 | 2011 |
| 13 |  | William G. J. Halfond:
Domain and value checking of web application invocation arguments.
ASE 2011: 544-547 |
| 12 |  | William G. J. Halfond,
Shauvik Roy Choudhary,
Alessandro Orso:
Improving penetration testing through static and dynamic analysis.
Softw. Test., Verif. Reliab. 21(3): 195-214 (2011) |
| 2009 |
| 11 |  | William G. J. Halfond,
Shauvik Roy Choudhary,
Alessandro Orso:
Penetration Testing with Improved Input Vector Identification.
ICST 2009: 346-355 |
| 10 |  | William G. J. Halfond,
Saswat Anand,
Alessandro Orso:
Precise interface identification to improve testing and analysis of web applications.
ISSTA 2009: 285-296 |
| 2008 |
| 9 |  | William G. J. Halfond,
Alessandro Orso:
Automated identification of parameter mismatches in web applications.
SIGSOFT FSE 2008: 181-191 |
| 8 |  | William G. J. Halfond,
Alessandro Orso,
Pete Manolios:
WASP: Protecting Web Applications Using Positive Tainting and Syntax-Aware Evaluation.
IEEE Trans. Software Eng. 34(1): 65-81 (2008) |
| 2007 |
| 7 |  | William G. J. Halfond,
Alessandro Orso:
Improving test case generation for web applications using automated interface discovery.
ESEC/SIGSOFT FSE 2007: 145-154 |
| 6 |  | William G. J. Halfond,
Alessandro Orso:
Detection and Prevention of SQL Injection Attacks.
Malware Detection 2007: 85-109 |
| 2006 |
| 5 |  | William G. J. Halfond,
Alessandro Orso:
Command-Form Coverage for Testing Database Applications.
ASE 2006: 69-80 |
| 4 |  | William G. J. Halfond,
Alessandro Orso:
Preventing SQL injection attacks using AMNESIA.
ICSE 2006: 795-798 |
| 3 |  | William G. J. Halfond,
Alessandro Orso,
Panagiotis Manolios:
Using positive tainting and syntax-aware evaluation to counter SQL injection attacks.
SIGSOFT FSE 2006: 175-185 |
| 2005 |
| 2 |  | William G. J. Halfond,
Alessandro Orso:
AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks.
ASE 2005: 174-183 |
| 1 |  | William G. J. Halfond,
Alessandro Orso:
Combining static analysis and runtime monitoring to counter SQL-injection attacks.
ACM SIGSOFT Software Engineering Notes 30(4): 1-7 (2005) |