Search Results - untrusted JavaScript code*

A two-tier sandbox architecture for untrusted JavaScript

Authors: Phung, Phu H. Desmet, Lieven

Source: Proceedings of the Workshop on JavaScript Tools. :1-10

Subject Terms: Web Mashups, Web Application Security, 0202 electrical engineering, electronic engineering, information engineering, Untrusted, 02 engineering and technology

Access URL: https://dl.acm.org/citation.cfm?doid=2307720.2307721
https://research.chalmers.se/en/publication/168610
https://dl.acm.org/doi/10.1145/2307720.2307721
https://core.ac.uk/display/34535311

Defending the OSN-Based Web Applications from XSS Attacks Using Dynamic JavaScript Code and Content Isolation

Authors: Brij B. Gupta Shashank Gupta Pooja Chaudhary

Source: Springer Proceedings in Business and Economics ISBN: 9789811055768

Subject Terms: 3. Good health

Access URL: https://link.springer.com/chapter/10.1007/978-981-10-5577-5_9
https://rd.springer.com/chapter/10.1007/978-981-10-5577-5_9

A client‐server JavaScript code rewriting‐based framework to detect the XSS worms from online social network

Authors: Shashank Gupta B.B. Gupta Pooja Chaudhary

Source: Concurrency and Computation: Practice and Experience. 31

Subject Terms: 0202 electrical engineering, electronic engineering, information engineering, 02 engineering and technology

Access URL: https://onlinelibrary.wiley.com/doi/full/10.1002/cpe.4646
http://eprints.bits-pilani.ac.in/2173/
https://dblp.uni-trier.de/db/journals/concurrency/concurrency31.html#GuptaGC19

Designing a XSS defensive framework for web servers deployed in the existing smart city infrastructure

Authors: Gupta, Brij B. Chaudhary, Pooja Gupta, Shashank

Source: Gupta , B B , Chaudhary , P & Gupta , S 2020 , ' Designing a XSS defensive framework for web servers deployed in the existing smart city infrastructure ' , Journal of Organizational and End User Computing , vol. 32 , no. 4 , pp. 85-111 . https://doi.org/10.4018/JOEUC.2020100105

Subject Terms: Smart City Cyber Security, Trusted Remark Statement Injection, Untrusted Javascript Code, XSS Attack

File Description: application/pdf

Availability: https://researchers.mq.edu.au/en/publications/4c662184-8557-4c25-9038-d788aaca9e46
https://doi.org/10.4018/JOEUC.2020100105
https://research-management.mq.edu.au/ws/files/165796648/165497384.pdf

Language-Based Isolation of Untrusted JavaScript

Authors: Sergio Maffeis Ankur Taly

Source: 2009 22nd IEEE Computer Security Foundations Symposium. :77-91

Subject Terms: 0202 electrical engineering, electronic engineering, information engineering, 02 engineering and technology

Access URL: http://crypto.stanford.edu/websec/jsPapers/csf09-camera-ready.pdf
https://ieeexplore.ieee.org/document/5230484/
http://yadda.icm.edu.pl/yadda/element/bwmeta1.element.ieee-000005230484
http://crest.cs.ucl.ac.uk/cow/12/slides/SergioCOW-2011.pdf
http://theory.stanford.edu/~ataly/Talks/JSIsol-CS258.pdf
http://www-cs-students.stanford.edu/~ataly/Papers/csf09.pdf
https://dblp.uni-trier.de/db/conf/csfw/csf2009.html#MaffeisT09

A Two-Tier Sandbox Architecture to Enforce Modular Fine-Grained Security Policies for Untrusted JavaScript

Authors: Phung, Phu, 1979

Subject Terms: self-protecting JavaScript, ECMAScript 5, mashup security, sandbox, Untruste JavaScript

Access URL: https://research.chalmers.se/publication/146091

XSS-immune: a Google chrome extension-based XSS defensive framework for contemporary platforms of web applications.

Authors: Gupta, Shashank Gupta, Brij Bhooshan

Source: Security & Communication Networks; 11/25/2016, Vol. 9 Issue 17, p3966-3986, 21p

Subject Terms: HTTP (Computer network protocol), PERFORMANCE evaluation, CONTEXT-aware computing, WEB-based user interfaces

Reviews & Products: GOOGLE Chrome (Computer software)

Clean Code in JavaScript : Develop Reliable, Maintainable, and Robust JavaScript

Authors: James Padolsey

Resource Type: eBook.

Subjects: JavaScript (Computer program language)

Categories: COMPUTERS / Internet / Web Programming, COMPUTERS / Programming / Algorithms, COMPUTERS / User Interfaces

A client‐server JavaScript code rewriting‐based framework to detect the XSS worms from online social network.

