41 verified PDFs
While our proposed static analysis techniques are much more general and can be used for purposes as diverse as program optimization, concrete type inference, ...
Scalable static analyzers are popular tools for finding incorrect, inefficient, insecure, and hard-to-maintain code.
by C Park · 2015 · Cited by 73 — The LSA implementation demonstrates that LSA significantly improves the analysis scalability and precision so that it can analyze all versions of jQuery, the ...
Auditing: A common risk mitigation strategy is auditing: a developer who wishes to build trust appoints external auditors to inspect the client code. This can ...
Our detection tool for dynamic code-loading behavior uses static analysis techniques. Therefore, it does not have any information per se whether a given ...
In this paper we perform an empirical study of the dynamic behavior of a corpus of widely-used JavaScript programs, and an- alyze how and why the dynamic ...
In this paper, we present the first empirical study of static code analysis tools for detecting vulnerabilities in Node. js code.
JAVASCRIPT AND AJAX ATTACKS. Asynchronous JavaScript Technology and XML (AJAX) provide increased interactivity, speed, and usability.
This paper explores staged static analysis as a way to analyze streaming JavaScript programs. We observe while there is variance in terms of the code that gets ...
We describe an approach that focuses on improving the practicality and accuracy of points-to analysis and call graph construction for JavaScript programs.
The JavaScript Blended Analysis Framework is designed to perform a general-purpose, practical combined static/dynamic analysis of JavaScript programs, while ...
The benchmark comprises 600 vulnerabilities, which cover the five most common vulnerability classes for server-side JavaScript. Each vulnerability comes with a ...
Dynamic analysis — the ability to monitor code as it executes — has become a fundamental tool in computer security research. Dynamic analysis is attractive ...
The objective of this research is to not simplest explore the idea of static call graphs in JavaScript however additionally to evaluate the exceptional tools.
In this study, we empirically quantify how much static type systems improve software quality. This is measured against bugs that are public, actually checked in ...
ScopeLift requested that Least Authority perform a security audit of umbra-js, an off-chain JavaScript library that implements the basic cryptographic ...
by D Jang · 2009 · Cited by 88 — Points-to analysis for JavaScript is to de- termine the set of objects to which a reference variable or an object property may point. Points-to analysis for ...
Abstract— This paper presents an AI-driven approach to enhance dynamic code analysis by leveraging Large Language.
tation of a security auditing mechanisms that addresses the execution of JavaScript code within a browser. This paper is structured as follows. Section 2 ...
The Software Testing Life Cycle (STLC) ensures that software is tested for security vulnerabilities and risks. It involves steps to identify ...
