TAJ: effective taint analysis of web applications
By Omer Tripp, Marco Pistoia, Stephen J. Fink, Manu Sridharan, Omri Weisman. ACM-SIGPLAN Symposium on Programming Language Design and Implementation, 2009
414 citations recorded by the source corpus.
Subfields: Artificial Intelligence, Information Systems, Signal Processing
View Paper: https://www.semanticscholar.org/paper/553996894a8fd129633a99de964ab03479500b92
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Wenke Lee
- Engin Kirda
- Christopher Krügel
- Giovanni Vigna
- Armando Solar-Lezama
- Alvin Cheung
- Damien Octeau
- Manuel Egele
In Information Systems
- Christopher Krügel
- Giovanni Vigna
- Tégawendé F. Bissyandé
- Yves Le Traon
- Jacques Klein
- Damien Octeau
- Alexandre Bartel
- Siegfried Rasthofer
In Signal Processing
- Wenke Lee
- Christopher Krügel
- Engin Kirda
- Giovanni Vigna
- Damien Octeau
- Yves Le Traon
- Jacques Klein
- Alexandre Bartel
Citations in the corpus
- PiOS: Detecting Privacy Leaks in iOS Applications (2011, background): “[18] is to make static taint analysis scale to large real-world applications.”
- CHEX: statically vetting Android apps for component hijacking vulnerabilities (2012, methodology): “built an industrial strength static taint analysis tool [32].”
- SCanDroid: Automated Security Certification of Android (2009, methodology): “Next, Android provides some native libraries for graphics, database management, and web browser functionality, which can be called through Java interfaces.”
- Information Flow Analysis of Android Applications in DroidSafe (2015, methodology): “TAJ [42] focuses on Java web application and employs a program slicing technique combined with a selective object-sensitive analysis.”
- Optimizing database-backed applications with query synthesis (2013, result): “This analysis is similar to taint analysis [35], and the obtained information allows the system to remove regions of code that do not manipulate persistent data and thus can be ignored for our purpose.”
- SmartCheck: Static Analysis of Ethereum Smart Contracts (2018, methodology): “…information [Wög05] us-ing algorithms such as control-and dataflow analysis (syn-onym, constant, and type propagation [ASU07]), taint analysis [TPF + 09], symbolic execution, abstract interpretation; (3) vulnerability detection w.r.t. a database of patterns, which define vulnerability criteria in…”
- IccTA: Detecting Inter-Component Privacy Leaks in Android Apps (2015, methodology): “TAJ [43] and Andromeda [42] uses the same taint analysis technique to identify privacy leaks in web applications.”