Showing cs.CRShow all
2 papers · 1 filter
cs.CR2021
Containing Malicious Package Updates in npm with a Lightweight Permission System
Gabriel Ferreira, Limin Jia, Joshua Sunshine +1
The large amount of third-party packages available in fast-moving software ecosystems, such as Node.js/npm, enables attackers to compromise applications by pushing malicious update…
cs.CR2019
Uncovering Information Flow Policy Violations in C Programs
Darion Cassel, Yan Huang, Limin Jia
Programmers of cryptographic applications written in C need to avoid common mistakes such as sending private data over public channels, modifying trusted data with untrusted functi…