research
∙
11/21/2022
A Tale of Frozen Clouds: Quantifying the Impact of Algorithmic Complexity Vulnerabilities in Popular Web Servers
Algorithmic complexity vulnerabilities are a class of security problems ...
share
research
∙
10/10/2022
SimSCOOD: Systematic Analysis of Out-of-Distribution Behavior of Source Code Models
While large code datasets have become available in recent years, acquiri...
research
∙
07/22/2022
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js
Prototype pollution is a dangerous vulnerability affecting prototype-bas...
research
∙
11/22/2021
Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages
Scripting languages are continuously gaining popularity due to their eas...
research
∙
10/31/2020
Mir: Automated Quantifiable Privilege Reduction Against Dynamic Library Compromise in JavaScript
Third-party libraries ease the development of large-scale software syste...
research
∙
06/27/2019
An Empirical Study of Information Flows in Real-World JavaScript
Information flow analysis prevents secret or untrusted data from flowing...
research
∙
02/25/2019
