Completeness of string analysis for dynamic languages

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14330%2F21%3A00129840" target="_blank" >RIV/00216224:14330/21:00129840 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.1016/j.ic.2021.104791" target="_blank" >http://dx.doi.org/10.1016/j.ic.2021.104791</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1016/j.ic.2021.104791" target="_blank" >10.1016/j.ic.2021.104791</a>

Result language
angličtina
Original language name
Completeness of string analysis for dynamic languages
Original language description
In Abstract Interpretation, completeness ensures that the analysis does not lose information with respect to the property of interest. In particular, for dynamic languages like JavaScript, completeness of string analysis is a key security issue, as poorly managed string manipulation code may easily lead to significant security flaws. In this paper, we provide a systematic and constructive approach for generating the completion of string domains for dynamic languages, and we apply it to the refinement of existing string abstractions. We also provide an effective procedure to measure the precision improvement obtained when lifting the analysis to complete domains. (C) 2021 Elsevier Inc. All rights reserved.
Czech name
—
Czech description
—

Type
J<sub>imp</sub> - Article in a specialist periodical, which is included in the Web of Science database
CEP classification
—
OECD FORD branch
10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Project
—
Continuities
I - Institucionalni podpora na dlouhodoby koncepcni rozvoj vyzkumne organizace

Publication year
2021
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Similar results(10)