A Symbolic Execution Framework for JavaScript Prateek Saxena, Devdatta Akhawe, Steve Hanna, Feng Mao, Stephen McCamant, Dawn Song Computer Science Division, EECS Department University of California, Berkeley {prateeks, d

Source URL: webblaze.cs.berkeley.edu

Unobtrusive JavaScript Unobtrusive JavaScript (Sample Chapter) Written by Christian Heilmann Version 1.0, JulyThis document is copyright by Christian Heilmann and may not be fully or partly

Source URL: www.onlinetools.org

Portable and Efficient Run-time Monitoring of JavaScript Applications using Virtual Machine Layering Erick Lavoie1 , Bruno Dufour2 , and Marc Feeley2 1

Source URL: www.iro.umontreal.ca

• Software engineering
• Computer programming
• Computing
• Scripting languages
• Object-oriented programming languages
• Programming paradigms
• Cross-platform software
• JavaScript
• Objective-C
• VM
• Method
• Object-oriented programming

Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript Daniel Gruss, Cl´ementine Maurice† , and Stefan Mangard Graz University of Technology, Austria Abstract. A fundamental assumption in software securit

Source URL: gruss.cc

• Cache
• Computer memory
• Computing
• Computer hardware
• Computer engineering
• CPU cache
• Row hammer
• Cache replacement policies
• Dynamic random-access memory
• Pseudo-LRU
• Cache pollution
• Cache performance measurement and metric

Isolating JavaScript with Filters, Rewriting, and Wrappers Sergio Maffeis1 , John C. Mitchell2 , and Ankur Taly2 1 Imperial College London

Source URL: wwwhomes.doc.ic.ac.uk

• Software engineering
• Computing
• Computer programming
• Functional languages
• Control flow
• High-level programming languages
• Programming language comparisons
• Programming language syntax
• Eval
• JavaScript
• Scope
• Dynamic programming language

Cross-Origin JavaScript Capability Leaks: Detection, Exploitation, and Defense Adam Barth UC Berkeley

Source URL: www.adambarth.com

• Computing
• Software engineering
• Computer programming
• Application programming interfaces
• HTML
• Computer access control
• Computer network security
• JavaScript
• Web Messaging
• Object-capability model
• Same-origin policy
• Cross-site scripting

LODWheel – JavaScript-based Visualization of RDF Data – Magnus Stuhr1, Dumitru Roman2, and David Norheim3 1University of Bergen, Bergen, Norway

Source URL: ceur-ws.org

Optimization Coaching for JavaScript (Artifact)∗ Vincent St-Amour1 and Shu-yu Guo2 1 PLT @ Northeastern University Boston, Massachusetts, USA

Source URL: users.eecs.northwestern.edu

JavaScript Testing Survey 2018 Results Gojko Adzic, 25 February 2018 Contents Introduction

Source URL: gojko.net

Practical Keystroke Timing Attacks in Sandboxed JavaScript (updated) Moritz Lipp, Daniel Gruss, Michael Schwarz, David Bidner, Cl´ementine Maurice, and Stefan Mangard Graz University of Technology, Austria

Source URL: mlq.me