首页> 外文会议>International Conference on Software Analysis, Testing and Evolution >Dynamically Detecting DOM-Related Atomicity Violations in JavaScript with Asynchronous Call
【24h】

Dynamically Detecting DOM-Related Atomicity Violations in JavaScript with Asynchronous Call

机译:通过异步调用动态检测JavaScript中与DOM相关的原子性违规

获取原文

摘要

In Web applications, atomicity violations caused by AJAX (Asynchronous JavaScript and XML) generate non-determinism and inconsistency. This paper introduces a dynamical detecting approach for atomicity violations in AJAX. Implemented based on Jalangi, an existing instrumentation framework, our technique monitors the execution of a Web application and tracks the Function Callback Flow to find atomic regions by taint analysis. Next, we build a dynamic event model, so as to precisely record the related DOM elements in call and callback steps with low overhead. Then we develop an event-based algorithm to acquire the results, which are classified into different severity levels (benign or harmful). Finally, we conduct an empirical experiment on a subset of Alexa top-ranked websites. Our tool detects 175 DOM related atomicity violations in which 48.6% of violations are identified as harmful after manual inspection.
机译:在Web应用程序中,由AJAX(异步JavaScript和XML)引起的原子性冲突会产生不确定性和不一致性。本文介绍了一种针对AJAX中违反原子性的动态检测方法。我们的技术基于现有的检测框架Jalangi实施,它监视Web应用程序的执行并跟踪功能回调流,以通过污点分析找到原子区域。接下来,我们建立一个动态事件模型,以便在调用和回调步骤中以较低的开销精确记录相关的DOM元素。然后,我们开发一种基于事件的算法来获取结果,将结果分为不同的严重性级别(良性或有害)。最后,我们在Alexa排名靠前的网站的子集上进行了实证实验。我们的工具可检测到175个与DOM相关的原子性违规,其中48.6%的违规行为经过手动检查后被认定为有害。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号