20 search results - page 2 / 4 » Information-Flow Security for a Core of JavaScript |
132
click to vote
POPL
2012
ACM
13 years 9 months ago
2012
ACM
JavaScript has become a central technology of the web, but it is also the source of many security problems, including cross-site scripting attacks and malicious advertising code. ...
209
click to vote
POPL
2007
ACM
16 years 2 months ago
2007
ACM
It is well recognized that JavaScript can be exploited to launch browser-based security attacks. We propose to battle such attacks using program instrumentation. Untrusted JavaScr...
126
click to vote
IJISEC
2007
15 years 2 months ago
2007
This paper presents a language in which information flow is securely controlled by a type system, yet the security class of data can vary dynamically. Information flow policies ...
110
click to vote
ICDCSW
2005
IEEE
15 years 7 months ago
2005
IEEE
The core problem in risk analysis - determining exploitable paths between attackers and system assets is essentially a problem of determining information flow. It is relatively st...
129
click to vote
ESOP
2000
Springer
15 years 5 months ago
2000
Springer
Abstract. We propose a new type discipline for the -calculus in which secure information flow is guaranteed by static type checking. Secrecy levels are assigned to channels and are...