Empirical study of 56 vulnerable JavaScript programs finds implicit flows costly to track and hidden implicit flows unnecessary for detecting the studied security issues.
(3′′) follows easily since heaps, environments, and the label stack are not modified by executing a sink statement
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2019 1verdicts
ACCEPT 1representative citing papers
citing papers explorer
-
An Empirical Study of Information Flows in Real-World JavaScript
Empirical study of 56 vulnerable JavaScript programs finds implicit flows costly to track and hidden implicit flows unnecessary for detecting the studied security issues.