On the public citation graph

On Detecting and Measuring Exploitable JavaScript Functions in Real-world Applications

https://doi.org/10.1145/3630253
0 signed · 42 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1002/cpe.3532openalex-snapshot
CLORIFI: software vulnerability discovery using code clone verification
inferredcites →https://doi.org/10.1007/978-3-540-79124-9_10openalex-snapshot
Pex–White Box Test Generation for .NET
inferredcites →https://doi.org/10.1007/s10207-020-00537-0openalex-snapshot
DAPP: automatic detection and analysis of prototype pollution vulnerability in Node.js modules
inferredcites →https://doi.org/10.1007/s10664-015-9368-6openalex-snapshot
Development nature matters: An empirical study of code clones in JavaScript applications
inferredcites →https://doi.org/10.1007/s10664-021-09951-xopenalex-snapshot
Lags in the release, adoption, and propagation of npm vulnerability fixes
inferredcites →https://doi.org/10.1007/s11277-015-3152-1openalex-snapshot
Software Vulnerability Detection Methodology Combined with Static and Dynamic Analysis
inferredcites →https://doi.org/10.1007/s11859-019-1380-zopenalex-snapshot
A Method for Software Vulnerability Detection Based on Improved Control Flow Graph
inferredcites →https://doi.org/10.1016/j.jksuci.2023.01.009openalex-snapshot
An Enhanced Static Taint Analysis Approach to Detect Input Validation Vulnerability
inferredcites →https://doi.org/10.1016/j.procs.2018.08.227openalex-snapshot
Static Taint Analysis Traversal with Object Oriented Component for Web File Injection Vulnerability Pattern Detection
inferredcites →https://doi.org/10.1109/eurosp48549.2020.00012openalex-snapshot
VGRAPH: A Robust Vulnerable Code Clone Detection System Using Code Property Triplets
inferredcites →https://doi.org/10.1109/iccq53703.2022openalex-snapshot
2022 International Conference on Code Quality (ICCQ)
inferredcites →https://doi.org/10.1109/icmla.2016.0185openalex-snapshot
Semantic Clone Detection Using Machine Learning
inferredcites →https://doi.org/10.1109/icsme.2018.00067openalex-snapshot
Towards Smoother Library Migrations: A Look at Vulnerable Dependency Migrations at Function Level for npm JavaScript Packages
inferredcites →https://doi.org/10.1109/msp.2004.9openalex-snapshot
USENIX Security Symposium
inferredcites →https://doi.org/10.1109/raise.2019.00010openalex-snapshot
Challenging Machine Learning Algorithms in Predicting Vulnerable JavaScript Functions
inferredcites →https://doi.org/10.1109/saner.2018.8330250openalex-snapshot
LICCA: A tool for cross-language clone detection
inferredcites →https://doi.org/10.1109/sp.2010.38openalex-snapshot
A Symbolic Execution Framework for JavaScript
inferredcites →https://doi.org/10.1109/sp.2012.13openalex-snapshot
ReDeBug: Finding Unpatched Code Clones in Entire OS Distributions
inferredcites →https://doi.org/10.1109/trustcom50675.2020.00049openalex-snapshot
Program Slice Based Vulnerable Code Clone Detection
inferredcites →https://doi.org/10.1109/tse.2002.1019480openalex-snapshot
CCFinder: a multilinguistic token-based code clone detection system for large scale source code
inferredcites →https://doi.org/10.1109/tse.2018.2878020openalex-snapshot
Platform-Independent Dynamic Taint Analysis for JavaScript
inferredcites →https://doi.org/10.1109/tse.2021.3105556openalex-snapshot
Modeling Functional Similarity in Source Code With Graph-Based Siamese Networks
inferredcites →https://doi.org/10.1145/2491411.2491447openalex-snapshot
Jalangi: a selective record-replay and dynamic analysis framework for JavaScript
inferredcites →https://doi.org/10.1145/2884781.2884877openalex-snapshot
SourcererCC
inferredcites →https://doi.org/10.1145/3196398.3196401openalex-snapshot
On the impact of security vulnerabilities in the npm package dependency network
inferredcites →https://doi.org/10.1145/3196398.3196431openalex-snapshot
Deep learning similarities from different representations of source code
inferredcites →https://doi.org/10.1145/3238147.3238159openalex-snapshot
ReScue: crafting regular expression DoS attacks
inferredcites →https://doi.org/10.1145/3324884.3421838openalex-snapshot
Code-based vulnerability detection in Node.js applications
inferredcites →https://doi.org/10.1145/3395363.3397362openalex-snapshot
Functional code clone detection with syntax and semantics fusion learning
inferredcites →https://doi.org/10.1145/3468264.3468542openalex-snapshot
Detecting Node.js prototype pollution vulnerabilities via object lookup analysis
inferredcites →https://doi.org/10.1145/3488932.3497769openalex-snapshot
On Measuring Vulnerable JavaScript Functions in the Wild
inferredcites →https://doi.org/10.14722/ndss.2021.23055openalex-snapshot
Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1016/j.infsof.2026.108211openalex-snapshot
From coverage to causes: Data-centric fuzzing for Javascript engines
inferred← citeshttps://doi.org/10.1109/aiware69974.2025.00017openalex-snapshot
Beyond Code Explanations: a Ray of Hope for Cross-Language Vulnerability Repair
inferred← citeshttps://doi.org/10.1109/esic64052.2025.10962794openalex-snapshot
ULTRON: A Multi-Functional, Privacy-Centric Framework for Reconnaissance and Security Analysis on the Dark Web
inferred← citeshttps://doi.org/10.1109/saner-c67878.2026.00036openalex-snapshot
Broken Access Control Risks in Open Source Javascript Projects: A Security Analysis
inferred← citeshttps://doi.org/10.1109/telfor63250.2024.10819156openalex-snapshot
Improvements in information security using the example of a web application for automatic class schedule generation
inferred← citeshttps://doi.org/10.1145/3708821.3733912openalex-snapshot
SoK: A Literature and Engineering Review of Regular Expression Denial of Service (ReDoS)
inferred← citeshttps://doi.org/10.1145/3793302.3793574openalex-snapshot
The Quiet Contributions: Insights into AI-Generated Silent Pull Requests
inferred← citeshttps://doi.org/10.1145/3832783.3837545openalex-snapshot
ReSEDA: Automatic and Precise Program-Level ReDoS Triage via Interprocedural Taint Analysis and Agentic Exploit Generation
inferred← citeshttps://doi.org/10.2139/ssrn.5686730openalex-snapshot
From Coverage to Causes: Data-Centric Fuzzing for JavaScript Engines
inferred← citeshttps://doi.org/10.2139/ssrn.5686732openalex-snapshot
From Coverage to Causes: Data-Centric Fuzzing for JavaScript Engines
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.