SecureJS Compiler: Portable Memory Isolation in JavaScript - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

SecureJS Compiler: Portable Memory Isolation in JavaScript

Tamara Rezk
  • Fonction : Auteur
  • PersonId : 949476
  • IdRef : 136831605
Manuel Serrano

Résumé

The memory isolation mechanism plays an essential role to provide security enforcement in JavaScript programs. Existing secure interaction libraries such as Google Caja, SES, and VM2 rely on built-in memory isolation mechanisms provided by Node.js and browsers, yet most of the other engines such as JerryScript and Duktape, which are implementations for IoT devices, do not support such isolation mechanisms.In this paper, we report about the design and implementation of SecureJS, a portable JavaScript-to-JavaScript compiler that enforces memory isolation. As it only uses standard features, the compiled code it generates can be used by any JavaScript engine. We validated empirically the semantics preservation and memory isolation of SecureJS compiled programs by using 10,490 test programs of ECMAScript Test262 test suite. We also developed a novel experiment to evaluate memory isolation property of compiled code by instrumented JavaScript engines.
Fichier principal
Vignette du fichier
final.pdf (752.47 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03090348 , version 1 (29-12-2020)

Identifiants

Citer

Yoonseok Ko, Tamara Rezk, Manuel Serrano. SecureJS Compiler: Portable Memory Isolation in JavaScript. SAC 2021 - 36th ACM/SIGAPP Symposium On Applied Computing, Mar 2021, Gwangju / Virtual, South Korea. ⟨10.1145/3412841.3442001⟩. ⟨hal-03090348⟩
235 Consultations
407 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More