{"id":"https://openalex.org/W2165304392","doi":"https://doi.org/10.1145/1542476.1542483","title":"Staged information flow for javascript","display_name":"Staged information flow for javascript","publication_year":2009,"publication_date":"2009-06-15","ids":{"openalex":"https://openalex.org/W2165304392","doi":"https://doi.org/10.1145/1542476.1542483","mag":"2165304392"},"language":"en","primary_location":{"id":"doi:10.1145/1542476.1542483","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1542476.1542483","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGPLAN Conference on Programming Language Design and Implementation","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004759757","display_name":"Ravi Chugh","orcid":"https://orcid.org/0000-0002-1339-2889"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ravi Chugh","raw_affiliation_strings":["University of California, San Diego, San Diego, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060274939","display_name":"Jeffrey A. Meister","orcid":null},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeffrey A. Meister","raw_affiliation_strings":["University of California, San Diego, San Diego, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002412544","display_name":"Ranjit Jhala","orcid":"https://orcid.org/0000-0002-1802-9421"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ranjit Jhala","raw_affiliation_strings":["University of California, San Diego, San Diego, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043665959","display_name":"Sorin Lerner","orcid":"https://orcid.org/0000-0003-3957-0628"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sorin Lerner","raw_affiliation_strings":["University of California, San Diego, San Diego, CA, USA"],"affiliations":[{"raw_affiliation_string":"University of California, San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5004759757"],"corresponding_institution_ids":["https://openalex.org/I36258959"],"apc_list":null,"apc_paid":null,"fwci":40.5458,"has_fulltext":false,"cited_by_count":236,"citation_normalized_percentile":{"value":0.99855714,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"50","last_page":"62"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.96051424741745},{"id":"https://openalex.org/keywords/unobtrusive-javascript","display_name":"Unobtrusive JavaScript","score":0.9113433361053467},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8841531276702881},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.6399316787719727},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.5384727716445923},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.490059494972229},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.46693816781044006},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4117988348007202},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.36914584040641785},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.36645179986953735},{"id":"https://openalex.org/keywords/rich-internet-application","display_name":"Rich Internet application","score":0.3198815584182739},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.25472742319107056}],"concepts":[{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.96051424741745},{"id":"https://openalex.org/C198240166","wikidata":"https://www.wikidata.org/wiki/Q2298909","display_name":"Unobtrusive JavaScript","level":4,"score":0.9113433361053467},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8841531276702881},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.6399316787719727},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5384727716445923},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.490059494972229},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.46693816781044006},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4117988348007202},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.36914584040641785},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.36645179986953735},{"id":"https://openalex.org/C103048170","wikidata":"https://www.wikidata.org/wiki/Q725485","display_name":"Rich Internet application","level":3,"score":0.3198815584182739},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.25472742319107056},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1542476.1542483","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1542476.1542483","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGPLAN Conference on Programming Language Design and Implementation","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.205.1627","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.205.1627","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://cseweb.ucsd.edu/%7Erchugh/research/pldi09-sif.