Code-Based Vulnerability Detection in Node.js Applications: How far are we?
Abstract
With one of the largest available collection of reusable packages, the JavaScript runtime environment Node.js is one of the most popular programming application. With recent work showing evidence that known vulnerabilities are prevalent in both open source and industrial software, we propose and implement a viable code-based vulnerability detection tool for Node.js applications. Our case study lists the challenges encountered while implementing our Node.js vulnerable code detector.
BibTeX
@inproceedings{Chinthanet-al:ASE20,
author = {Bodin Chinthanet and
Serena Elisa Ponta and
Henrik Plate and
Antonino Sabetta and
Raula Gaikovina Kula and
Takashi Ishio and
Kenichi Matsumoto},
title = {{Code-Based} Vulnerability Detection in Node.js Applications: How far are we?},
booktitle = {ASE},
pages = {1199--1203},
publisher = {{IEEE}},
year = {2020},
}