عنوان

From FlowCore to JitFlow:

شماره

TL7n9066g5

زبان متن نوشتاري يا گفتاري و مانند آن

انگلیسی

عنوان اصلي

From FlowCore to JitFlow:

نام عام مواد

[Thesis]

نام نخستين پديدآور

Hennigan, Eric

عنوان اصلي به قلم نويسنده ديگر

Improving the speed of Information Flow in JavaScript.

نام ساير پديدآوران

Franz, Michael

تاریخ نشرو بخش و غیره

2015

کسي که مدرک را اعطا کرده

Franz, Michael

امتياز متن

2015

متن يادداشت

Today's web applications remain vulnerable to cross-site scripting attacks that enable data theft. Information flow tracking in the JavaScript VM of a web engine can track data flows through the web application and prevent the communication of sensitive data to unintended recipients, thereby stopping data theft. Existing solutions have focused on the incorporating information flow into the JS interpreter, rather than the just-in-time compiler, rendering the resulting performance non-competitive. This thesis presents an implementation of information flow tracking that works with the just-in-time compiler, outperforming all previous interpreter-based information flow tracking engines by more than a factor of two. The JIT-based engine (i) has the same coverage as previous implementations, (ii) requires comparatively light implementation effort, and (iii) introduces new optimizations to remain performant. When evaluated against three industry standard benchmark suites, the tracking engine retains an average slowdown of 73% over engines that do not support information flow, remaining will within the range that many users will find an acceptable price for obtaining substantially increased security against data theft.

مستند نام اشخاص تاييد نشده

Goodman, Amanda K

مستند نام اشخاص تاييد نشده

Hennigan, Eric

مستند نام تنالگان تاييد نشده

UC Irvine

نام الکترونيکي

فرمت انتشار

p

نوع ماده

[Thesis]

کد کاربرگه

276903

سطح دسترسي

a

تكميل شده

Y