Name
Abstract | ||
|---|---|---|
This work presents an empirical property-based model to describe web-based vulnerability. We define a web application using a new descriptive model with pre-condition, behavior, entity and communication property sets. The Vulnerable Property Relationship Graph (VPRG) defines a vulnerability as vulnerable properties in application with relations to other properties in cause- and consequence-relationships. The Vulnerable Property Relationship Matrix (VPRM) is used to quantify the existence vulnerability and to measure its impact according to the relations of vulnerable properties to other properties in execution of the web application. A severity score calculation is proposed based on VPRM: the vulnerability severity score is typically the sum of consequence as a result of state changes of every evolving property in the vulnerable property relationship model. The prototype model is applied to a case study involving specified web vulnerabilities. |
Year | DOI | Venue |
|---|---|---|
2009 | 10.1109/APSCC.2009.5394144 | APSCC |
Keywords | Field | DocType |
Internet,graph theory,security of data,Web-based vulnerability,cause-consequence-relationships,empirical property-based model,severity score calculation,vulnerable property relationship graph,vulnerable property relationship model,severity score,vulnerable property relationship graph (VPRG),vulnerable property relationship matrix (VPRM),web application vulnerability | Graph theory,Data mining,Graph,Computer science,Vulnerability assessment,Web application,The Internet,Vulnerability | Conference |
Citations | PageRank | References |
1 | 0.39 | 1 |
Authors | ||
4 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Ha-Thanh Le | 1 | 7 | 3.07 |
| Deepak Subramanian | 2 | 24 | 4.55 |
| Wen-Jing Hsu | 3 | 415 | 42.77 |
| Peter Kok Keong Loh | 4 | 33 | 5.65 |