A Survey of Dynamic Analysis and Test Generation for JavaScript

作者: Esben Andreasen , Liang Gong , Anders Møller , Michael Pradel , Marija Selakovic

DOI: 10.1145/3106739

关键词:

摘要: JavaScript has become one of the most prevalent programming languages. Unfortunately, some unique properties that contribute to this popularity also make programs prone errors and difficult for program analyses reason about. These include highly dynamic nature language, a set unusual language features, lack encapsulation mechanisms, “no crash” philosophy. This article surveys analysis test generation techniques targeted at improving correctness, reliability, performance, security, privacy JavaScript-based software.

参考文章(129)
Shabnam Mirshokraie, Ali Mesbah, JSART: javascript assertion-based regression testing international conference on web engineering. pp. 238- 252 ,(2012) , 10.1007/978-3-642-31753-8_18
Philippe De Ryck, Maarten Decat, Lieven Desmet, Frank Piessens, Wouter Joosen, Security of web mashups: a survey nordic conference on secure it systems. ,vol. 7127, pp. 223- 238 ,(2010) , 10.1007/978-3-642-27937-9_16
Paruj Ratanaworabhan, Benjamin Livshits, Benjamin G. Zorn, JSMeter: comparing the behavior of JavaScript benchmarks with real web applications usenix conference on web application development. pp. 3- 3 ,(2010)
Abhishek Bichhawat, Vineet Rajani, Deepak Garg, Christian Hammer, Information Flow Control in WebKit’s JavaScript Bytecode principles of security and trust. pp. 159- 178 ,(2014) , 10.1007/978-3-642-54792-8_9
Arnar Birgisson, Daniel Hedin, Andrei Sabelfeld, Boosting the Permissiveness of Dynamic Information-Flow Tracking by Testing Computer Security – ESORICS 2012. ,vol. 7459, pp. 55- 72 ,(2012) , 10.1007/978-3-642-33167-1_4
Manu Sridharan, Julian Dolby, Satish Chandra, Max Schäfer, Frank Tip, Correlation Tracking for Points-To Analysis of JavaScript ECOOP 2012 – Object-Oriented Programming. pp. 435- 458 ,(2012) , 10.1007/978-3-642-31057-7_20
Simon Holm Jensen, Anders Møller, Peter Thiemann, None, Type Analysis for JavaScript static analysis symposium. pp. 238- 255 ,(2009) , 10.1007/978-3-642-03237-0_17
Erick Lavoie, Bruno Dufour, Marc Feeley, Portable and Efficient Run-time Monitoring of JavaScript Applications Using Virtual Machine Layering ECOOP 2014 – Object-Oriented Programming. pp. 541- 566 ,(2014) , 10.1007/978-3-662-44202-9_22
Haruka Kikuchi, Dachuan Yu, Ajay Chander, Hiroshi Inamura, Igor Serikov, JavaScript Instrumentation in Practice Programming Languages and Systems. pp. 326- 341 ,(2008) , 10.1007/978-3-540-89330-1_23
Shiyi Wei, Franceska Xhakaj, Barbara G. Ryder, Empirical study of the dynamic behavior of JavaScript objects Software - Practice and Experience. ,vol. 46, pp. 867- 889 ,(2016) , 10.1002/SPE.2334