{"id":"W2153179003","doi":"10.1109/wcre.2006.33","title":"Insider and Ousider Threat-Sensitive SQL Injection Vulnerability Analysis in PHP","year":2006,"lang":"en","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"ca_institutions":"Polytechnique Montréal","funders":"","keywords":"Computer science; SQL injection; Insider; SQL; Computer security; Information flow; Vulnerability (computing); Static analysis; Confidentiality; Code (set theory); Control flow graph; Database; Web application; Programming language; World Wide Web; Query by Example; Search engine","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001188304,0.0004752161,0.0003549705,0.001596427,0.000440834,0.0009214656,0.0005009376,0.0004459911,0.001284489],"category_scores_gemma":[0.005048266,0.0003528881,0.001097395,0.0006713155,0.001346369,0.001898496,0.0008693761,0.0006057456,0.0001872048],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0009040449,"about_ca_system_score_gemma":0.001007874,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003054776,"about_ca_topic_score_gemma":0.002484598,"domain_scores_codex":[0.998879,0.0002878537,0.00007495325,0.000187533,0.0004010461,0.0001696606],"domain_scores_gemma":[0.9966645,0.002088881,0.0003297813,0.000505076,0.0003609949,0.0000508433],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0008958049,0.0002617672,0.04020284,0.0005810164,0.0001840818,0.001529812,0.001429409,0.3064726,0.1222219,0.1787075,0.003567884,0.3439454],"study_design_scores_gemma":[0.0000185483,0.0001026418,0.003564332,0.00003503991,0.0000685066,0.0003334221,0.00008600302,0.8738739,0.05072769,0.06949214,0.00166039,0.00003741964],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1656907,0.0001073042,0.8269656,0.0002295234,0.00001605024,0.0001191875,0.0001529237,0.003872408,0.002846351],"genre_scores_gemma":[0.8750768,0.00008724851,0.1230124,0.00006675707,0.00001814534,0.00004870424,0.0001486511,0.0001900336,0.001351187],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.003054776,"threshold_uncertainty_score":0.006559312,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01523437680042562,"score_gpt":0.2587161258836503,"score_spread":0.2434817490832247,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}