InspectJS: Leveraging Code Similarity and User-Feedback for Effective Taint Specification Inference for JavaScript

Static analysis has established itself as a weapon of choice for detecting security vulnerabilities. Taint analysis in particular is a very general and powerful technique, where security policies are expressed in terms of forbidden flows, either from untrusted input sources to sensitive sinks (in in...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	2022 IEEE/ACM 44th International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP) S. 165 - 174
Hauptverfasser:	Dutta, Saikat, Garbervetsky, Diego, Lahiri, Shuvendu K., Schafer, Max
Format:	Tagungsbericht
Sprache:	Englisch
Veröffentlicht:	IEEE 01.05.2022
Schlagworte:	Analytical models Codes JavaScript Machine learning Manuals Measurement Static analysis Taint Analysis Weapons
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!