检索结果-内蒙古大学图书馆

International Forum on Computer and Information Technology (IFCIT)

作者： Wang Zhiyue Wu Weimin Guangdong Univ Technol Fac Comp Guangzhou 510006 Guangdong Peoples R China

ISBN: (纸本)9783038350194

With the rapid development of scripting language, javascript has been widely used in the application and web development industry. One of the main disadvantages of javascript for developers of commercial applications is the ease by which customers and competitors can study, analyze, and reuse the source code. Therefore, this paper proposes a technique of javascript code obfuscation based on control flow tansformations. The experimental results prove that, its effective protect javascript source code.

关键词： Control flow tansformations javascript code Opaque predicates Control-flow flattening

来源：评论

学校读者我要写书评

暂无评论

PDFIET: PDF Malicious Indicators Extraction Technique Through Optimized Symbolic Execution 19th

PDFIET: PDF Malicious Indicators Extraction Technique Throug...

引用

19th International Conference on Security and Privacy in Communication Networks

作者： Song, Enzhou Hu, Tao Yi, Peng Wang, Wenbo Informat Engn Univ Inst Informat Technol Zhengzhou 450001 Peoples R China

ISBN: (纸本)9783031649530;9783031649547

The malicious PDF documents posed a significant threat to network security in recent years. Extracting malicious indicators from PDF documents is a critical method for subsequent analysis and detection. However, current static and dynamic extraction methods are easily interfered by evasion methods such as highly obfuscation and sandbox detection, etc. Therefore, we creatively apply optimized symbolic execution to PDF indicator extraction and propose PDFIET, a technique of PDF malicious indicators extraction consisting of three modules: code parsing, symbolic execution and indicator extraction. We design the code rewriting method to improve code coverage by enforcing branch transfers. We also use the concurrency strategy and two constraint-solving optimization methods to enhance the efficiency of symbolic execution. We use 1271 malicious samples to make several experiments. The success rate and the effectiveness of indicators is high. The code coverage and the system efficiency improve significantly after optimization. The evaluation supports the design of the approach.

关键词： Malicious documents javascript code Indicator extraction Optimized symbolic execution

来源：评论

学校读者我要写书评

暂无评论

An Investigation of confusing code patterns in javascript

引用

JOURNAL OF SYSTEMS AND SOFTWARE 2023年第1期203卷

作者： Torres, Adriano Oliveira, Caio Okimoto, Marcio Marcilio, Diego Queiroga, Pedro Castor, Fernando Bonifacio, Rodrigo Canedo, Edna Dias Ribeiro, Marcio Monteiro, Eduardo Univ Brasilia Comp Sci Dept Brasilia DF Brazil Univ Svizzera Italiana Lugano Switzerland Univ Fed Pernambuco Informat Ctr Recife PE Brazil Univ Utrecht Informat & Comp Sci Dept Utrecht Netherlands Univ Fed Alagoas Inst Comp Maceio Alagoas Brazil Univ Brasilia Stat Dept Brasilia DF Brazil

Evolving software is particularly challenging when the code has been poorly written or uses confusing idioms and language constructs, which might increase maintenance efforts and impose a significant cognitive load on developers. Previous research has investigated possible sources of confusion in programs, including the impact of small code patterns (hereafter atoms of confusion) that contribute to misunderstanding the source code. Although researchers have explored atoms of confusion in code written in C, C++, and Java, different languages have different features, developer communities, and development cultures. This justifies the exploration of other languages to verify whether they also exhibit confusion-inducing patterns. In this paper we investigate the impact of atoms of confusion on understanding javascript code-a dynamically typed language whose popularity is growing in the most diverse application domains. We present the results of a mixed-methods research comprising a mining software repositories (MSR) study, two experiments, and a set of interviews with practitioners. Our MSR effort shows that atom candidates are frequent and used intensively in 72 popular open -source javascript projects: four atom candidates appear in 90% of them and two of them occur more than once for every 100 lines of code. This helps motivate the other three studies. The results of both experiments suggest that two code patterns that have been previously observed to confuse C programmers also confuse javascript programmers: the comma operator and assignments being used as values. In addition, some code patterns, such as omitted curly braces and change of literal encoding, have caused confusion in participants in one of the experiments. We discover that some javascript-specific elements, such as automatic semicolon insertion and object destructuring, also have the potential to cause confusion. For all these cases effect sizes were either medium or high. The interviews we conducted i

关键词： Software maintenance Program comprehension Program understanding Atoms of confusion javascript code

来源：评论

学校读者我要写书评

暂无评论

Developing a Data Harvester in the Amazon Cloud for the Automated Assimilation of Florida's Healthy Beaches Reports into the GCOOS Data Portal

Developing a Data Harvester in the Amazon Cloud for the Auto...

