De-Zhen Kong

Effective Fuzzing-based Prototype Pollution Detection via Forced Execution and Template Synthesis

Prototype pollution is a critical class of taint-style vulnerabilities in JavaScript programs, enabling attackers to tamper with object prototypes and thereby alter program behavior in unexpected and often dangerous ways. Despite its severity, existing detection techniques struggle with excessive false positives and po...