Efficient Static Vulnerability Analysis for JavaScript with Multiversion Dependency Graphs

While static analysis tools that rely on Code Property Graphs (CPGs) to detect security vulnerabilities have proven effective, deciding how much information to include in the graphs remains a challenge. Including less information can lead to a more scalable analysis but at the cost of reduced effect...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	Proceedings of ACM on programming languages Jg. 8; H. PLDI; S. 417 - 441
Hauptverfasser:	Ferreira, Mafalda, Monteiro, Miguel, Brito, Tiago, Coimbra, Miguel E., Santos, Nuno, Jia, Limin, Santos, José Fragoso
Format:	Journal Article
Sprache:	Englisch
Veröffentlicht:	New York, NY, USA ACM 20.06.2024
Schlagworte:	Automated static analysis Program analysis Security and privacy Software and application security Software and its engineering Software verification and validation Theory of computation Vulnerability Detection Static Analysis JavaScript
ISSN:	2475-1421, 2475-1421
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!