Visible to the public Protecting JavaScript Apps from Code Analysis

TitleProtecting JavaScript Apps from Code Analysis
Publication TypeConference Paper
Year of Publication2017
AuthorsGroß, Tobias, Müller, Tilo
Conference NameProceedings of the 4th Workshop on Security in Highly Connected IT Systems
PublisherACM
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-5271-0
KeywordsCollaboration, composability, Google Closure Compiler, Hybrid Apps, ip protection, JavaScript, obfuscation, policy, policy-based governance, pubcrawl, Resiliency
AbstractApps written in JavaScript are an easy target for reverse engineering attacks, e.g. to steal the intellectual property or to create a clone of an app. Unprotected JavaScript apps even contain high level information such as developer comments, if those were not explicitly stripped. This fact becomes more and more important with the increasing popularity of JavaScript as language of choice for both web development and hybrid mobile apps. In this paper, we present a novel JavaScript obfuscator based on the Google Closure Compiler, which transforms readable JavaScript source code into a representation much harder to analyze for adversaries. We evaluate this obfuscator regarding its performance impact and its semantics-preserving property.
URLhttp://doi.acm.org/10.1145/3099012.3099018
DOI10.1145/3099012.3099018
Citation Keygros_protecting_2017