Path sensitive static analysis of taint-style vulnerabilities in PHP code

This paper presents a novel path-sensitive static analysis method for detecting taint-style vulnerabilities in PHP code. The new method includes three key, the first of which is path searching during a basic block, the second is path searching between blocks, and the third is path searching crossing function call. A tool name POSE implements the new method and the testing results show the method is valid for taint-style vulnerabilities in PHP code.