Analysis of JavaScript programs: Challenges and research trends

K Sun, S Ryu - ACM Computing Surveys (CSUR), 2017 - dl.acm.org
JavaScript has been a de facto standard language for client-side web programs, and now it
is expanding its territory to general purpose programs. In this article, we classify the client …

A survey of parametric static analysis

J Park, H Lee, S Ryu - ACM Computing Surveys (CSUR), 2021 - dl.acm.org
Understanding program behaviors is important to verify program properties or to optimize
programs. Static analysis is a widely used technique to approximate program behaviors via …

JSAI: A static analysis platform for JavaScript

V Kashyap, K Dewey, EA Kuefner, J Wagner… - Proceedings of the …, 2014 - dl.acm.org
JavaScript is used everywhere from the browser to the server, including desktops and
mobile devices. However, the current state of the art in JavaScript static analysis lags far …

Towards javascript program repair with generative pre-trained transformer (gpt-2)

M Lajkó, V Csuvik, L Vidács - … of the Third International Workshop on …, 2022 - dl.acm.org
The goal of Automated Program Repair (APR) is to find a fix to software bugs, without human
intervention. The so-called Generate and Validate (G&V) approach deemed to be the most …

[PDF][PDF] Understanding and automatically preventing injection attacks on Node. js

CA Staicu, M Pradel, B Livshits - Network and Distributed System …, 2018 - software-lab.org
The NODE. JS ecosystem has lead to the creation of many modern applications, such as
server-side web applications and desktop applications. Unlike client-side JavaScript code …

Doublex: Statically detecting vulnerable data flows in browser extensions at scale

A Fass, DF Somé, M Backes, B Stock - Proceedings of the 2021 ACM …, 2021 - dl.acm.org
Browser extensions are popular to enhance users' browsing experience. By design, they
have access to security-and privacy-critical APIs to perform tasks that web applications …

Static analysis of event-driven Node. js JavaScript applications

M Madsen, F Tip, O Lhoták - ACM SIGPLAN Notices, 2015 - dl.acm.org
Many JavaScript programs are written in an event-driven style. In particular, in server-side
Node. js applications, operations involving sockets, streams, and files are typically …

Hidenoseek: Camouflaging malicious javascript in benign asts

A Fass, M Backes, B Stock - Proceedings of the 2019 ACM SIGSAC …, 2019 - dl.acm.org
In the malware field, learning-based systems have become popular to detect new malicious
variants. Nevertheless, attackers with specific and internal knowledge of a target system may …

Determinacy in static analysis for jQuery

E Andreasen, A Møller - Proceedings of the 2014 ACM International …, 2014 - dl.acm.org
Static analysis for JavaScript can potentially help programmers find errors early during
development. Although much progress has been made on analysis techniques, a major …

Practical static analysis of JavaScript applications in the presence of frameworks and libraries

M Madsen, B Livshits, M Fanning - Proceedings of the 2013 9th Joint …, 2013 - dl.acm.org
JavaScript is a language that is widely-used for both web-based and standalone
applications such as those in the upcoming Windows 8 operating system. Analysis of …