Code-Based Vulnerability Detection in Node.js Applications: How far are we?

Code-Based Vulnerability Detection in Node.js Applications: How far are we?
复制标题

DOI：
10.1145/3324884.3421838
复制
发表时间：
2020-08
期刊：
2020 35th IEEE/ACM International Conference on Automated Software Engineering (ASE)
影响因子：
--
通讯作者：
Bodin Chinthanet;Serena Elisa Ponta;H. Plate;A. Sabetta;R. Kula;T. Ishio;Ken-ichi Matsumoto
Bodin Chinthanet;Serena Elisa Ponta;H. Plate;A. Sabetta;R. Kula;T. Ishio;Ken-ichi Matsumoto
中科院分区：
其他
文献类型：
--
作者：
Bodin Chinthanet;Serena Elisa Ponta;H. Plate;A. Sabetta;R. Kula;T. Ishio;Ken-ichi Matsumoto

文献摘要

被引文献

相似文献

JavaScript运行时环境Node.js是最受欢迎的编程应用程序之一，拥有最大的可重用包集合。最近的工作表明，已知的漏洞在开源和工业软件中普遍存在，我们提出并实现了一个可行的基于代码的Node.js应用程序漏洞检测工具。我们的案例研究列出了在实现Node.js脆弱代码检测器时遇到的挑战。
With one of the largest available collection of reusable packages, the JavaScript runtime environment Node.js is one of the most popular programming application. With recent work showing evidence that known vulnerabilities are prevalent in both open source and industrial software, we propose and implement a viable code-based vulnerability detection tool for Node.js applications. Our case study lists the challenges encountered while implementing our Node.js vulnerable code detector.