2013 · 78 citations · 21 references
ComputingComputer EngineeringCybersecurityApplication SecurityVulnerability AnalysisWeb SecurityBehavioral AnalysisCode Obfuscation AnalysisStatic Code AnalysisStatic Vulnerability AnalysisWeb Application SecurityWeb Application VulnerabilitiesApplication Taint AnalysisDynamic Taint AnalysisJavascript SecurityProgram Taint Analysis
JavaScript is widely used in Web applications because of its flexibility and dynamic features. However, the latter pose challenges to static analyses aimed at finding security vulnerabilities, (e.g., taint analysis).
21
A lattice model of secure information flow
Dorothy E. Denning · Communications of the ACM · 1976 · 1.9K citations · Full text
A Symbolic Execution Framework for JavaScript
Prateek Saxena, Devdatta Akhawe, Steve Hanna et al. · 2010 · 456 citations
An analysis of the dynamic behavior of JavaScript programs
Gregor Richards, Sylvain Lebresne, Brian R. Burg et al. · 2010 · 356 citations