The Essence of Command Injection Attacks in Web Applications (2006)

by Z Su, G Wassermann
Venue:In The 33rd Annual Symposium on Principles of Programming Languages (POPL 2006