{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T15:28:48Z","timestamp":1781018928147,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":26,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,3,23]],"date-time":"2026-03-23T00:00:00Z","timestamp":1774224000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Cybersecurity Research Program Flanders","award":["VLAAI2"],"award-info":[{"award-number":["VLAAI2"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,3,23]]},"DOI":"10.1145\/3748522.3779803","type":"proceedings-article","created":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T14:17:49Z","timestamp":1781014669000},"page":"1301-1310","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["In the Shadows I Trust: Shadow Execution Analysis Support for a Datalog-Based IAST Framework"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2083-1285","authenticated-orcid":false,"given":"Angel Luis","family":"Scull Pupo","sequence":"first","affiliation":[{"name":"Software Languages Lab, Vrije Universiteit Brussel, Brussels, Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9966-6421","authenticated-orcid":false,"given":"Elisa","family":"Gonzalez Boix","sequence":"additional","affiliation":[{"name":"Software Languages Lab, Vrije Universiteit Brussel, Brussels, Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3559522"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24206-9_16"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00096"},{"key":"e_1_3_2_1_4_1","first-page":"260","article-title":"Linvail: A General-Purpose Platform for Shadow Execution of JavaScript. In Proceedings of the 23rd IEEE International Conference on Software Analysis, Evolution, and Reengineering (SANER 2016)","author":"Christophe Laurent","year":"2016","unstructured":"Laurent Christophe, Wolfgang De Meuter, Elisa Gonzalez Boix, and Coen De Roover. 2016. Linvail: A General-Purpose Platform for Shadow Execution of JavaScript. In Proceedings of the 23rd IEEE International Conference on Software Analysis, Evolution, and Reengineering (SANER 2016). IEEE CS, 260\u2013270. 23rd IEEE International Conference on Software Analysis, Evolution, and Reengineering (SANER2016) ; Conference date: 14-03-2016 Through 18-03-2016.","journal-title":"IEEE CS"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813684"},{"key":"e_1_3_2_1_6_1","volume-title":"Proceedings of the USENIX Symposium on Internet Technologies and Systems on USENIX Symposium on Internet Technologies and Systems","author":"Gong Li","year":"1997","unstructured":"Li Gong, Marianne Mueller, Hemma Prafullchandra, and Roland Schemers. 1997. Going beyond the sandbox: an overview of the new security architecture in the javaTM development Kit 1.2. In Proceedings of the USENIX Symposium on Internet Technologies and Systems on USENIX Symposium on Internet Technologies and Systems (Monterey, California) (USITS'97). USENIX Association, USA, 10."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.4230\/LIPIcs.ECOOP.2017.15"},{"key":"e_1_3_2_1_8_1","volume-title":"Souffl\u00e9: On Synthesis of Program Analyzers","author":"Jordan Herbert","year":"2016","unstructured":"Herbert Jordan, Bernhard Scholz, and Pavle Suboti\u0107. 2016. Souffl\u00e9: On Synthesis of Program Analyzers. In Computer Aided Verification, Swarat Chaudhuri and Azadeh Farzan (Eds.). Springer International Publishing, Cham, 422\u2013430."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2878020"},{"key":"e_1_3_2_1_10_1","volume-title":"Portable and Efficient Runtime Monitoring of JavaScript Applications Using Virtual Machine Layering. In ECOOP 2014 - Object-Oriented Programming, Richard Jones (Ed.). Springer Berlin Heidelberg","author":"Lavoie Erick","year":"2014","unstructured":"Erick Lavoie, Bruno Dufour, and Marc Feeley. 2014. Portable and Efficient Runtime Monitoring of JavaScript Applications Using Virtual Machine Layering. In ECOOP 2014 - Object-Oriented Programming, Richard Jones (Ed.). Springer Berlin Heidelberg, Berlin, Heidelberg, 541\u2013566."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1273442.1250746"},{"key":"e_1_3_2_1_12_1","volume-title":"Ongoing Supply Chain Attack Involving npm Packages. https:\/\/www.csa.gov.sg\/alerts-and-advisories\/advisories\/ad-2025-019. Accessed","author":"Cyber Security Agency of Singapore. 2025.","year":"2025","unstructured":"Cyber Security Agency of Singapore. 2025. Ongoing Supply Chain Attack Involving npm Packages. https:\/\/www.csa.gov.sg\/alerts-and-advisories\/advisories\/ad-2025-019. Accessed: 22 September 2025."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2544173.2509542"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/SANER56733.2023.00054"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510104"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2491411.2491447"},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the 2012 USENIX Conference on Annual Technical Conference (Boston, MA) (USENIX ATC'12). USENIX Association, USA, 28","author":"Serebryany Konstantin","year":"2012","unstructured":"Konstantin Serebryany, Derek Bruening, Alexander Potapenko, and Dmitry Vyukov. 2012. AddressSanitizer: a fast address sanity checker. In Proceedings of the 2012 USENIX Conference on Annual Technical Conference (Boston, MA) (USENIX ATC'12). USENIX Association, USA, 28."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/1247360.1247362"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3589334.3645579"},{"key":"e_1_3_2_1_20_1","volume-title":"npm Supply Chain Attack via Open Source maintainer compromise. https:\/\/snyk.io\/es\/blog\/npm-supply-chain-attack-via-open-source-maintainer-compromise\/. Accessed","year":"2025","unstructured":"Snyk. 2025. npm Supply Chain Attack via Open Source maintainer compromise. https:\/\/snyk.io\/es\/blog\/npm-supply-chain-attack-via-open-source-maintainer-compromise\/. Accessed: 22 September 2025."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1111320.1111070"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3178372.3179527"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2010.154"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064211"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/J.SCICO.2025.103264"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2015.19"}],"event":{"name":"SAC '26: 41st ACM\/SIGAPP Symposium on Applied Computing","location":"Grand Hotel Palace Thessaloniki Greece","acronym":"SAC '26","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"]},"container-title":["Proceedings of the 41st ACM\/SIGAPP Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3748522.3779803","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T14:51:08Z","timestamp":1781016668000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3748522.3779803"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,23]]},"references-count":26,"alternative-id":["10.1145\/3748522.3779803","10.1145\/3748522"],"URL":"https:\/\/doi.org\/10.1145\/3748522.3779803","relation":{},"subject":[],"published":{"date-parts":[[2026,3,23]]},"assertion":[{"value":"2026-06-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}