Fraser Brown

TL;DR: This paper describes several types of exploitable errors that bindingcode creates, and develops both a suite of easily-to-build static checkersto detect such errors and a backwards-compatible, low-overhead API toprevent them.

TL;DR: Four new history sniffing attacks are presented that can exfiltrate history at a rate of 3,000 URLs per second, an exfiltration rate that previously led browser vendors to break backwards compatibility in favor of privacy.

TL;DR: This work shows that building shared compiler infrastructure for compiling to constraint representations is possible, and shows that this shared infrastructure is useful, because it allows compilers for proof systems to benefit from decades of work on constraint compilation techniques for software verification.

TL;DR: An extensible bug-finding tool designed to automatically find security bugs in huge codebases, even when easy-to-find bugs have been already picked clean by years of aggressive automatic checking, is described and evaluated.