Extensions complement web browsers with additional functionalities and also bring new
vulnerability venues, allowing privilege escalations from adversarial web pages to use …

Websites on the Internet are becoming increasingly vulnerable to malicious JavaScript code
because of its strong impact and dramatic effect. Numerous recent cyberattacks use …

In the malware field, learning-based systems have become popular to detect new malicious
variants. Nevertheless, attackers with specific and internal knowledge of a target system may …

Given a bug report, bug localization technique can help developers automatically locate
potential buggy files. Information retrieval and deep learning approaches have been applied …

Given the success of the Web platform, attackers have abused its main programming
language, namely JavaScript, to mount different types of attacks on their victims. Due to the …

To protect web users from malicious JavaScript code, various malware detectors have been
proposed, which analyze and classify code as malicious or benign. State-of-the-art detectors …

Context: JavaScript (JS) is an often-used programming language by millions of web pages
and is also affected by thousands of malicious attacks. Objective: In this investigation, we …

Taint-style vulnerabilities, such as OS command injection and path traversal, are common
and severe software weaknesses. There exists an inherent trade-off between analysis …

Machine learning is increasingly being applied to malicious JavaScript detection in
response to the growing number of Web attacks and the attendant costly manual …

Software supply-chain attacks target components that are integrated into client applications.
Such attacks often target widely-used components, with the attack taking place via …