kirancodes.me
To Proof Maintenance & Beyond!
ASE 2015

Static Analysis of JavaScript Web Applications in the Wild via Practical DOM Modeling (T)

Changhee Park, Sooncheol Won, Joonho Jin, Sukyoung Ryu

DOI 10.1109/ase.2015.27dblp

Abstract

We present SAFEWapp, an open-source static analysis framework for JavaScript web applications. It provides a faithful (partial) model of web application execution environments of various browsers, based on empirical data from the main web pages of the 9,465 most popular websites. A main feature of SAFEWapp is the configurability of DOM tree abstraction levels to allow users to adjust a trade-off between analysis performance and precision depending on their applications. We evaluate SAFEWapp on the 5 most popular JavaScript libraries and the main web pages of the 10 most popular websites in terms of analysis performance, precision, and modeling coverage. Additionally, as an application of SAFEWapp, we build a bug detector for JavaScript web applications that uses static analysis results from SAFEWapp. Our bug detector found previously undiscovered bugs including ones from wikipedia.org and amazon.com.

BibTeX
@inproceedings{Park-al:ASE15,
  author    = {Changhee Park and
               Sooncheol Won and
               Joonho Jin and
               Sukyoung Ryu},
  title     = {Static Analysis of {JavaScript} Web Applications in the Wild via Practical {DOM} Modeling {(T)}},
  booktitle = {ASE},
  pages     = {552--562},
  publisher = {{IEEE} Computer Society},
  year      = {2015},
}

Related papers