Engineering internet-centric software systems

Web 2.0应用程序将彻底改变计算，尤其是在云计算环境中。然而，Web 2.0应用程序容易出错。 因此，这项研究计划提出了一种全新的验证方法。有人认为，这种方法需要考虑这些系统中的语言中立的方式，而不是静态地分析他们的代码库。模糊测试是一种流行的、高度自动化的、语言中立的验证技术。然而，传统的模糊方法遭受差的代码和输入覆盖特性。它已被证明，传统形式的模糊可以成功地扩展通过集成其他技术，如符号执行。然而，这样的扩展通常是计算上非常昂贵的。最近，基于语法的白盒模糊测试被提出作为这样的扩展;然而，这种扩展在其实现方面受到的关注有限。

Web 2.0 applications are set to revolutionize computing, especially within cloud computing environments. However, Web 2.0 applications are error prone. Hence, this research program proposes a radical new approach to verification. It is argued that this approach needs to consider these systems in a language-neutral fashion rather than statically analyze their code base. Fuzzing or Fuzz testing is a popular, highly automated, language-neutral verification technique. However, traditional fuzzing approaches suffer from poor code and input coverage characteristics. It has been shown that traditional forms of fuzzing can be successfully extended by integrating other techniques such as symbolic execution. However, such extensions are often computational highly expensive. Recently grammar-based white-box fuzz testing has been proposed as such an extension; however, this extension has received limited attention in terms of its actualization.