Skip to Main content Skip to Navigation
Conference papers

SecureJS Compiler: Portable Memory Isolation in JavaScript

Abstract : The memory isolation mechanism plays an essential role to provide security enforcement in JavaScript programs. Existing secure interaction libraries such as Google Caja, SES, and VM2 rely on built-in memory isolation mechanisms provided by Node.js and browsers, yet most of the other engines such as JerryScript and Duktape, which are implementations for IoT devices, do not support such isolation mechanisms. In this paper, we report about the design and implementation of SecureJS, a portable JavaScript-to-JavaScript compiler that enforces memory isolation. As it only uses standard features, the compiled code it generates can be used by any JavaScript engine. We validated empirically the semantics preservation and memory isolation of SecureJS compiled programs by using 10,490 test programs of ECMAScript Test262 test suite. We also developed a novel experiment to evaluate memory isolation property of compiled code by instrumented JavaScript engines.
Document type :
Conference papers
Complete list of metadatas

https://hal.inria.fr/hal-03090348
Contributor : Yoonseok Ko <>
Submitted on : Tuesday, December 29, 2020 - 3:49:26 PM
Last modification on : Wednesday, December 30, 2020 - 3:35:06 AM

File

final.pdf
Files produced by the author(s)

Identifiers

  • HAL Id : hal-03090348, version 1

Collections

Citation

Yoonseok Ko, Tamara Rezk, Manuel Serrano. SecureJS Compiler: Portable Memory Isolation in JavaScript. SAC 2021 - The 36th ACM/SIGAPP Symposium On Applied Computing, Mar 2021, Gwangju / Virtual, South Korea. ⟨hal-03090348⟩

Share

Metrics

Record views

60

Files downloads

126