Distributed Systems Group

Homepage About Us People Research Teaching Services

Nenad Jovanovic

Since August 2007, my work at the Secure Systems Lab and the Distributed Systems Group is over. I will defend my PhD thesis in October 2007, so wish me luck :)

General Information

Projects

Publications

• Web Application Security (PhD Thesis).
  Nenad Jovanovic
  [Download]
• Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis.
  Philipp Vogt, Florian Nentwich, Nenad Jovanovic, Christopher Kruegel, Engin Kirda, and Giovanni Vigna.
  Network and Distributed System Security Symposium (NDSS).
  San Diego, CA, USA, February 2007.
  [Download]
• Preventing Cross Site Request Forgery Attacks.
  Nenad Jovanovic, Engin Kirda, and Christopher Kruegel.
  IEEE International Conference on Security and Privacy in Communication Networks (SecureComm).
  Baltimore, MD, USA, August 2006.
  [Download] [Technical Report]
• Precise Alias Analysis for Static Detection of Web Application Vulnerabilities.
  Nenad Jovanovic, Christopher Kruegel, and Engin Kirda.
  ACM SIGPLAN Workshop on Programming Languages and Analysis for Security.
  Ottawa, Canada, June 2006.
  [Download]
• Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper).
  Nenad Jovanovic, Christopher Kruegel, and Engin Kirda.
  2006 IEEE Symposium on Security and Privacy.
  Oakland, CA, USA, May 2006.
  [Download] [Technical Report]
• SecuBat: A Web Vulnerability Scanner.
  Stefan Kals, Engin Kirda, Christopher Kruegel, and Nenad Jovanovic.
  The 15th International World Wide Web Conference (WWW 2006).
  Edinburgh, Scotland, May 2006.
  [Download]
• Noxes: A Client-Side Solution for Mitigating Cross Site Scripting Attacks.
  Engin Kirda, Christopher Kruegel, Giovanni Vigna, and Nenad Jovanovic.
  The 21st ACM Symposium on Applied Computing (SAC 2006), Security Track.
  Dijon, France, April 2006.
  [Download]
• Master's Thesis (in German):
  Entwicklung eines webbasierten Institutsinformationssystems unter besonderer Berücksichtigung der Websicherheit.
  Technical University of Vienna, 2004.
  [Download]

Expertise

Various Stuff

• DFA Beginner's Kit: A collection of resources introducing to data flow analysis.
• Here is an FAQ section for DSG newbies.
• Some words of wisdom (not by me, of course).

Distributed Systems Group, Technical University of Vienna, Argentinierstrasse 8 / 184-1, A-1040 Vienna / Austria
Copyright 2005 Nenad Jovanovic. All Rights Reserved.