一句话：面向 JavaScript 库的污点规范提取，以支撑细粒度、可扩展的静态安全分析。
现代 JavaScript 应用大量依赖第三方库，尤其在 Node.js 平台上，漏洞可能引发跨站脚本和命令注入等严重安全问题。现有静态分析工具要么过于粗糙，仅检查包依赖结构而忽略数据流，要么依赖人工为最流行库编写的污点规范来保证分析可扩展性。本文围绕为 JavaScript 库获取污点规范这一问题，标题表明其目标是提取这些规范，从而在细粒度数据流安全分析中减少对人工规范的依赖。摘要未给出具体提取算法、实现与实验结果的细节。
Modern JavaScript applications extensively depend on third-party libraries. Especially for the Node.js platform, vulnerabilities can have severe consequences to the security of applications, resulting in, e.g., cross-site scripting and command injection attacks. Existing static analysis tools that have been developed to automatically detect such issues are either too coarse-grained, looking only at package dependency structure while ignoring dataflow, or rely on manually written taint specifications for the most popular libraries to ensure analysis scalability.
@inproceedings{paperbot5562,
title = {Extracting taint specifications for JavaScript libraries},
author = {Cristian-Alexandru Staicu and Martin Toldam Torp and Max Schäfer and Anders Møller and Michael Pradel},
booktitle = {ICSE},
year = {2020},
doi = {10.1145/3377811.3380390}
}