Articles tagged "appsec"
2019
A proposal for the web: improving security with versioned baseline defaults
A proposal for versioned web-platform defaults that make secure behaviour easier to adopt.
To secure systems of the future, we must rethink our notions of "Environment" and "Operating System"
How operating systems, language runtimes, and user environments could divide security responsibilities.
Skipping expensive security checks with JIT compilation
How trusted compilation of memory-safe code could avoid duplicated runtime security checks.
2018
Timing attacks: why being efficient can leak information
How execution time can leak sensitive information and when constant-time operations matter.
Escape-bypassing language injection: exploiting multiple-level language embedding
How nested languages can bypass escaping that protects only one level of embedding.