89 citations · 89 across the 2 of their papers we have counts for
3 papers
Mir: Automated Quantifiable Privilege Reduction Against Dynamic Library Compromise in JavaScript
Nikos Vasilakis, Cristian-Alexandru Staicu, Grigoris Ntousakis +4
Third-party libraries ease the development of large-scale software systems. However, they often execute with significantly more privilege than needed to complete their task. This a…
An Empirical Study of Information Flows in Real-World JavaScript
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu +2
Information flow analysis prevents secret or untrusted data from flowing into public or trusted sinks. Existing mechanisms cover a wide array of options, ranging from lightweight t…
Small World with High Risks: A Study of Security Threats in the npm Ecosystem
Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny +1
The popularity of JavaScript has lead to a large ecosystem of third-party packages available via the npm software package registry. The open nature of npm has boosted its growth, p…