Engineering internet-centric software systems

Web 2.0应用程序旨在彻底改变计算，特别是在云计算环境中。然而，Web 2.0应用程序很容易出错。因此，本研究计划提出了一种全新的验证方法。有人认为，这种方法需要以语言中立的方式来考虑这些系统，而不是静态地分析它们的代码库。模糊测试是一种流行的、高度自动化的、与语言无关的验证技术。然而，传统的模糊测试方法存在代码和输入覆盖率差的问题。研究表明，通过集成其他技术（如符号执行），可以成功地扩展传统形式的模糊测试。然而，这种扩展通常在计算上非常昂贵。最近，基于语法的白盒模糊测试被提议作为这样一种扩展；然而，这一扩展在其实现方面受到的关注有限。

Web 2.0 applications are set to revolutionize computing, especially within cloud computing environments. However, Web 2.0 applications are error prone. Hence, this research program proposes a radical new approach to verification. It is argued that this approach needs to consider these systems in a language-neutral fashion rather than statically analyze their code base. Fuzzing or Fuzz testing is a popular, highly automated, language-neutral verification technique. However, traditional fuzzing approaches suffer from poor code and input coverage characteristics. It has been shown that traditional forms of fuzzing can be successfully extended by integrating other techniques such as symbolic execution. However, such extensions are often computational highly expensive. Recently grammar-based white-box fuzz testing has been proposed as such an extension; however, this extension has received limited attention in terms of its actualization.