Understanding and detecting server-side request races in web applications

Zhengyi Qiu, Shudi Shao, Qi Zhao, Guoliang Jin

Abstract

Modern web sites often run web applications on the server to handle HTTP requests from users and generate dynamic responses. Due to their concurrent nature, web applications are vulnerable to server-side request races. The problem becomes more severe with the ever-increasing popularity of web applications.

BibTeX

@inproceedings{Qiu-al:FSE21,
  author    = {Zhengyi Qiu and
               Shudi Shao and
               Qi Zhao and
               Guoliang Jin},
  title     = {Understanding and detecting server-side request races in web applications},
  booktitle = {{ESEC/SIGSOFT} {FSE}},
  pages     = {842--854},
  publisher = {{ACM}},
  year      = {2021},
}

Understanding and detecting server-side request races in web applications

Abstract

Related papers