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7099999785423279}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W1491237615","https://openalex.org/W1495495588","https://openalex.org/W1499241274","https://openalex.org/W1508603515","https://openalex.org/W1509382141","https://openalex.org/W1528226162","https://openalex.org/W1565113942","https://openalex.org/W1828367272","https://openalex.org/W1867052887","https://openalex.org/W1963569294","https://openalex.org/W1966982815","https://openalex.org/W1977764760","https://openalex.org/W1993941352","https://openalex.org/W2034379323","https://openalex.org/W2040669676","https://openalex.org/W2056740472","https://openalex.org/W2060857434","https://openalex.org/W2064541384","https://openalex.org/W2085925880","https://openalex.org/W2100666033","https://openalex.org/W2102970979","https://openalex.org/W2129345992","https://openalex.org/W2132185316","https://openalex.org/W2132461047","https://openalex.org/W2132733485","https://openalex.org/W2134646643","https://openalex.org/W2139799388","https://openalex.org/W2153578567","https://openalex.org/W2156249516","https://openalex.org/W2156549049","https://openalex.org/W2158449625","https://openalex.org/W2166510103","https://openalex.org/W2168563136","https://openalex.org/W4238764625","https://openalex.org/W4247465700","https://openalex.org/W4249000722","https://openalex.org/W4299301436","https://openalex.org/W6629287744"],"related_works":["https://openalex.org/W650647575","https://openalex.org/W597036300","https://openalex.org/W2477981260","https://openalex.org/W36303035","https://openalex.org/W2617623045","https://openalex.org/W4231812305","https://openalex.org/W2505509890","https://openalex.org/W827014118","https://openalex.org/W2500345013","https://openalex.org/W2739095887"],"abstract_inverted_index":{"Modern":[0],"websites":[1,21],"are":[2,97,138],"powered":[3],"by":[4],"JavaScript,":[5,106,194],"a":[6,59,81,109,130,152,176],"flexible":[7],"dynamic":[8],"scripting":[9],"language":[10],"that":[11,80,93,137,185,196],"executes":[12],"in":[13,19,28,89,126],"client":[14],"browsers.":[15],"A":[16],"common":[17],"paradigm":[18],"such":[20],"is":[22,146,189],"to":[23,50,58,91,128],"include":[24],"third-party":[25],"JavaScript":[26,84,169],"code":[27,37,125,143],"the":[29,46,51,56,64,78,87,122,141,200],"form":[30],"of":[31,83,133,168,178,202],"libraries":[32],"or":[33,48],"advertisements.":[34],"If":[35],"this":[36],"were":[38],"malicious,":[39],"it":[40,145],"could":[41,67],"read":[42],"sensitive":[43],"information":[44,113,119,157,187],"from":[45,62],"page":[47],"write":[49],"location":[52],"bar,":[53],"thus":[54],"redirecting":[55],"user":[57],"malicious":[60],"page,":[61],"which":[63],"entire":[65],"machine":[66],"be":[68],"compromised.":[69],"We":[70,149,159],"present":[71],"an":[72],"information-flow":[73,203],"based":[74],"approach":[75],"for":[76,111,155,163,193],"inferring":[77],"effects":[79],"piece":[82],"has":[85],"on":[86,140,175],"website":[88],"order":[90,127],"ensure":[92],"key":[94],"security":[95],"properties":[96],"not":[98],"violated.":[99],"To":[100],"handle":[101],"dynamically":[102,147],"loaded":[103],"and":[104,170,191,195],"generated":[105],"we":[107],"propose":[108],"framework":[110,117,154],"staging":[112,156],"flow":[114,120,188],"properties.":[115],"Our":[116,182],"propagates":[118],"through":[121],"currently":[123],"known":[124],"compute":[129],"minimal":[131],"set":[132],"syntactic":[134],"residual":[135],"checks":[136],"performed":[139],"remaining":[142],"when":[144],"loaded.":[148],"have":[150],"implemented":[151],"prototype":[153],"flow.":[158],"describe":[160],"our":[161,172,197],"techniques":[162],"handling":[164],"some":[165],"difficult":[166],"features":[167],"evaluate":[171],"system's":[173],"performance":[174],"variety":[177],"large":[179],"real-world":[180],"websites.":[181],"experiments":[183],"show":[184],"static":[186],"feasible":[190],"efficient":[192],"technique":[198],"allows":[199],"enforcement":[201],"policies":[204],"with":[205],"almost":[206],"no":[207],"run-time":[208],"overhead.":[209]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":10},{"year":2017,"cited_by_count":11},{"year":2016,"cited_by_count":18},{"year":2015,"cited_by_count":21},{"year":2014,"cited_by_count":31},{"year":2013,"cited_by_count":28},{"year":2012,"cited_by_count":35}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}