20 search results - page 2 / 4 » Information-Flow Security for a Core of JavaScript |
POPL
2012
ACM
12 years 3 months ago
2012
ACM
JavaScript has become a central technology of the web, but it is also the source of many security problems, including cross-site scripting attacks and malicious advertising code. ...
POPL
2007
ACM
14 years 7 months ago
2007
ACM
It is well recognized that JavaScript can be exploited to launch browser-based security attacks. We propose to battle such attacks using program instrumentation. Untrusted JavaScr...
IJISEC
2007
13 years 7 months ago
2007
This paper presents a language in which information flow is securely controlled by a type system, yet the security class of data can vary dynamically. Information flow policies ...
ICDCSW
2005
IEEE
14 years 1 months ago
2005
IEEE
The core problem in risk analysis - determining exploitable paths between attackers and system assets is essentially a problem of determining information flow. It is relatively st...
ESOP
2000
Springer
13 years 11 months ago
2000
Springer
Abstract. We propose a new type discipline for the -calculus in which secure information flow is guaranteed by static type checking. Secrecy levels are assigned to channels and are...