Leaderboards/Web Application Security Vulnerabilities

Web Application Security Vulnerabilities

Last updated July 7, 2026

Rising Stars

New and hot

Rising Stars Researchers

1
Hazim Hanif
University of Malaya
2
Maha Alghawazi
King Abdulaziz University
3
Simon Applebaum
University of Liverpool
4
Ruian Duan
Palo Alto Networks (United States)
5
Esra Altulaihan
King Faisal University
6
Emanuele Iannone
Universität Hamburg
7
Ignacio Samuel Crespo-Martínez
Universidad de León
8
Saad Ullah
Unknown
9
Benjamin Eriksson
Chalmers University of Technology
10
Moumita Das Purba
University of North Carolina at Charlotte

Rising Stars Papers

1
Anomaly Detection IDS for Detecting DoS Attacks in IoT Networks Based on Machine Learning Algorithms
Sensors|2024
170 cit.
2
LLMs Cannot Reliably Identify and Reason About Security Vulnerabilities (Yet?): A Comprehensive Evaluation, Framework, and Benchmarks
Unknown Journal|2024
83 cit.
3
Early and Realistic Exploitability Prediction of Just-Disclosed Software Vulnerabilities: How Reliable Can It Be?
ACM Transactions on Software Engineering and Methodology|2024
14 cit.
4
Towards Automated and Explainable Threat Hunting with Generative AI
Unknown Journal|2025
1 cit.
5
The Richer Representation Fallacy: Are We Just Adding Noise to LLM-based Software Vulnerability Detectors?
Unknown Journal|2025
0 cit.

Emerging Leaders

Gaining momentum

Emerging Leaders Researchers

1
Jie Hu
Zhuhai Hospital of Integrated Traditional Chinese and Western Medicine
2
Alexandros Kapravelos
University of California, Santa Barbara
3
Christian Stransky
Leibniz University Hannover
4
Eduardo Benavides-Astudillo
Universidad de las Fuerzas Armadas ESPE
5
Suaad Alarifi
King Abdulaziz University
6
Rikus Bruwer
Stellenbosch University
7
Yasmeen Rashidi
Umm al-Qura University
8
Pooja Chaudhary
Institute of Management Technology
9
Marina Polishchuk
Microsoft Research (United Kingdom)
10
Fabian Yamaguchi
University of Göttingen

Emerging Leaders Papers

1
Detection of SQL Injection Attack Using Machine Learning Techniques: A Systematic Literature Review
Journal of Cybersecurity and Privacy|2022
115 cit.
2
A Phishing-Attack-Detection Model Using Natural Language Processing and Deep Learning
Applied Sciences|2023
54 cit.
3
Deep Learning Architecture for Detecting SQL Injection Attacks Based on RNN Autoencoder Model
Mathematics|2023
35 cit.
4
Dynamic multiphase DDoS attack identification and mitigation framework to secure SDN-based fog-empowered consumer IoT Networks
Computers & Electrical Engineering|2025
24 cit.
5
27 Years and 81 Million Opportunities Later: Investigating the Use of Email Encryption for an Entire University
2022 IEEE Symposium on Security and Privacy (SP)|2022
19 cit.
6
Implementing attack detection system using filter-based feature selection methods for fog-enabled IoT networks
Telecommunication Systems|2022
17 cit.
7
Securing heterogeneous embedded devices against XSS attack in intelligent IoT system
Computers & Security|2022
12 cit.
8
Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications
Unknown Journal|2022
12 cit.
9
Automatic Discovery of Emerging Browser Fingerprinting Techniques
Unknown Journal|2023
10 cit.
10
Adaptive cross-site scripting attack detection framework for smart devices security using intelligent filters and attack ontology
Soft Computing|2022
9 cit.

Current Senior Leaders

Established & currently active

Current Senior Leaders Researchers

1
Dawn Song
University of California, Berkeley
2
Alessandro Orso
Georgia Institute of Technology
3
Giovanni Vigna
University of California, Santa Barbara
4
David Wagner
University of New Brunswick
5
Engin Kirda
EURECOM
6
Zhendong Su
ETH Zurich
7
Michael D. Ernst
University of Washington
8
V. N. Venkatakrishnan
University of Illinois Chicago
9
Marco Vieira
University of North Carolina at Charlotte
10
Benjamin Livshits
Imperial College London

Current Senior Leaders Papers

1
Provable data possession at untrusted stores
Unknown Journal|2007
2.7k cit.
2
Robust Physical-World Attacks on Deep Learning Visual Classification
Unknown Journal|2018
2.1k cit.
3
Adversarial Examples Are Not Easily Detected
Unknown Journal|2017
1.4k cit.
4
Model-Contrastive Federated Learning
Unknown Journal|2021
1.4k cit.
5
Defects4J: a database of existing faults to enable controlled testing studies for Java programs
Unknown Journal|2014
1.3k cit.
6
Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software
Figshare|2018
1.3k cit.
7
Android permissions demystified
Unknown Journal|2011
1.3k cit.
8
Understanding code mobility
IEEE Transactions on Software Engineering|1998
1.2k cit.
9
The Daikon system for dynamic detection of likely invariants
Science of Computer Programming|2007
1.1k cit.
10
Dynamically discovering likely program invariants to support program evolution
IEEE Transactions on Software Engineering|2001
1k cit.

Indexing Web Application Security Vulnerabilities Reagents

Citation data for reagents in this field is currently compiling.