{"id":"W3124662913","doi":"10.1109/icdis50059.2020.00012","title":"An Analysis of Effectiveness of Black-Box Web Application Scanners in Detection of Stored SQL Injection and Stored XSS Vulnerabilities","year":2020,"lang":"en","type":"article","venue":"","topic":"Web Application Security Vulnerabilities","field":"Computer Science","cited_by":11,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University of Edmonton","funders":"","keywords":"Cross-site scripting; Computer science; SQL injection; Scripting language; Black box; Web application; Database; JavaScript; SQL; Testbed; World Wide Web; Operating system; Web page; Web application security; Artificial intelligence; Web development; Query by Example","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001004047,0.0001411235,0.0005156353,0.0005618309,0.00003532734,0.00002058932,0.0003651748,0.0000981164,0.00000409629],"category_scores_gemma":[0.0001003688,0.0001478903,0.00009259562,0.002374676,0.000275104,0.0005113357,0.00008341679,0.0001087241,4.683621e-7],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00009912782,"about_ca_system_score_gemma":0.00007169813,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001767188,"about_ca_topic_score_gemma":0.0008387174,"domain_scores_codex":[0.9979591,0.0005205664,0.0005672888,0.000509945,0.0003182146,0.000124845],"domain_scores_gemma":[0.9983188,0.0004062467,0.000318079,0.0005626413,0.0003165741,0.00007766553],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0002418438,0.0002958026,0.08417708,0.0008150616,0.0002008239,1.187197e-7,0.01104982,0.05176779,0.8167239,0.02678382,0.00000149997,0.007942449],"study_design_scores_gemma":[0.0004863423,0.0003937017,0.1723868,0.00001680662,0.00007495454,4.074533e-7,0.002067817,0.5749432,0.2482964,0.00117511,0.000009207228,0.0001493092],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6919355,0.00002658166,0.3074985,0.00004212615,0.0000165148,0.0003486921,0.00001100451,0.00005124968,0.0000698255],"genre_scores_gemma":[0.9979424,0.000006822234,0.00192023,0.00001527344,0.00001126045,0.00008076326,0.00001291967,0.000008019227,0.000002312815],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.5684275,"threshold_uncertainty_score":0.6030793,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.009062021449745111,"score_gpt":0.2501606827558739,"score_spread":0.2410986613061288,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}