Dezhen Kong

Effective Fuzzing-based Prototype Pollution Detection via Forced Execution and Template Synthesis

Prototype pollution is a critical class of taint-style vulnerabilities in JavaScript programs, enabling attackers to tamper with object prototypes and thereby alter program behavior in unexpected and often dangerous ways. Despite its severity, existing detection techniques strugg...