Static Verification for Web Scripting Languages
Modern web applications are developed largely in so-called "dynamic" or "scripting" languages like JavaScript, PHP, and Python. In addition to being untyped, these languages sport several features -- run-time type tests, value-indexed dictionaries, and dynamic code loading -- that make it easy to rapidly prototype and to glue together applications from disparate components. As applications grow large, however, the lack of static typing makes it difficult to achieve reliability and maintainability. In the first part of this talk, Ravi Chugh, Ph.D student at UC San Diego will present Dependent JavaScript (DJS), a statically typed dialect that facilitates precise reasoning about JavaScript and other web scripting languages In the second part of his talk, Chugh will show how to build on DJS to verify security properties of third-party JavaScript. After describing preliminary experiments that use DJS to author provably-secure JavaScript browser extensions, he will identify several future directions of work that will lead to a platform for fine-grained web security.
Auf dieser Seite können Sie das Online-Video Static Verification for Web Scripting Languages mit der Dauer stunde minuten sekunde in guter Qualität ansehen, das der Benutzer UW Video 13 November 2013 hochgeladen hat, den Link mit Freunden und Bekannten teilen, dieses Video wurde auf Youtube bereits 202 Mal angesehen und es wurde von 2 den Zuschauern gefallen. Viel Spaß beim Betrachtenden Zuschauern gefallen!
