A Collection of Real World (JavaScript) Security Problems: Examples from 2 1/2 Applications Areas of JavaScript

By Achim D. Brucker.

JavaScript is gaining more and more popularity as an implementation language for various applications types such as Web applications (client-side), mobile applications, or server-side applications.

We outline a few security challenges that need to be prevented in such applications and, thus, for which there is a demand for analysis methods that help to detect them during during development.

Please cite this work as follows:
A. D. Brucker, “A collection of real world (JavaScript) security problems: Examples from 2 1/2 applications areas of JavaScript,” presented at the Dagstuhl seminar 14271 “scripting languages and frameworks: Analysis and verification,” Dagstuhl, Germany, Jul. 02, 2014. Author copy: http://logicalhacking.com/publications/talk-brucker-js-challenges-2014/

BibTeX
@Unpublished{ talk:brucker:js-challenges:2014,
  date              = {2014-07-02},
  title             = {A Collection of Real World (JavaScript) Security Problems:
                       Examples from 2 1/2 Applications Areas of JavaScript},
  language          = {USenglish},
  slideshare        = {key/vtUm8xLnMk6pK3},
  slideshare_width  = {595},
  slideshare_height = {485},
  venue             = {Dagstuhl, Germany},
  author            = {Achim D. Brucker},
  lecturer          = {Achim D. Brucker},
  eventtitle        = {Dagstuhl Seminar 14271 ``Scripting Languages and Frameworks:
                       Analysis and Verification''},
  abstract          = {JavaScript is gaining more and more popularity as an
                       implementation language for various applications types such as
                       Web applications (client-side), mobile applications, or
                       server-side applications.
                       
                       We outline a few security challenges that need to be prevented
                       in such applications and, thus, for which there is a demand
                       for analysis methods that help to detect them during during
                       development.},
  note              = {Author copy: \url{http://logicalhacking.com/publications/talk-brucker-js-challenges-2014/}},
}