Wei, ShiyiRyder, Barbara G.2013-06-192013-06-192012-08-01http://hdl.handle.net/10919/19463The JavaScript Blended Analysis Framework is designed to perform a general-purpose, practical combined static/dynamic analysis of JavaScript programs, while handling dynamic features such as run-time generated code and variadic func- tions. The idea of blended analysis is to focus static anal- ysis on a dynamic calling structure collected at runtime in a lightweight manner, and to rene the static analysis us- ing additional dynamic information. We perform blended points-to analysis of JavaScript with our framework and compare results with those computed by a pure static points- to analysis. Using JavaScript codes from actual webpages as benchmarks, we show that optimized blended analysis for JavaScript obtains good coverage (86.6% on average per website) of the pure static analysis solution and nds ad- ditional points-to pairs (7.0% on average per website) con- tributed by dynamically generated/loaded code.application/pdfenIn CopyrightMultimedia & hypertextTechnical reportTR-12-11http://eprints.cs.vt.edu/archive/00001202/01/BlendedJS-FSE12Submission.pdf