JASMaint: Portable Multi-language Taint Analysis for the Web
summary
JASMaint implements a portable taint analysis that instruments both JavaScript and WebAssembly source code and coordinates taint exchange with a lightweight orchestrator so taint follows across function calls, linear memory and shared globals. The prototype uses source-level rewrites and language-specific analyses (JavaScript and Wasm) and evaluates on a benchmark suite, showing 0.003%–56.20% reduction in overtainting at the cost of 1.14x–1.61x performance overhead versus an over-approximating model-based baseline.
AI-written summary · about
chapters (10)
- 0:00JASM and taint analysis intro
- 3:13Dynamic taint analysis
- 5:18Multi-language limits
- 6:01Portable taint analysis design
- 7:04JavaScript taint analysis
- 9:14WebAssembly taint analysis
- 11:22Orchestrating JavaScript and WebAssembly taint tracking
- 13:31Runtime overhead evaluation
- 18:31Summary and future
- 19:17Q&A: Tables excluded
related talks
42mAdventures in Making Wasm Fast and More Secure
16mHardTaint: Production-Run Dynamic Taint Analysis via Selective Hardware Tracing
38mStatic Code Analysis - A Behind-the-scenes Look
34mKeep your code safe during the development path using OS tools
37mA Static Tainting Analysis Method for Aspect-Oriented Programs
29mWASM in the Kernel: evolving threat detection at runtime
17mWaltzz: WebAssembly Runtime Fuzzing with Stack-Invariant Transformation
29mEnter the Sandbox: JS on Wasm