一句话:提出轻量结合动态分析与受控执行的方法,实用地检测 JavaScript Web 应用中有害的 AJAX 事件竞争。
JavaScript Web 应用广泛使用异步客户端-服务器通信,但 AJAX 事件调度的不确定性使此类竞争难以通过普通测试发现,已有自动化事件竞争检测器又往往精度或效率不足。论文提出一种实用的新方法,将轻量级动态分析与受控执行相结合,直接面向有害 AJAX 事件竞争的识别。其核心在于以较低开销捕捉与竞争相关的动态信息,并通过受控的事件调度或执行来确认可能造成危害的竞争。摘要未报告具体实验数据,但目标是在精度与效率之间取得实用平衡,使 AJAX 竞争检测可用于真实 JavaScript Web 应用。
Asynchronous client-server communication is a common source of errors in JavaScript web applications. Such errors are difficult to detect using ordinary testing because of the nondeterministic scheduling of AJAX events. Existing automated event race detectors are generally too imprecise or too inefficient to be practically useful. To address this problem, we present a new approach based on a lightweight combination of dynamic analysis and controlled execution that directly targets identification of harmful AJAX event races.