{"id":"https://openalex.org/W149873063","doi":"https://doi.org/10.5555/1289280.1289294","title":"Web application security tutorial","display_name":"Web application security tutorial","publication_year":2007,"publication_date":"2007-10-01","ids":{"openalex":"https://openalex.org/W149873063","doi":"https://doi.org/10.5555/1289280.1289294","mag":"149873063"},"language":"en","primary_location":{"id":"mag:149873063","is_oa":false,"landing_page_url":"https://dl.acm.org/doi/10.5555/1289280.1289294","pdf_url":null,"source":{"id":"https://openalex.org/S56112914","display_name":"Journal of computing sciences in colleges","issn_l":"1937-4763","issn":["1937-4763","1937-4771"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4361727485","host_organization_name":"Consortium for Computing Sciences in Colleges","host_organization_lineage":["https://openalex.org/P4361727485"],"host_organization_lineage_names":["Consortium for Computing Sciences in Colleges"],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Journal of computing sciences in colleges","raw_type":null},"type":"article","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073576608","display_name":"James Walden","orcid":null},"institutions":[{"id":"https://openalex.org/I168416876","display_name":"Northern Kentucky University","ror":"https://ror.org/01k44g025","country_code":"US","type":"education","lineage":["https://openalex.org/I168416876"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"James Walden","raw_affiliation_strings":["Northern Kentucky University, Highland Heights, KY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northern Kentucky University, Highland Heights, KY","institution_ids":["https://openalex.org/I168416876"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001656130","display_name":"Charles E. Frank","orcid":null},"institutions":[{"id":"https://openalex.org/I168416876","display_name":"Northern Kentucky University","ror":"https://ror.org/01k44g025","country_code":"US","type":"education","lineage":["https://openalex.org/I168416876"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Charles E. Frank","raw_affiliation_strings":["Northern Kentucky University, Highland Heights, KY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northern Kentucky University, Highland Heights, KY","institution_ids":["https://openalex.org/I168416876"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I168416876"],"apc_list":null,"apc_paid":null,"fwci":1.6468,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.8826934,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"1","first_page":"77","last_page":"78"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9487000107765198,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9470999836921692,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8482155799865723},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.8257706165313721},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.7734784483909607},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.6955276727676392},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.6376742124557495},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.6222549080848694},{"id":"https://openalex.org/keywords/sql-injection","display_name":"SQL injection","score":0.6185083985328674},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6180868744850159},{"id":"https://openalex.org/keywords/web-application-development","display_name":"Web application development","score":0.5667890906333923},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.5580421686172485},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.5245033502578735},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.5210889577865601},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5011963844299316},{"id":"https://openalex.org/keywords/web-modeling","display_name":"Web modeling","score":0.4233269691467285},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.36675673723220825},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.3263188302516937},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2774643898010254},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.24645346403121948},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.17510303854942322},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.0879998505115509}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8482155799865723},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.8257706165313721},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.7734784483909607},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.6955276727676392},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.6376742124557495},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.6222549080848694},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.6185083985328674},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6180868744850159},{"id":"https://openalex.org/C120927855","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application development","level":4,"score":0.5667890906333923},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.5580421686172485},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.5245033502578735},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.5210889577865601},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5011963844299316},{"id":"https://openalex.org/C130436687","wikidata":"https://www.wikidata.org/wiki/Q7978591","display_name":"Web modeling","level":3,"score":0.4233269691467285},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.36675673723220825},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.3263188302516937},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2774643898010254},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.24645346403121948},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.17510303854942322},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0879998505115509},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.0},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:149873063","is_oa":false,"landing_page_url":"https://dl.acm.org/doi/10.5555/1289280.1289294","pdf_url":null,"source":{"id":"https://openalex.org/S56112914","display_name":"Journal of computing sciences in colleges","issn_l":"1937-4763","issn":["1937-4763","1937-4771"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4361727485","host_organization_name":"Consortium for Computing Sciences in Colleges","host_organization_lineage":["https://openalex.org/P4361727485"],"host_organization_lineage_names":["Consortium for Computing Sciences in Colleges"],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"Journal of computing sciences in colleges","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2909383315","https://openalex.org/W2397476862","https://openalex.org/W2132791332","https://openalex.org/W2188829598","https://openalex.org/W2623440697","https://openalex.org/W2502579307","https://openalex.org/W2557302400","https://openalex.org/W3057740654","https://openalex.org/W3082847478","https://openalex.org/W2181766705","https://openalex.org/W2014603217","https://openalex.org/W3168881492","https://openalex.org/W2097546301","https://openalex.org/W2552989666","https://openalex.org/W2779634960","https://openalex.org/W2791970934","https://openalex.org/W3084505923","https://openalex.org/W2320900414","https://openalex.org/W2184159580","https://openalex.org/W3143737233"],"abstract_inverted_index":{"Web":[0],"application":[1,48,70,127,169],"development":[2],"is":[3,43,152],"a":[4],"large":[5],"and":[6,23,39,61,92,129,147,176],"growing":[7],"area":[8],"of":[9,104,133],"employment":[10],"for":[11],"computer":[12],"science":[13],"graduates.":[14],"While":[15],"our":[16],"graduates":[17],"have":[18,34],"learned":[19,35],"how":[20,36,122,140],"to":[21,37,77,141,145,154,166],"design":[22,38,146],"implement":[24,40],"web":[25,47,69,100,126,168,174],"applications":[26,79],"that":[27,42,151,162],"work":[28],"correctly":[29],"with":[30],"expected":[31],"inputs,":[32],"few":[33],"software":[41,55],"secure":[44,149],"against":[45],"common":[46,51,125],"vulnerabilities.\r\n\r\nThe":[49],"most":[50],"security":[52,90,170,178],"vulnerabilities":[53,73,105,128],"in":[54],"are":[56,68],"cross-site":[57],"scripting,":[58],"SQL":[59],"injection,":[60],"PHP":[62],"include":[63],"bugs.":[64],"All":[65],"three":[66],"problems":[67],"vulnerabilities.":[71],"These":[72],"can":[74,164],"allow":[75],"attackers":[76,123],"access":[78],"without":[80],"permission,":[81],"obtain":[82],"sensitive":[83],"information":[84,177],"like":[85],"credit":[86],"card":[87],"or":[88,95],"social":[89],"numbers,":[91],"steal":[93],"merchandise":[94],"transfer":[96],"funds":[97],"from":[98],"commercial":[99],"sites.":[101],"The":[102,157],"number":[103],"discovered":[106],"each":[107],"year":[108],"has":[109],"increased":[110],"at":[111],"an":[112],"exponential":[113],"rate":[114],"since":[115],"2000.\r\n\r\nIn":[116],"this":[117],"tutorial,":[118],"we":[119],"will":[120,137,159],"describe":[121],"exploit":[124],"show":[130,138],"live":[131],"demonstrations":[132],"such":[134],"attacks.":[135,156],"We":[136],"participants":[139,163],"teach":[142],"their":[143],"students":[144],"write":[148],"code":[150],"immune":[153],"these":[155],"tutorial":[158],"present":[160],"resources":[161],"use":[165],"incorporate":[167],"into":[171],"programming,":[172],"database,":[173],"development,":[175],"courses.":[179]},"counts_by_year":[],"updated_date":"2025-10-10T17:16:08.811792","created_date":"2025-10-10T00:00:00"}