{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T04:14:35Z","timestamp":1781064875702,"version":"3.54.1"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Czech Technical University"},{"DOI":"10.13039\/501100000781","name":"European Research Council","doi-asserted-by":"publisher","award":["695412"],"award-info":[{"award-number":["695412"]}],"id":[{"id":"10.13039\/501100000781","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CCF-1715153"],"award-info":[{"award-number":["CCF-1715153"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2020,12,1]]},"DOI":"10.1109\/tse.2018.2878020","type":"journal-article","created":{"date-parts":[[2018,10,26]],"date-time":"2018-10-26T19:43:56Z","timestamp":1540583036000},"page":"1364-1379","source":"Crossref","is-referenced-by-count":41,"title":["Platform-Independent Dynamic Taint Analysis for JavaScript"],"prefix":"10.1109","volume":"46","author":[{"given":"Rezwana","family":"Karim","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1862-3498","authenticated-orcid":false,"given":"Frank","family":"Tip","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alena","family":"Sochurkova","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Koushik","family":"Sen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"278","article-title":"An information flow monitor-inlining compiler for securing a core of JavaScript","author":"santos","year":"2014","journal-title":"Proc 29th IFIP TC 11 Int Conf ICT Syst Secur Privacy Protection"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2010.21"},{"key":"ref33","article-title":"Virtual values for taint and information flow analysis","author":"kannan","year":"2016","journal-title":"Proc Workshop Meta-Program Techn Reflection"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866339"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.43"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-92612-4_8"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54792-8_9"},{"key":"ref36","article-title":"Cross site scripting prevention with dynamic data tainting and static analysis","author":"vogt","year":"2007","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3139337.3139341"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2661088.2661097"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065034"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2491411.2491447"},{"key":"ref12","author":"jaygarl","year":"2014","journal-title":"Professional Tizen Application Development"},{"key":"ref13","author":"cantelon","year":"2014","journal-title":"Node js in Action"},{"key":"ref14","year":"2011"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/359636.359712"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542486"},{"key":"ref17","first-page":"146","article-title":"Static information flow analysis with handling of implicit flows and a study on effects of implicit flows vs explicit flows","author":"liu","year":"2010","journal-title":"Proc European Conf Software Maintenance and Reengineering"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2001420.2001442"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594299"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2554850.2554909"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1554339.1554353"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2012.19"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382274"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2093328.2093331"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-54455-6_3"},{"key":"ref5","first-page":"393","article-title":"TaintDroid: An information-flow tracking system for realtime privacy monitoring on smartphones","author":"enck","year":"2010","journal-title":"Proc 9th USENIX Symp Operating Syst Des Implementation"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813684"},{"key":"ref7","first-page":"321","article-title":"CrowdFlow: Efficient information flow security","author":"kerschbaumer","year":"2013","journal-title":"Proc 16th Inf Flow Secur Conf"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23071"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-25141-2_8"},{"key":"ref1","first-page":"52","article-title":"The eval that men do - A large-scale study of the use of eval in JavaScript applications","author":"richards","year":"2011","journal-title":"Proc Europ Conf Object-Oriented Programming"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1273463.1273490"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542483"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"key":"ref24","article-title":"Programming languages for information security","author":"zdancewic","year":"2002"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2483760.2483788"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1814217.1814220"},{"key":"ref25","article-title":"Dynamic information flow analysis for featherweight JavaScript","author":"austin","year":"2011"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/32\/9290149\/8511058-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/9290149\/08511058.pdf?arnumber=8511058","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T14:34:37Z","timestamp":1651070077000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8511058\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,12,1]]},"references-count":39,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/tse.2018.2878020","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,12,1]]}}}