JavaScript-related Paper Collection

This repository hosts the papers on JavaScript analysis, testing, verification, etc.

Contents

• Symbolic Execution
  • Kudzu (S&P 2010)
  • Jalangi (ESEC/FSE 2013)
  • SymJS (ESEC/FSE 2014)
  • Cosette (PPDP 2018)
  • Explode.js (PLDI 2025)
• Abstract Interpretation
  • General Frameworks
    • TAJS (SAS 2009)
    • JSAI (ESEC/FSE 2014)
    • Determinacy Analysis (PLDI 2013)
  • String Domain
    • Regular Expression Domain (DLS 2016)
    • String Domains Dynamic Field Access (CC 2014)
  • Other
    • Graph.js: Multiversion Dependence Graph (PLDI 2024)
    • Event-based Analysis (OOPSLA 2015)
• Verification
  • JaVert (POPL 2018)
  • JaVert 2.0 (POPL 2019)
• Security
  • Taint-style Vulnerability
    • Graph.js (PLDI 2024)
    • Explode.js (PLDI 2025)
    • Dataset: VulCaN (Transactions on Reliability)
    • Dataset: SecBench (ICSE 2023)
    • ODGen (USENIX Security 2022)
    • FAST (S&P 2023)
    • ObjLupAnsys (ESEC/FSE 2021)
    • GHunter (USENIX Security 2024)
    • Dasty (WWW 2024)
    • GALA (S&P 2025)
  • Deobfuscation
• Testing
  • Test Generation
    • Empirical Study: TestPilot (TSE, 2024)
    • Nessie (ICSE 2022)
    • LambdaTester (OOPSLA 2018)
• Taint Analysis
  • Nodest (ESEC/FSE 2019)
• Pointer Analysis
  • Correlation Tracking for Points-To Analysis (ECOOP 2012)
• Asynchronous JavaScript Analysis
• Call Graph
  • Approximate Call Graphs (ICSE 2013)
  • Approximate Interpretation (PLDI 2024)
  • Root Causes of Call Graph Unsoundness (ECOOP 2022)
  • CallME (COLM 2025)
• Semantics
  • KJS (PLDI 2015)
  • The Essence of JavaScript (ECOOP 2010)
  • Tested Semantics (DLS 2012)
  • JISET (ASE 2020)
• Type System
  • Towards a type system for analyzing JavaScript programs (ESOP 2005)
• Miscellaneous
  • Dynamic Behavior Analysis
    • Empirical Study: Dynamic Behavior (PLDI 2010)
  • Eval
    • Semi-Automated Eval Removal (OOPSLA 2012)
    • Unevalizer (ISSTA 2012)
    • Empirical Study: Eval Use (ECOOP 2011)
  • Identifier Conflict
    • JSObserver (ESEC/FSE 2020)
    • ConflictJS (ICSE 2018)