引用

Oceans Conference

作者： Currier, Robert Kirkpatrick, Barbara Mote Marine Lab Sarasota FL 34236 USA

ISBN: (纸本)9781479949182

The Florida Department of Health funds beach water sampling for 34 of Florida's coastal counties. Mote Marine Laboratory, in conjunction with the Gulf of Mexico Coastal Ocean Observing System (GCOOS) developed an automated data harvester that used web scraping technology to capture the reported data from each monitored county and store the data in a MySQL database. The database was queried nightly and the results were used to build XML files that were ingested by GCOOS and published through the GCOOS Data Portal. In early 2013 the Florida Department of Health outsourced their web site to a commercial service provider. The new Healthy Beaches web site used a mash-up of Google Maps and javascript code and no longer returned a standard HTML document. The conversion from traditional web page to dynamic mash-up rendered our data harvester inoperable. Our entire data pipeline had to be completely rebuilt.

关键词： Java Web sites XML cloud computing geophysics computing graphical user interfaces portals query processing relational databases water quality Amazon Cloud Florida Department of Health Florida Healthy Beaches Reports Florida coastal counties GCOOS data portal Google Maps Gulf of Mexico Coastal Ocean Observing System Healthy Beaches Web site outsourcing javascript code Mote Marine Laboratory MySQL database Web page Web scraping technology XML files automated assimilation automated data harvester development beach water sampling data harvester inoperability data pipeline data storage database query dynamic mash-up service provider standard HTML document Browsers Databases HTML Libraries Portals

来源：评论

学校读者我要写书评

暂无评论

Pivot: Fast, Synchronous Mashup Isolation Using Generator Chains 35

Pivot: Fast, Synchronous Mashup Isolation Using Generator Ch...

引用

35th IEEE Symposium on Security and Privacy (SP)

作者： Mickens, James Microsoft Res Paris France

ISBN: (纸本)9781479946860

Pivot is a new javascript isolation framework for web applications. Pivot uses iframes as its low-level isolation containers, but it uses code rewriting to implement synchronous cross-domain interfaces atop the asynchronous cross frame postMessage() primitive. Pivot layers a distributed scheduling abstraction across the frames, essentially treating each frame as a thread which can invoke RPCs that are serviced by external threads. By rewriting javascript call sites, Pivot can detect RPC invocations;Pivot exchanges RPC requests and responses via postMessage(), and it pauses and restarts frames using a novel rewriting technique that translates each frame's javascript code into a restartable generator function. By leveraging both iframes and rewriting, Pivot does not need to rewrite all code, providing an order of-magnitude performance improvement over rewriting-only solutions. Compared to iframe-only approaches, Pivot provides synchronous RPC semantics, which developers typically prefer over asynchronous RPCs. Pivot also allows developers to use the full, unrestricted javascript language, including powerful statements like eval().

关键词： Java Web sites program compilers rewriting systems javascript call sites javascript code javascript isolation framework Pivot RPC invocations RPC requests Web applications asynchronous cross-frame postMessage() primitive code rewriting distributed scheduling abstraction eval() generator chains iframe-only approaches iframes low-level isolation containers order-of-magnitude performance improvement restartable generator function rewriting technique rewriting-only solutions synchronous cross-domain interfaces synchronous mashup isolation unrestricted javascript language Browsers Generators Libraries Reactive power Runtime Satellites Security Pivot Device Component dynamos rewriting systems compilers web applications Browsers Runtime Reactive power satellites websites Earth Viewing Applications Laboratory Java Java programming language Libraries Generator

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：