SHF: Small: A Dynamic Analysis and Test Generation Framework for JavaScript and Web Applications

JavaScript是最流行的客户端Web编程语言。近年来，浏览器技术和JavaScript的进步推动了JavaScript在富互联网应用程序中的使用，包括Android、IOS、Tizen OS、Windows 8、Blackberry和Firefox OS在内的几个移动的平台支持用JavaScript/HTML5编写的应用程序。随着人们对JavaScript的兴趣重新燃起，许多复杂的应用程序，如Google文档、Gmail和各种游戏都在使用HTML5/JavaScript开发。然而，与C/C++、Java和C#不同，JavaScript在工具领域明显人手不足。JavaScript的动态性和反射性使得静态分析变得困难，本项目研究了一个针对JavaScript的动态分析框架和几种动态分析技术。 分析框架提供了一些有用的抽象和一个API，显著简化了JavaScript动态分析的实现。 该框架通过源代码插装工作，并允许实现各种重量级的动态分析和测试生成技术。 该项目研究和实现了几个动态分析，包括concolic测试，纯符号执行，可能的类型不一致的检测器，以及运行时内存分析器。 本项目开发的技术适用于分析和测试JavaScript/HTML5编写的Web应用程序是否没有常见的正确性和性能缺陷。这些技术将直接受益于Web应用程序的程序员，并间接受益于移动的和Web应用程序的众多用户。

JavaScript is the most popular programming language for client-sideweb programming. Advances in browser technologies and JavaScriptengines in the recent years have fueled the use of JavaScript in RichInternet Applications, and several mobile platforms including Android,IOS, Tizen OS, Windows 8, Blackberry, and Firefox OS, supportapplications written in JavaScript/HTML5. With a renewed interest inJavaScript, many complex applications such as Google docs, Gmail, anda variety of games are being developed usingHTML5/JavaScript. However, unlike C/C++, Java, and C#, JavaScript issignificantly shorthanded in the tools landscape. The dynamic andreflective nature of JavaScript makes it hard to analyze itstatically.This project investigates a dynamic analysis framework and severaldynamic analysis techniques for JavaScript. The analysis frameworkprovides a few useful abstractions and an API that significantlysimplifies implementation of dynamic analyses for JavaScript. Theframework works through source code instrumentation and allowsimplementation of various heavy-weight dynamic analyses and testgeneration techniques. The projects investigates and implementsseveral dynamic analyses including concolic testing, pure symbolicexecution, a detector of likely type inconsistencies, and a runtimememory profiler. The techniques developed in this project aresuitable for analyzing and testing that web applications written inJavaScript/HTML5 are free of common correctness and performancebugs. The techniques will benefit directly web applicationsprogrammers, and indirectly the numerous users of mobile and webapplications.