USENIX Security '23 - Minimalist: Semi-automated Debloating of PHP Web Applications through...

USENIX Security '23 - Minimalist: Semi-automated Debloating of PHP Web Applications through Static Analysis

Rasoul Jahanshahi, Boston University; Babak Amin Azad and Nick Nikiforakis, Stony Brook University; Manuel Egele, Boston University

As web applications grow more complicated and rely on third-party libraries to deliver new features to their users, they become bloated with unnecessary code. This unnecessary code increases a web application’s attack surface, which can be exploited to steal user data and compromise the underlying web server. One approach …

analysis applications automated boston features libraries manuel egele new features nick party php security static analysis third third-party university usenix usenix security web web applications