SecureJS Compiler: Portable Memory Isolation in JavaScript - Archive ouverte HAL Access content directly
Conference Papers Year :

SecureJS Compiler: Portable Memory Isolation in JavaScript

(1) , (1) , (1)
1
Tamara Rezk
  • Function : Author
  • PersonId : 949476
Manuel Serrano

Abstract

The memory isolation mechanism plays an essential role to provide security enforcement in JavaScript programs. Existing secure interaction libraries such as Google Caja, SES, and VM2 rely on built-in memory isolation mechanisms provided by Node.js and browsers, yet most of the other engines such as JerryScript and Duktape, which are implementations for IoT devices, do not support such isolation mechanisms.In this paper, we report about the design and implementation of SecureJS, a portable JavaScript-to-JavaScript compiler that enforces memory isolation. As it only uses standard features, the compiled code it generates can be used by any JavaScript engine. We validated empirically the semantics preservation and memory isolation of SecureJS compiled programs by using 10,490 test programs of ECMAScript Test262 test suite. We also developed a novel experiment to evaluate memory isolation property of compiled code by instrumented JavaScript engines.
Fichier principal
Vignette du fichier
final.pdf (752.47 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03090348 , version 1 (29-12-2020)

Identifiers

Cite

Yoonseok Ko, Tamara Rezk, Manuel Serrano. SecureJS Compiler: Portable Memory Isolation in JavaScript. SAC 2021 - 36th ACM/SIGAPP Symposium On Applied Computing, Mar 2021, Gwangju / Virtual, South Korea. ⟨10.1145/3412841.3442001⟩. ⟨hal-03090348⟩
220 View
302 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More