InjectionCop

The importance of security in the field of software development cannot be emphasized enough. Already known vulnerabilities like all kinds of injections are still very common. InjectionCop is a framework that helps to address cross cutting security concerns by adding custom type qualifiers to the type system of C sharp. Type qualifiers can be used to boost the expressiveness of the source code and define security requirements that are executable. Furthermore, requirements that are not met indicate vulnerabilities and are detected by static analysis of the assembly. InjectionCop is targeted to support and improve the development process by reducing the risk to introduce programming errors that affect security.

Autorentext

Michael Racz received his master degree in Software Engineering and Internet Computing from the Vienna University of Technology. During his studies, he focused on application security and theory of programming languages. Currently, he is working as a NET developer.