Skip to Main content Skip to Navigation
Conference papers

SecureJS Compiler: Portable Memory Isolation in JavaScript

Yoonseok Ko 1 Tamara Rezk 1 Manuel Serrano 1
1 INDES - Secure Diffuse Programming
CRISAM - Inria Sophia Antipolis - Méditerranée
Abstract : The memory isolation mechanism plays an essential role to provide security enforcement in JavaScript programs. Existing secure interaction libraries such as Google Caja, SES, and VM2 rely on built-in memory isolation mechanisms provided by Node.js and browsers, yet most of the other engines such as JerryScript and Duktape, which are implementations for IoT devices, do not support such isolation mechanisms.In this paper, we report about the design and implementation of SecureJS, a portable JavaScript-to-JavaScript compiler that enforces memory isolation. As it only uses standard features, the compiled code it generates can be used by any JavaScript engine. We validated empirically the semantics preservation and memory isolation of SecureJS compiled programs by using 10,490 test programs of ECMAScript Test262 test suite. We also developed a novel experiment to evaluate memory isolation property of compiled code by instrumented JavaScript engines.
Document type :
Conference papers
Complete list of metadata
Contributor : Yoonseok Ko Connect in order to contact the contributor
Submitted on : Tuesday, December 29, 2020 - 3:49:26 PM
Last modification on : Thursday, January 20, 2022 - 5:30:12 PM
Long-term archiving on: : Tuesday, March 30, 2021 - 7:53:44 PM


Files produced by the author(s)


  • HAL Id : hal-03090348, version 1



Yoonseok Ko, Tamara Rezk, Manuel Serrano. SecureJS Compiler: Portable Memory Isolation in JavaScript. SAC 2021 - 36th ACM/SIGAPP Symposium On Applied Computing, Mar 2021, Gwangju / Virtual, South Korea. ⟨hal-03090348⟩



Les métriques sont temporairement indisponibles