Skip to content

ATM: Test for endpoints scored at inference time #11532

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tiferet merged 6 commits into from
Dec 2, 2022
Merged

ATM: Test for endpoints scored at inference time #11532

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
a317f2b
Test for endpoints scored at inference time
tiferet Dec 1, 2022
294f34b
Small improvement
tiferet Dec 1, 2022
2e20abc
Undo error from previous commit
tiferet Dec 1, 2022
d17383d
Add XssThroughDom
tiferet Dec 2, 2022
c0aae3d
Apply suggestions from code review
tiferet Dec 2, 2022
d211dec
Fix error in last commit
tiferet Dec 2, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions ...experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/ATMConfig.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -154,6 +154,17 @@ abstract class AtmConfig extends JS::TaintTracking::Configuration {
not AtmResultsInfo::isFlowLikelyInBaseQuery(source.getNode(), sink.getNode()) and
score = AtmResultsInfo::getScoreForFlow(source.getNode(), sink.getNode())
}

/**
* Holds if if `sink` is an effective sink with flow from `source` which gets used as a sink candidate for scoring
* with the ML model.
*/
predicate isSinkCandidateWithFlow(JS::DataFlow::PathNode sink) {
exists(JS::DataFlow::PathNode source |
this.hasFlowPath(source, sink) and
not AtmResultsInfo::isFlowLikelyInBaseQuery(source.getNode(), sink.getNode())
)
}
}

/** DEPRECATED: Alias for AtmConfig */
Expand Down
Loading