Anota: Identifying Business Logic Vulnerabilities via Annotation-Based Sanitization

Read full text
Authors: Meng Wang, Philipp Görz, Joschua Schilling, Keno Hassler, Liwei Guo, Thorsten Holz, Ali Abbasi
Cited by: 1

Abstract

SQL Injection DataBase Witcher [12], Atropos [14] 4 Cross-Site Request Forgery (CSRF) System Call WebFuzzAuto [20] 5 Path Traversal System Call Atropos [14], PHUZZ [25] 6 Out-of-bounds Read Memory ASan [2] 7 OS Command Injection System Call Witcher [12], Atropos [14] 8 Use After Free Memory ASan [2] 9 Missing Authorization Object Access/Code Exec. 10 Unrestricted Upload of File System Call Atropos [14], UFuzzer [18], URadar [26] 11 Code Injection System Call/Data Flow 12 Improper Input Validation System Call Witcher [12], Atropos [14] 13 Command Injection System Call Witcher [12], Atropos

Fields of Study & Subjects

Web Application Security Vulnerabilities Security and Verification in Computing Advanced Malware Detection Techniques

Publication details

Journal / source
Proceedings 2026 Network and Distributed System Security Symposium
Publisher
Internet Society
Publication date
1 January 2026