Anota: Identifying Business Logic Vulnerabilities via Annotation-Based Sanitization
Abstract
SQL Injection DataBase Witcher [12], Atropos [14] 4 Cross-Site Request Forgery (CSRF) System Call WebFuzzAuto [20] 5 Path Traversal System Call Atropos [14], PHUZZ [25] 6 Out-of-bounds Read Memory ASan [2] 7 OS Command Injection System Call Witcher [12], Atropos [14] 8 Use After Free Memory ASan [2] 9 Missing Authorization Object Access/Code Exec. 10 Unrestricted Upload of File System Call Atropos [14], UFuzzer [18], URadar [26] 11 Code Injection System Call/Data Flow 12 Improper Input Validation System Call Witcher [12], Atropos [14] 13 Command Injection System Call Witcher [12], Atropos
Fields of Study & Subjects
Web Application Security Vulnerabilities
Security and Verification in Computing
Advanced Malware Detection Techniques
Publication details
- Journal / source
- Proceedings 2026 Network and Distributed System Security Symposium
- Publisher
- Internet Society
- Publication date
- 1 January 2026