English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

Web applications written in JavaScript are regularly used for dealing withsensitive or personal data. Consequently, reasoning about their securityproperties has become an important problem, which is made very difficult by thehighly dynamic nature of the language, particularly its support for runtimecode generation. As a first step towards dealing with this, we propose toinvestigate security analyses for languages with more principled forms ofdynamic code generation. To this end, we present a static information flowanalysis for a dynamically typed functional language with prototype-basedinheritance and staged metaprogramming. We prove its soundness, implement itand test it on various examples designed to show its relevance to provingsecurity properties, such as noninterference, in JavaScript. To our knowledge,this is the first fully static information flow analysis for a language withstaged metaprogramming, and the first formal soundness proof of a CFA-basedinformation flow analysis for a functional programming language.

Information Flow Analysis for a Dynamically Typed Functional Language with Staged Metaprogramming