{"id":"W2153179003","doi":"10.1109/wcre.2006.33","title":"Insider and Ousider Threat-Sensitive SQL Injection Vulnerability Analysis in PHP","year":2006,"lang":"en","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"ca_institutions":"Polytechnique Montréal","funders":"","keywords":"Computer science; SQL injection; Insider; SQL; Computer security; Information flow; Vulnerability (computing); Static analysis; Confidentiality; Code (set theory); Control flow graph; Database; Web application; Programming language; World Wide Web; Query by Example; Search engine","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0004001813,0.00008792453,0.000150427,0.0002331708,0.0001126344,0.000120408,0.0001156544,0.0000561284,0.00001412652],"category_scores_gemma":[0.00003640977,0.00008256498,0.00004642453,0.001215341,0.00004227212,0.0003290138,0.00009780921,0.0001124733,0.000006735963],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00005255271,"about_ca_system_score_gemma":0.0000213227,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003176848,"about_ca_topic_score_gemma":0.002023515,"domain_scores_codex":[0.9989729,0.0001164952,0.0002309026,0.0004001121,0.0001332707,0.0001463494],"domain_scores_gemma":[0.9993529,0.0001783766,0.00005557348,0.0003022117,0.00008172642,0.00002923111],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.00001332568,0.0003428118,0.7164453,0.00001877595,0.0001212545,0.00001959883,0.003755101,0.02971304,0.0004293504,0.2239574,0.0004925815,0.02469146],"study_design_scores_gemma":[0.0001449055,0.00001489566,0.5993641,0.000002752846,0.00001324693,0.000008724565,0.00008290415,0.3847194,0.0008122621,0.01466887,0.00005306547,0.0001148974],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5137138,0.00002897688,0.4815165,0.0004592856,0.00006470448,0.00006393648,3.572421e-7,0.00008792923,0.004064577],"genre_scores_gemma":[0.9865979,0.000002396025,0.01301262,0.0002515383,0.0000416178,0.000003552549,0.000002372865,0.000002348538,0.00008569007],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.4728841,"threshold_uncertainty_score":0.4802466,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01523437680042562,"score_gpt":0.2587161258836503,"score_spread":0.2434817490832247,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}