JavaScript Supply Chain Security Analysis
COM3 Basement
MR92, COM3 B1-15
Abstract
JavaScript is one of the most widely used programming languages. Modern software critically relies on reusable, open source software packages. They enable fast development of advanced applications, but also introduce major challenges with security vulnerabilities and breaking changes. In this talk, I will describe ongoing work on building new JavaScript program analysis tools that can assist library and application developers by providing accurate information about how dependencies are being used.
Bio
Anders Møller is professor at Aarhus University. His main research area is program analysis. He has received a Consolidator Grant from the European Research Council (ERC), the Danish Elite Research Prize 2020, and seven times a Distinguished Paper Award from ACM SIGSOFT or SIGPLAN. He is vice-chair of ACM SIGPLAN and associate editor of ACM TOPLAS and ACM TOSEM. Together with former PhD students he is co-founder of Coana (https://coana.tech/) that aims to make software more robust and secure using program analysis technology. For more information, see https://cs.au.dk/~amoeller/.