SecureJS Compiler: Portable Memory Isolation in JavaScript - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2021

SecureJS Compiler: Portable Memory Isolation in JavaScript

Tamara Rezk
  • Function : Author
  • PersonId : 949476
  • IdRef : 136831605
Manuel Serrano


The memory isolation mechanism plays an essential role to provide security enforcement in JavaScript programs. Existing secure interaction libraries such as Google Caja, SES, and VM2 rely on built-in memory isolation mechanisms provided by Node.js and browsers, yet most of the other engines such as JerryScript and Duktape, which are implementations for IoT devices, do not support such isolation mechanisms.In this paper, we report about the design and implementation of SecureJS, a portable JavaScript-to-JavaScript compiler that enforces memory isolation. As it only uses standard features, the compiled code it generates can be used by any JavaScript engine. We validated empirically the semantics preservation and memory isolation of SecureJS compiled programs by using 10,490 test programs of ECMAScript Test262 test suite. We also developed a novel experiment to evaluate memory isolation property of compiled code by instrumented JavaScript engines.
Fichier principal
Vignette du fichier
final.pdf (752.47 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03090348 , version 1 (29-12-2020)



Yoonseok Ko, Tamara Rezk, Manuel Serrano. SecureJS Compiler: Portable Memory Isolation in JavaScript. SAC 2021 - 36th ACM/SIGAPP Symposium On Applied Computing, Mar 2021, Gwangju / Virtual, South Korea. ⟨10.1145/3412841.3442001⟩. ⟨hal-03090348⟩
237 View
417 Download



Gmail Mastodon Facebook X LinkedIn More