SHF: Small: A Dynamic Analysis and Test Generation Framework for JavaScript and Web Applications

SHF：小型：JavaScript 和 Web 应用程序的动态分析和测试生成框架

• 批准号: 1423645
• 负责人: Koushik Sen
• 金额: $ 50万
• 依托单位: University of California-Berkeley
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-08-01 至 2018-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1423645&HistoricalAwards=false
• 关键词: SHF; Small; Dynamic; Analysis; Test

JavaScript is the most popular programming language for client-sideweb programming. Advances in browser technologies and JavaScriptengines in the recent years have fueled the use of JavaScript in RichInternet Applications, and several mobile platforms including Android,IOS, Tizen OS, Windows 8, Blackberry, and Firefox OS, supportapplications written in JavaScript/HTML5. With a renewed interest inJavaScript, many complex applications such as Google docs, Gmail, anda variety of games are being developed usingHTML5/JavaScript. However, unlike C/C++, Java, and C#, JavaScript issignificantly shorthanded in the tools landscape. The dynamic andreflective nature of JavaScript makes it hard to analyze itstatically.This project investigates a dynamic analysis framework and severaldynamic analysis techniques for JavaScript. The analysis frameworkprovides a few useful abstractions and an API that significantlysimplifies implementation of dynamic analyses for JavaScript. Theframework works through source code instrumentation and allowsimplementation of various heavy-weight dynamic analyses and testgeneration techniques. The projects investigates and implementsseveral dynamic analyses including concolic testing, pure symbolicexecution, a detector of likely type inconsistencies, and a runtimememory profiler. The techniques developed in this project aresuitable for analyzing and testing that web applications written inJavaScript/HTML5 are free of common correctness and performancebugs. The techniques will benefit directly web applicationsprogrammers, and indirectly the numerous users of mobile and webapplications.

JavaScript是客户端Web编程最流行的编程语言。近年来，浏览器技术和Java Scriptengines的进步推动了在富互联网应用程序中使用JavaScript，包括Android、iOS、Tizen OS、Windows 8、Blackberry和Firefox OS在内的几个移动平台都支持用JavaScript/HTML5编写的应用程序。随着对JavaScript的兴趣重燃，许多复杂的应用程序，如Google Docs、Gmail和各种游戏都在使用HTML5/JavaScript进行开发。然而，与C/C++、Java和C#不同的是，在工具领域，JavaScript严重短缺。针对Java脚本语言的动态性和反射性，给静态分析带来了困难，研究了一种动态分析框架和多种动态分析技术。该分析框架提供了一些有用的抽象和API，大大简化了对Java脚本的动态分析的实现。该框架通过源代码插装和允许实现各种重量级动态分析和测试生成技术来工作。这些项目研究并实现了几个动态分析，包括并列测试、纯符号执行、可能类型不一致的检测器和运行时内存分析器。本项目开发的技术适用于分析和测试用JavaScript/HTML5编写的Web应用程序是否没有常见的正确性和性能错误。这些技术将直接惠及网络应用程序程序员，并间接惠及移动和网络应用程序的众多用户。