Unveiling the Invisible: Detection and Evaluation of Prototype Pollution Gadgets with Dynamic Taint Analysis

Author:

Shcherbakov Mikhail1ORCID,Moosbrugger Paul1ORCID,Balliu Musard1ORCID

Affiliation:

1. KTH Royal Institute of Technology, Stockholm, Sweden

Funder

Swedish Foundation for Strategic Research

Wallenberg AI, Autonomous Systems and Software Program (WASP)

Swedish Research Council

Publisher

ACM

Reference52 articles.

1. [n. d.]. Client-Side Prototype Pollution and useful Script Gadgets. https://github.com/BlackFan/client-side-prototype-pollution.

2. [n. d.]. Elastic Stack: Elasticsearch Kibana Beats Logstash - Elastic. https://www.elastic.co/elastic-stack/.

3. [n. d.]. Exploiting prototype pollution - RCE in Kibana (CVE-2019--7609). https://research.securitum.com/prototype-pollution-rce-kibana-cve-2019--7609.

4. [n. d.]. Graal.js. https://github.com/oracle/graaljs.

5. [n. d.]. Libraries.io - The Open Source Discovery Service. https://libraries.io.

同舟云学术

1.学者识别学者识别

2.学术分析学术分析

3.人才评估人才评估

"同舟云学术"是以全球学者为主线,采集、加工和组织学术论文而形成的新型学术文献查询和分析系统,可以对全球学者进行文献检索和人才价值评估。用户可以通过关注某些学科领域的顶尖人物而持续追踪该领域的学科进展和研究前沿。经过近期的数据扩容,当前同舟云学术共收录了国内外主流学术期刊6万余种,收集的期刊论文及会议论文总量共计约1.5亿篇,并以每天添加12000余篇中外论文的速度递增。我们也可以为用户提供个性化、定制化的学者数据。欢迎来电咨询!咨询电话:010-8811{复制后删除}0370

www.globalauthorid.com

TOP

Copyright © 2019-2024 北京同舟云网络信息技术有限公司
京公网安备11010802033243号  京ICP备18003416号-3