application security assessment by fault injection and behavior monitoring","display_name":"Web application security assessment by fault injection and behavior monitoring","publication_year":2003,"publication_date":"2003-01-01","ids":{"openalex":"https://openalex.org/W4249792249","doi":"https://doi.org/10.1145/775173.775174"},"language":"en","primary_location":{"id":"doi:10.1145/775173.775174","doi":"https://doi.org/10.1145/775173.775174","is_oa":false,"landing_page_url":"https://doi.org/10.1145/775173.775174","pdf_url":null,"source":{"id":"https://openalex.org/S7407088480","display_name":"International World Wide Web Conference (WWW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the twelfth international conference on World Wide Web - WWW '03","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111654629","display_name":"Yao\u2010Wen Huang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I84653119","display_name":"Academia Sinica","ror":"https://ror.org/05bxb3784","country_code":"TW","type":"facility","lineage":["https://openalex.org/I84653119"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Yao-Wen Huang","raw_affiliation_strings":["Academia Sinica, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Academia Sinica, Taipei, Taiwan","institution_ids":["https://openalex.org/I84653119"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Shih-Kun Huang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I84653119","display_name":"Academia Sinica","ror":"https://ror.org/05bxb3784","country_code":"TW","type":"facility","lineage":["https://openalex.org/I84653119"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Shih-Kun Huang","raw_affiliation_strings":["Academia Sinica, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Academia Sinica, Taipei, Taiwan","institution_ids":["https://openalex.org/I84653119"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Tsung-Po Lin","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I84653119","display_name":"Academia Sinica","ror":"https://ror.org/05bxb3784","country_code":"TW","type":"facility","lineage":["https://openalex.org/I84653119"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Tsung-Po Lin","raw_affiliation_strings":["Academia Sinica, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Academia Sinica, Taipei, Taiwan","institution_ids":["https://openalex.org/I84653119"]}]},{"author_position":"last","author":{"id":null,"display_name":"Chung-Hung Tsai","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chung-Hung Tsai","raw_affiliation_strings":["National Chiao Tung University, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Chiao Tung University, Taiwan","institution_ids":["https://openalex.org/I148366613"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.22,"has_fulltext":false,"cited_by_count":58,"citation_normalized_percentile":{"value":0.44876325,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.0035000001080334187,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12601","display_name":"Web Applications and Data Management","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":0.8429999947547913},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"vulnerability assessment","score":0.7689999938011169},{"id":"https://openalex.org/keywords/fault-injection","display_name":"fault injection","score":0.9860000014305115},{"id":"https://openalex.org/keywords/behavior-monitoring","display_name":"behavioral monitoring","score":0.9819999933242798},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.9390000104904175},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"cross-site scripting","score":1.0},{"id":"https://openalex.org/keywords/dynamic-analysis","display_name":"dynamic analysis","score":0.7749999761581421},{"id":"https://openalex.org/keywords/black-box-testing","display_name":"black-box testing","score":0.9980000257492065},{"id":"https://openalex.org/keywords/waves","display_name":"waves","score":0.6019999980926514}],"concepts":[{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.8112412095069885},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7692316174507141},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.7561395168304443},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.7109182476997375},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.6948034167289734},{"id":"https://openalex.org/C42989059","wikidata":"https://www.wikidata.org/wiki/Q7978626","display_name":"Web testing","level":5,"score":0.6525709629058838},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.6095327734947205},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.5767661333084106},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.5338488817214966},{"id":"https://openalex.org/C130436687","wikidata":"https://www.wikidata.org/wiki/Q7978591","display_name":"Web modeling","level":3,"score":0.5117321014404297},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.473979651927948},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.41871362924575806},{"id":"https://openalex.org/C97200028","wikidata":"https://www.wikidata.org/wiki/Q1196135","display_name":"Web engineering","level":5,"score":0.4121095836162567},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3768007159233093},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.375929057598114},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.3603367209434509},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.2943449318408966},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2868211269378662},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.18620344996452332},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15780019760131836},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.10252547264099121},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.0},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/775173.775174","doi":"https://doi.org/10.1145/775173.775174","is_oa":false,"landing_page_url":"https://doi.org/10.1145/775173.775174","pdf_url":null,"source":{"id":"https://openalex.org/S7407088480","display_name":"International World Wide Web Conference (WWW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the twelfth international conference on World Wide Web - WWW '03","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2066237335","https://openalex.org/W2113346785","https://openalex.org/W2181283584","https://openalex.org/W2047360477","https://openalex.org/W105735761","https://openalex.org/W1978584859","https://openalex.org/W3189007635","https://openalex.org/W2521071348","https://openalex.org/W4390045794","https://openalex.org/W2767768654"],"abstract_inverted_index":{"As":[0],"a":[1,15,78,109,140],"large":[2],"and":[3,70,90,93,117,127],"complex":[4],"application":[5,48,146],"platform,":[6],"the":[7,44,75,113],"World":[8],"Wide":[9],"Web":[10,23,47,61,101,114,145],"is":[11,139],"capable":[12],"of":[13,18,46,77,80],"delivering":[14],"broad":[16],"range":[17],"sophisticated":[19],"applications.":[20,102],"However,":[21],"many":[22],"applications":[24,62],"go":[25],"through":[26],"rapid":[27],"development":[28],"phases":[29],"with":[30,131],"extremely":[31],"short":[32],"turnaround":[33],"time,":[34],"making":[35],"it":[36,130],"difficult":[37],"to":[38,54,64,100,107,128],"eliminate":[39],"vulnerabilities.":[40],"Here":[41],"we":[42,111],"analyze":[43],"design":[45],"security":[49],"assessment":[50],"mechanisms":[51,95],"in":[52],"order":[53],"identify":[55],"poor":[56],"coding":[57],"practices":[58],"that":[59,137],"render":[60],"vulnerable":[63],"attacks":[65],"such":[66],"as":[67],"SQL":[68],"injection":[69],"cross-site":[71],"scripting.":[72],"We":[73],"describe":[74],"use":[76],"number":[79],"software-testing":[81],"techniques":[82,99],"(including":[83],"dynamic":[84],"analysis,":[85],"black-box":[86],"testing,":[87],"fault":[88],"injection,":[89],"behavior":[91],"monitoring),":[92],"suggest":[94],"for":[96,143],"applying":[97],"these":[98],"Real-world":[103],"situations":[104],"are":[105],"used":[106],"test":[108],"tool":[110],"named":[112],"Application":[115],"Vulnerability":[116],"Error":[118],"Scanner":[119],"(WAVES,":[120],"an":[121],"open-source":[122],"project":[123],"available":[124],"at":[125],"http://waves.sourceforge.net)":[126],"compare":[129],"other":[132],"tools.":[133],"Our":[134],"results":[135],"show":[136],"WAVES":[138],"feasible":[141],"platform":[142],"assessing":[144],"security.":[147]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":11}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2022-05-12T00:00:00"}