CoCo: Efficient Browser Extension Vulnerability Detection via Coverage-guided, Concurrent Abstract Interpretation-Reference-Cited by-同舟云学术

CoCo: Efficient Browser Extension Vulnerability Detection via Coverage-guided, Concurrent Abstract Interpretation

Published:2023-11-15 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Yu Jianjia¹^ORCID,Li Song²^ORCID,Zhu Junmin³^ORCID,Cao Yinzhi¹^ORCID

Affiliation:

1. Johns Hopkins University, Baltimore, MD, USA

2. Zhejiang University, Hangzhou, China

3. Shanghai Jiao Tong University, Shanghai, China

Funder

DARPA YFA

NSF (National Science Foundation)

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3576915.3616584

Reference64 articles.

1. [n.d.]. Architecture overview. https://developer.chrome.com/docs/extensions/ mv3/architecture-overview/.

2. [n.d.]. Changes to Cross-Origin Requests in Chrome Extension Content Scripts. https://www.chromium.org/Home/chromium-security/extension-content-script-fetches/.

3. [n.d.]. Definition of IIFE. https://developer.mozilla.org/en-US/docs/Glossary/IIFE.

4. [n.d.]. FromDocToPdf: exposes browsing history to all websites. https://bugs. chromium.org/p/project-zero/issues/detail?id=1557.

5. [n.d.]. Google Scholar Button. https://chrome.google.com/webstore/detail/ google-scholar-button/ldipcbpaocekfooobnbcddclnhejkcpn. [Online; Accessed on 07-June-2022].

Cited by 2 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. FakeX: A Framework for Detecting Fake Reviews of Browser Extensions;Proceedings of the 19th ACM Asia Conference on Computer and Communications Security;2024-07

2. Efficient Static Vulnerability Analysis for JavaScript with Multiversion Dependency Graphs;Proceedings of the ACM on Programming Languages;2024-06-20