Efficient Static Vulnerability Analysis for JavaScript with Multiversion Dependency Graphs

While static analysis tools that rely on Code Property Graphs (CPGs) to detect security vulnerabilities have proven effective, deciding how much information to include in the graphs remains a challenge. Including less information can lead to a more scalable analysis but at the cost of reduced effect...

Full description

Bibliographic Details

Published in:	Proceedings of ACM on programming languages Vol. 8; no. PLDI; pp. 417 - 441
Main Authors:	Ferreira, Mafalda, Monteiro, Miguel, Brito, Tiago, Coimbra, Miguel E., Santos, Nuno, Jia, Limin, Santos, José Fragoso
Format:	Journal Article
Language:	English
Published:	New York, NY, USA ACM 20.06.2024
Subjects:	Automated static analysis Program analysis Security and privacy Software and application security Software and its engineering Software verification and validation Theory of computation Vulnerability Detection Static Analysis JavaScript
ISSN:	2475-1421, 2475-1421
Online Access:	Get full text
Tags:	Add Tag No Tags, Be the first to tag this record!