Poster: Using CodeQL to Detect Malware in npm-Reference-Cited by-同舟云学术

Poster: Using CodeQL to Detect Malware in npm

Published:2023-11-15 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Gobbi Matías F.¹^ORCID,Kinder Johannes²^ORCID

Affiliation:

1. Bundeswehr University Munich, Munich, Germany

2. Ludwig-Maximilians-Universität München (LMU Munich), Munich, Germany

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3576915.3624401

Reference22 articles.

1. QL: Object-oriented Queries on Relational Data. In 30th European Conf. Object-Oriented Programming (ECOOP);Avgustinov Pavel;Schloss Dagstuhl - Leibniz-Zentrum für Informatik,2016

2. Alex Birsan. 2021. Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies. https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 Accessed: 2023-03-15.

3. Oege de Moor, Damien Sereni, Mathieu Verbaere, Elnar Hajiyev, Pavel Avgustinov, Torbjörn Ekman, Neil Ongkingco, and Julian Tibble. 2007 a..QL: Object-Oriented Queries Made Easy. In Generative and Transformational Techniques in Software Engineering II, Int. Summer School, GTTSE (Lecture Notes in Computer Science, Vol. 5235). Springer, 78--133.

4. Oege de Moor, Mathieu Verbaere, Elnar Hajiyev, Pavel Avgustinov, Torbjörn Ekman, Neil Ongkingco, Damien Sereni, and Julian Tibble. 2007 b. Keynote Address: .QL for Source Code Analysis. In Seventh IEEE Int. Workshop on Source Code Analysis and Manipulation (SCAM). IEEE Computer Society, 3--16.

5. Ruian Duan, Omar Alrawi, Ranjita Pai Kasturi, Ryan Elder, Brendan Saltaformaggio, and Wenke Lee. 2021. Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages. In 28th Annu. Network and Distributed System Security Symposium (NDSS). The Internet Society.