VTechWorks staff will be away for the Thanksgiving holiday beginning at noon on Wednesday, November 27, through Friday, November 29. We will resume normal operations on Monday, December 2. Thank you for your patience.
 

A Practical Blended Analysis for Dynamic Features in JavaScript

Simple item page
dc.contributor.authorWei, Shiyien
dc.contributor.authorRyder, Barbara G.en
dc.contributor.departmentComputer Scienceen
dc.date.accessioned2013-06-19T14:36:32Zen
dc.date.available2013-06-19T14:36:32Zen
dc.date.issued2012en
dc.description.abstractJavaScript is widely used in Web applications; however, its dynamism renders static analysis ineffective. Our JavaScript Blended Analysis Framework is designed to handle JavaScript dynamic features. It performs a flexible combined static/dynamic analysis. The blended analysis focuses static analysis on a dynamic calling structure collected at runtime in a lightweight manner, and refines the static analysis using dynamic information. The framework is instantiated for points-to analysis with stmt-level MOD analysis and tainted input analysis. Using JavaScript codes from actual webpages as benchmarks, we show that blended points-to analysis for JavaScript obtains good coverage (86.6% on average per website) of the pure static analysis solution and finds additional points-to pairs (7.0% on average per website) contributed by dynamically generated/loaded code. Blended tainted input analysis reports all 6 true positives reported by static analysis, but without false alarms, and finds three additional true positives.en
dc.format.mimetypeapplication/pdfen
dc.identifierhttp://eprints.cs.vt.edu/archive/00001206/en
dc.identifier.sourceurlhttp://eprints.cs.vt.edu/archive/00001206/01/BlendedJavaScript2clients.pdfen
dc.identifier.trnumberTR-12-18en
dc.identifier.urihttp://hdl.handle.net/10919/19421en
dc.language.isoenen
dc.publisherDepartment of Computer Science, Virginia Polytechnic Institute & State Universityen
dc.rightsIn Copyrighten
dc.rights.urihttp://rightsstatements.org/vocab/InC/1.0/en
dc.subjectInformation retrievalen
dc.subjectAlgorithmsen
dc.subjectData structuresen
dc.titleA Practical Blended Analysis for Dynamic Features in JavaScripten
dc.typeTechnical reporten
dc.type.dcmitypeTexten

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
BlendedJavaScript2clients.pdf
Size:
224.78 KB
Format:
Adobe Portable Document Format
Download

Collections

Computer Science Technical Reports