Section: New Software and Platforms

IFJS

Infomation Flow monitor inlining for JavaScript

Keyword: Cybersecurity

Functional Description: The IFJS compiler is applied to JavaScript code. The compiler generates JavaScript code instrumented with checks to secure code. The compiler takes into account special features of JavaScript such as implicit type coercions and programs that actively try to bypass the inlined enforcement mechanisms. The compiler guarantees that third-party programs cannot (1) access the compiler internal state by randomizing the names of the resources through which it is accessed and (2) change the behaviour of native functions that are used by the enforcement mechanisms inlined in the compiled code.

• Contact: Tamara Rezk

• URL: http://www-sop.inria.fr/indes/ifJS/