The Essence of Command Injection attacks in Web Applications”, (2006)

by Z Su, G Wassermann
Venue:33rd ACMSIGPLAN, SIGACT Symposium on Principles of Programming Languages,