Defining a Set of Common Benchmarks for Web Application Security

ones consisting of almost 200,000 lines of code. We have identified about 30 vulnerabilities in these programs and there are probably more that can be found with appropriate static and dynamic tools. We are making these benchmarks publicly available in hopes of fostering collaboration between researchers. These benchmarks can serve as test cases for researchers and industry practitioners working in this area. Reference