Automatic fault localization for client-side Java']JavaScript

被引:14
|
作者
Ocariza, Frolin S., Jr. [1 ]
Li, Guanpeng [1 ]
Pattabiraman, Karthik [1 ]
Mesbah, Ali [1 ]
机构
[1] Univ British Columbia, Dept Elect & Comp Engn, Vancouver, BC V5Z 1M9, Canada
来源
基金
加拿大自然科学与工程研究理事会;
关键词
!text type='Java']Java[!/text]Script; fault localization; dynamic slicing; Document Object Model (DOM);
D O I
10.1002/stvr.1576
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
JAVASCRIPT is a scripting language that plays a prominent role in web applications today. It is dynamic, loosely typed and asynchronous and is extensively used to interact with the Document Object Model (DOM) at runtime. All these characteristics make JAVASCRIPT code error-prone; unfortunately, JAVASCRIPT fault localization remains a tedious and mainly manual task. Despite these challenges, the problem has received very limited research attention. This paper proposes an automated technique to localize JAVASCRIPT faults based on dynamic analysis, tracing and backward slicing of JAVASCRIPT code. This technique is capable of handling features of JAVASCRIPT code that have traditionally been difficult to analyse, including eval, anonymous functions and minified code. The approach is implemented in an open source tool called AUTOFLOX, and evaluation results indicate that it is capable of (1) automatically localizing DOM-related JAVASCRIPT faults with high accuracy (over 96%) and no false-positives and (2) isolating JAVASCRIPT faults in production websites and actual bugs from real-world web applications. Copyright (c) 2015John Wiley & Sons, Ltd.
引用
收藏
页码:69 / 88
页数:20
相关论文
共 50 条
  • [31] An artifact for client-side cryptographic operations
    Portugal, Paulo
    Pazo, Miguel
    Cuno, Alvaro
    Zapata, Fernando
    Saavedra, Ricardo
    [J]. 2018 37TH INTERNATIONAL CONFERENCE OF THE CHILEAN COMPUTER SCIENCE SOCIETY (SCCC), 2018,
  • [32] Network infiltration with client-side attacks
    Armstrong, Neil
    [J]. Network Security, 2007, 2007 (09) : 8 - 10
  • [33] Client-side web scripting with HaskellScript
    Meijer, E
    Leijen, D
    Hook, J
    [J]. PRACTICAL ASPECTS OF DECLARATIVE LANGUAGES, 1999, 1551 : 196 - 210
  • [34] A Client-Side Seat to TLS Deployment
    Birghan, Moritz
    van der Merwe, Thyla
    [J]. 2022 43RD IEEE SYMPOSIUM ON SECURITY AND PRIVACY WORKSHOPS (SPW 2022), 2022, : 13 - 19
  • [35] Client-side Skype Forensics - An Overview
    Meissner, Tina
    Kroeger, Knut
    Creutzburg, Reiner
    [J]. MULTIMEDIA CONTENT AND MOBILE DEVICES, 2013, 8667
  • [36] Client-Side Vulnerabilities in Commercial VPNs
    Bui, Thanh
    Rao, Siddharth
    Antikainen, Markku
    Aura, Tuomas
    [J]. SECURE IT SYSTEMS, NORDSEC 2019, 2019, 11875 : 103 - 119
  • [37] A client-side workflow middleware in the grid
    Li, Y
    Zhu, QM
    Li, MG
    Chen, Y
    [J]. NETWORKING - ICN 2005, PT 1, 2005, 3420 : 19 - 26
  • [38] Mining client-side activity for personalization
    Fenstermacher, KD
    Ginsburg, M
    [J]. WECWIS 2002: FOURTH IEEE INTERNATIONAL WORKSHOP ON ADVANCED ISSUES OF E-COMMERCE AND WEB-BASED INFORMATION SYSTEMS, PROCEEDINGS, 2002, : 205 - 212
  • [39] Client-side Mobile Visual Search
    Hartl, Andreas
    Schmalstieg, Dieter
    Reitmayr, Gerhard
    [J]. PROCEEDINGS OF THE 2014 9TH INTERNATIONAL CONFERENCE ON COMPUTER VISION, THEORY AND APPLICATIONS (VISAPP 2014), VOL 3, 2014, : 125 - 132
  • [40] Client-side dynamic preprocessing of transactions
    Jurk, S
    Neiling, M
    [J]. ADVANCES IN DATABASES AND INFORMATION SYSTEMS, PROCEEDINGS, 2003, 2798 : 103 - 117