Authors: Gupta, Shashank Gupta, B.B. Chaudhary, Pooja

Source: Concurrency & Computation: Practice & Experience; 11/10/2019, Vol. 31 Issue 21, pN.PAG-N.PAG, 1p

Subject Terms: JAVASCRIPT programming language, ONLINE social networks, INTERNET privacy, WORMS, WEB-based user interfaces

War on JITs: Software-Based Attacks and Hybrid Defenses for JIT Compilers - A Comprehensive Survey.

Authors: Ducasse, Quentin Cotret, Pascal Lagadec, Loïc

Source: ACM Computing Surveys; Sep2025, Vol. 57 Issue 9, p1-36, 36p

Subject Terms: INSTRUCTION set architecture, DEFENSE mechanisms (Psychology), MESSAGE authentication codes, COLLECTIVE memory, EXPLICIT memory, COMPILERS (Computer programs), JAVASCRIPT programming language

WebAssembly: Yes, but for What?

Authors: Wingo, Andy

Source: Communications of the ACM; Nov2025, Vol. 68 Issue 11, p50-54, 5p

Subject Terms: SOURCE code, COMPILERS (Computer programs), BINARY codes, APPLICATION program interfaces, ARTIFICIAL intelligence, DATA security, CLOUD computing

Cerise: Program Verification on a Capability Machine in the Presence of Untrusted Code.

Authors: Georges, Aïna Linn Guéneau, Armaël Van Strydonck, Thomas et al.

Source: Journal of the ACM; Feb2024, Vol. 71 Issue 1, p1-59, 59p

Subject Terms: LOGIC, MACHINERY

On Detecting and Measuring Exploitable JavaScript Functions in Real-world Applications.

Authors: Kluban, Maryna Mannan, Mohammad Youssef, Amr

Source: ACM Transactions on Privacy & Security; Feb2024, Vol. 27 Issue 1, p1-37, 37p

Subject Terms: JAVASCRIPT programming language, PATTERN recognition systems, DENIAL of service attacks, DATA security, INTEGRATED software

Native Client: A Sandbox for Portable, Untrusted x86 Native Code.

Authors: Yee, Bennet Sehr, David Dardyk, Gregory et al.

Source: Communications of the ACM; Jan2010, Vol. 53 Issue 1, p91-99, 9p, 2 Diagrams, 2 Charts, 1 Graph

Subject Terms: SANDBOXES (Computer science), WEB browsers, COMPUTER security, OPEN architecture (Computer science), COMPUTER software development, COMPUTER programming

Assessing the Effectiveness of ChatGPT in Secure Code Development: A Systematic Literature Review.

Authors: Bouzid, Rezika Khoury, Raphaël

Source: ACM Computing Surveys; Dec2025, Vol. 57 Issue 12, p1-32, 32p

Lightweight Enforcement of Fine-Grained Security Policies for Untrusted Software

Authors: Phung, Phu, 1979

Subject Terms: security policy enforcement, JavaScript security, web-application security, vehicle software security, untrusted software

File Description: electronic

Access URL: https://research.chalmers.se/publication/146093
http://publications.lib.chalmers.se/records/fulltext/146093.pdf

Vetting Browser Extensions for Security Vulnerabilities with VEX.

Authors: Bandhakavi, Sruthi Tiku, Nandit Pittman, Wyatt et al.

Source: Communications of the ACM; Sep2011, Vol. 54 Issue 9, p91-99, 9p, 3 Diagrams, 5 Charts

Subject Terms: WEB browser security, ANTI-malware (Computer software), MALWARE, COMPUTER security, JAVASCRIPT programming language, WORLD Wide Web

XSS-secure as a service for the platforms of online social network-based multimedia web applications in cloud.

Authors: Gupta, Shashank Gupta, B. B.

Source: Multimedia Tools & Applications; Feb2018, Vol. 77 Issue 4, p4829-4861, 33p

Subject Terms: COMPUTER security vulnerabilities, ONLINE social networks software, CLOUD computing security measures, JAVASCRIPT programming language, SOFTWARE frameworks, COMPUTER software

From Rules to Reasoning: How AI Is Transforming Code Security.

Authors: LAU, JASON

Source: ISACA Journal; 2025, Vol. 6, p20-25, 6p

Subject Terms: ARTIFICIAL intelligence, COMPUTER software security, SEMANTICS, COMPUTER software development, PENETRATION testing (Computer security)

Quick Response Code Security Attacks and Countermeasures: A Systematic Literature Review.

Authors: Njuguna, David Ndia, John

Source: Journal of Cybersecurity (2579-0072); 2025, Vol. 7 Issue 1, p1-20, 20p

Subject Terms: TWO-dimensional bar codes, DIGITAL technology, ARTIFICIAL intelligence, ELECTRONICS engineers, BAR codes, MULTI-factor authentication