Fission: Secure Dynamic Code-Splitting for JavaScript

Guha, Arjun; Jeannin, Jean-Baptiste; Nigam, Rachit; Tangen, Jane; Shambaugh, Rian

doi:10.4230/lipics.snapl.2017.5

Cited by 1 publication

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Jif/split [151] Splits a program into tiers based on the flow of private data, making sure that private data do not flow to another tier. Fission [56] Dynamically splits a program execution into client-side and server-side execution based on the flow of private data, making sure that private data does not flow to untrusted clients. SIF [33] Checks the flow of private data in a web application, making sure that private data does not flow to untrusted clients.…”

Section: An Overview Of Multitier Languagesmentioning

confidence: 99%

“…Transparent distribution approaches enable using a single language for different tiers and support compilation to tier-specific code, but do not provide specific abstractions for MT programming. Splitting a program into different tiers based on security concerns (Jif/split [151], Fission [56]) adopts information flow control techniques to ensure that private data does not leak to untrusted tiers. Distributed Orc [130] automatically optimizes the distribution of values at runtime to minimize communication cost.…”

Section: Compilers For Multitiermentioning

confidence: 99%

“…Similarly, Swift [32] also partitions programs based on security labels, but focuses on the Web domain, where the trust model assumes a trusted server that interacts with untrusted clients. An exception to the approaches above ś which all adopt a compile time splitting strategy ś is Fission [56], which uses information flow control to separate client and server tiers at run time. The dynamic approach allows supporting JavaScript features that are hard to reason about statically, such as eval, as well as retaining better compatibility with tooling.…”

Section: Placement Strategiesmentioning

confidence: 99%

See 2 more Smart Citations

A Survey of Multitier Programming

2020

View full text Add to dashboard Cite

Multitier programming deals with developing the components that pertain to different tiers in the system (e.g., client and server), mixing them in the same compilation unit. In this paradigm, the code for different tiers is then either generated at run time or it results from the compiler splitting the codebase into components that belong to different tiers based on user annotations, static analysis, types, or a combination of these. In the Web context, multitier languages aim at reducing the distinction between client and server code, by translating the code that is to be executed on the clients to JavaScript or by executing JavaScript on the server, too. Ultimately, the goal of the multitier approach is to improve program comprehension, simplify maintenance and enable formal reasoning about the properties of the whole distributed application. A number of multitier research languages have been proposed over the last decade, which support various degrees of multitier programming and explore different design tradeoffs. In this article, we provide an overview of the existing solutions, discuss their positioning in the design space, and outline open research problems.

show abstract

Section: An Overview Of Multitier Languagesmentioning

confidence: 99%

Section: Compilers For Multitiermentioning

confidence: 99%