2013/05/29 by Matthias S. Keil, Matthias Keil, Keil, Matthias +2
Computer Science · #Advanced Malware Detection Techniques #FOS: Computer and information sciences #Programming Languages (cs.PL) #Security and Verification in Computing #Web Application Security Vulnerabilities #cs.PL
paper · pdf · doi:10.48550/arxiv.1305.6721
Technical Report
arxiv created 2013/05/29 · openalex publication_date 2013/05/29 · arxiv updated 2013/05/30 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Dependency analysis is a program analysis that determines potential data flow between program points. While it is not a security analysis per se, it is a viable basis for investigating data integrity, for ensuring confidentiality, and for guaranteeing sanitization. A noninterference property can be stated and proved for the dependency analysis. We have designed and implemented a dependency analysis for JavaScript. We formalize this analysis as an abstraction of a tainting semantics. We prove the correctness of the tainting semantics, the soundness of the abstraction, a noninterference property, and the termination of the analysis.