一句话:提出 Dataflow Tunneling,暴露请求式应用中框架隐式建立的跨请求处理方法数据依赖,以支持跨请求分析。
论文关注请求式应用(如多数服务端应用)中的跨请求分析:请求由不同的请求处理方法服务,而相关处理方法之间的数据依赖往往由底层执行框架隐式建立。因此,现有分析工具通常缺乏跨方法依赖知识,只能将分析限制在单个处理方法范围内,难以对由跨请求数据依赖关联的多个处理方法进行联合分析。标题中的 Dataflow Tunneling 指向一种穿透框架隐式依赖、恢复跨处理方法数据流的技术思路。摘要未展开具体实现与实验评估。
Request-based applications, e.g., most server-side applications, expose services to users in a request-based paradigm, in which requests are served by request-handler methods. An important task for request-based applications is inter-request analysis, which analyzes request-handler methods that are related by inter-request data dependencies together. However, in the request-based paradigm, data dependencies between related request-handler methods are implicitly established by the underlying frameworks that execute these methods. As a result, existing analysis tools are usually limited to the scope of each single method without the knowledge of dependencies between different methods.
DOI 原文 ·
@inproceedings{paperbot4541,
title = {Dataflow tunneling},
author = {Xiao Yu and Guoliang Jin},
booktitle = {ICSE},
year = {2018},
doi = {10.1145/3180155.3180171}
}