AJACS

Alan Schmitt visited Imperial College for a week of work with Philippa Gardner on skeletal semantics, and with Thomas Wood on JSExplain.

Philippa Gardner visited Inria Rennes to work on skeletal semantics with Martin Bodin, Thomas Jensen, and Alan Schmitt.

Tutorial given by Nataliia Bielova at The Web Conference with Pierre Laperdrix.

This TC39 meeting was organized by Philippa Gardner. Both Philippa Gardner and Alan Schmitt attended the meeting.

As part of this meeting (link) organized by Philippa Gardner and Alan Schmitt, Alan Schmitt gave a talk on "From JSCert to JSExplain and Beyond" (slides).

Philippa Gardner visited Inria Rennes to work on formal semantics with Thomas Jensen and Alan Schmitt.

Andreas Rossberg visited Rennes to give a talk on WebAssembly.

Progress report on JSExplain by Alan Schmitt

As part of this meeting, Nataliia Bielova presented her work on "Browser fingerprinting the detection of Extensions". See the program here and more information here.

As part of this meeting, Philippa Gardner presented a vision talk titled "Towards Trustworthy Verification of JavaScript"

• A Taxonomy of Information Flow Monitors
• On the Content Security Policy Violations due to the Same Origin Policy
• Automated Verification for Secure Messaging Protocols and their Implementations: A Symbolic and Computational Approach
• Control What You Include! Server-Side Protection against Third Party Web Tracking
• Another look inside Multiple Facets
• Browser Extension and Login-Leak Experiment

Progress report on JSExplain by Alan Schmitt

Alan Schmitt visited Imperial College for a week of work with Philippa Gardner, Thomas Wood, and Petar Maksimović. During the visit, Alan presented the current status of JSExplain. [slides]

As part of this 3 days standardization meeting, Alan Schmitt presented the current work on JSExplain. [slides]

Event link

As part of this 4 days meeting, attended by several members of Ajacs, Arthur Charguéraud gave a talk on “An Interactive Debugger for the JavaScript Specification”. Here are the video and the slides.

• A study of JavaScript Constructs used in Top Alex Site
• Hybrid Monitoring of Attacker Knowledge
• CONIKS and Secure Messaging
• Certified Desugaring of JavaScript
• Frames and Shapes
• Defensive JS in JSCert
• Towards Tractable Verification of JavaScript Programs

Please see this page.

• Generalizing permissive-upgrade in dynamic information flow analysis
• Hybrid Information Flow monitoring against Web tracking
• Certified Abstract Interpretation with Pretty-Big-Step Semantics
• Hybrid Typing Secure Information Flow in a Core of JavaScript
• The Same Origin Policy