@inproceedings{d2f55b756671456b88a58d2dda8f9e00,
title = "Automatically fixing security vulnerabilities in Java code",
abstract = "Most kinds of security vulnerabilities in web applications can be fixed by adding appropriate sanitization methods. Finding the correct place for the sanitizers can be difficult due to complicated data and control flow. Fixing SQL injection vulnerabilities may require more complex transformations, such as replacing uses of Statement by PreparedStatement, which could include some code motion. We have developed algorithms to place sanitizers correctly, as well as to transform Statement to PreparedStatement. These have been implemented as {"}quick fixes{"} in an Eclipse plugin that works together with a commercial tool that discovers security vulnerabilities in web applications.",
keywords = "Quick fix, Security",
author = "Aharon Abadi and Ran Ettinger and Feldman, {Yishai A.} and Mati Shomrat",
year = "2011",
month = nov,
day = "22",
doi = "10.1145/2048147.2048149",
language = "English",
isbn = "9781450309424",
series = "SPLASH'11 Compilation - Proceedings of OOPSLA'11, Onward! 2011, GPCE'11, DLS'11, and SPLASH'11 Companion",
pages = "3--4",
booktitle = "SPLASH'11 Compilation - Proceedings of OOPSLA'11, Onward! 2011, GPCE'11, DLS'11, and SPLASH'11 Companion",
note = "ACM International Conference on Systems, Programming, Languages, and Applications: Software for Humanity, SPLASH'11 ; Conference date: 22-10-2011 Through 27-10-2011",
}