一句话:研究 Web 应用服务端请求竞态的成因,并提出检测方法以提升应用可靠性。
现代网站常在服务器端运行 Web 应用来处理用户的 HTTP 请求并生成动态响应。由于 Web 应用本质上是并发的,它们容易遭受服务端请求竞态(server-side request races)。随着 Web 应用日益普及,该问题变得更加严重。本文旨在理解这类竞态的成因,并对其进行检测,以提升 Web 应用的正确性与可靠性。摘要未详细说明所采用的具体检测技术、实现方式与实验评估结果,但论文聚焦于剖析请求竞态的特性并设计相应的检测手段。
Modern web sites often run web applications on the server to handle HTTP requests from users and generate dynamic responses. Due to their concurrent nature, web applications are vulnerable to server-side request races. The problem becomes more severe with the ever-increasing popularity of web applications.
DOI 原文 ·
@inproceedings{paperbot6301,
title = {Understanding and detecting server-side request races in web applications},
author = {Zhengyi Qiu and Shudi Shao and Qi Zhao and Guoliang Jin},
booktitle = {FSE},
year = {2021},
doi = {10.1145/3468264.3468594}
}