Relevant reading

[http://lara.epfl.ch/w/_media/sav08:schwartzbach.pdf](Schwarzbach static analysis notes)

Links from Kevin Hock:

[http://www3.cs.stonybrook.edu/~liu/papers/Alias-DLS10.pdf](Alias Analysis for Optimization of Dynamic Languages)

[http://msr-waypoint.com/en-us/um/people/livshits/papers/pdf/fse13.pdf](Practical Static Analysis of JavaScript Applications in the Presence of Frameworks and Libraries)

[https://dspace.mit.edu/openaccess-disseminate/1721.1/102281](Finding Security Bugs in Web Applications using a Catalog of Access Control Patterns)