Abstract:This paper concerns about logic vulnerabilities that result from faulty logic of a web application. Logic vulnerabilities typically accompany with the exposure of unexpected functionalities and lead to the bypass of the intended constraints. From a semantic perspective, logic vulnerabilities occur when mistakes arise in the control flows guarding the processes of invoking critical functionalities. In this paper, we propose the first lightweight static analysis approach to automatically detect logic vulnerabilities in Java web applications. Logic errors in our approach are characterized as erroneous invocations of functionalities. Program‐slicing technique has been leveraged to capture the processes of invoking critical functionalities. A back‐tracing algorithm is originally designed to extract control flows guarding functionality‐invocation processes. Finally, logic vulnerability detection is transformed into mining abnormal functionality‐invocation processes in a cluster of similar ones by comparing these processes' control flows. We implemented our approach in a prototype tool named logic vulnerability detector and evaluated it on seven real‐world applications scaled from thousands to million lines of code. The evaluation results show that our approach achieves bigger coverage with acceptable cost and better scalability than previous approaches. Copyright © 2013 John Wiley & Sons, Ltd. In this paper, we propose the first lightweight static analysis approach to automatically detect logic vulnerabilitiesin Java web applications. We implemented our approach using program‐slicing technique and a back‐tracingextracting algorithm for control flow, and evaluated it on seven real‐world applications scaled from thousands to million lines of code. The evaluation results show that our approach achieves bigger coverage with acceptable cost and better scalability than previous approaches.

Jasmine: Scale Up JavaScript Static Security Analysis with Computation-based Semantic Explanation

Supporting secure programming in web applications through interactive static analysis.

Characterizing JavaScript Security Code Smells

Static detection of logic vulnerabilities in Java web applications

LLM-Assisted Static Analysis for Detecting Security Vulnerabilities

JStill: mostly static detection of obfuscated malicious JavaScript code

JStrong: Malicious JavaScript detection based on code semantic representation and graph neural network

SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities

A Security Study about Electron Applications and a Programming Methodology to Tame DOM Functionalities.

Malicious JavaScript Code Detection Based on Hybrid Analysis

Semantics and Security Issues in JavaScript

Static Detection of Control-Flow-Related Vulnerabilities Using Graph Embedding

Automated Static Warning Identification via Path-based Semantic Representation

Jasmine: A Tool for Model-Driven Runtime Verification with UML Behavioral Models

Towards Vulnerability Discovery Using Staged Program Analysis

Evaluating C/C++ Vulnerability Detectability of Query-Based Static Application Security Testing Tools

Towards Better Semantics Exploration for Browser Fuzzing

Comprehensive Evaluation of Static Analysis Tools for Their Performance in Finding Vulnerabilities in Java Code

A Hybrid Approach to Detecting Security Defects in Programs

Ontology Model-Based Static Analysis Of Security Vulnerabilities

JFinder: A Novel Architecture for Java Vulnerability Identification Based Quad Self-Attention and Pre-training Mechanism