An analysis of the dynamic behavior of JavaScript programs 论文

2010引用 355
Software Engineering ResearchWeb Application Security VulnerabilitiesAdvanced Malware Detection Techniques

详细信息

发表日期
2010-06-05
发表年份
2010

关键词

Software Engineering ResearchWeb Application Security VulnerabilitiesAdvanced Malware Detection Techniques

摘要

The JavaScript programming language is widely used for web programming and, increasingly, for general purpose computing. As such, improving the correctness, security and performance of JavaScript applications has been the driving force for research in type systems, static analysis and compiler techniques for this language. Many of these techniques aim to reign in some of the most dynamic features of the language, yet little seems to be known about how programmers actually utilize the language or these features. In this paper we perform an empirical study of the dynamic behavior of a corpus of widely-used JavaScript programs, and analyze how and why the dynamic features are used. We report on the degree of dynamism that is exhibited by these JavaScript programs and compare that with assumptions commonly made in the literature and accepted industry benchmark suites.