Wang, Weihang ; Zheng, Yunhui ; Liu, Peng ; Xu, Lei ; Zhang, Xiangyu ; Eugster, Patrick (2016)
ARROW: automated repair of races on client-side web pages.
Saarbrücken, Germany
doi: 10.1145/2931037.2931052
Konferenzveröffentlichung, Bibliographie
Kurzbeschreibung (Abstract)
Modern browsers have a highly concurrent page rendering process in order to be more responsive. However, such a concurrent execution model leads to various race issues. In this paper, we present ARROW, a static technique that can automatically, safely, and cost effectively patch certain race issues on client side pages. It works by statically modeling a web page as a causal graph denoting happens-before relations between page elements, according to the rendering process in browsers. Races are detected by identifying inconsistencies between the graph and the dependence relations intended by the developer. Detected races are fixed by leveraging a constraint solver to add a set of edges with the minimum cost to the causal graph so that it is consistent with the intended dependences. The input page is then transformed to respect the repair edges. ARROW has fixed 151 races from 20 real world commercial web sites.
| Typ des Eintrags: | Konferenzveröffentlichung |
|---|---|
| Erschienen: | 2016 |
| Autor(en): | Wang, Weihang ; Zheng, Yunhui ; Liu, Peng ; Xu, Lei ; Zhang, Xiangyu ; Eugster, Patrick |
| Art des Eintrags: | Bibliographie |
| Titel: | ARROW: automated repair of races on client-side web pages |
| Sprache: | Deutsch |
| Publikationsjahr: | Juli 2016 |
| Verlag: | ACM |
| (Heft-)Nummer: | 25 |
| Buchtitel: | ISSTA 2016 Proceedings of the 25th International Symposium on Software Testing and Analysis |
| Veranstaltungsort: | Saarbrücken, Germany |
| DOI: | 10.1145/2931037.2931052 |
| Kurzbeschreibung (Abstract): | Modern browsers have a highly concurrent page rendering process in order to be more responsive. However, such a concurrent execution model leads to various race issues. In this paper, we present ARROW, a static technique that can automatically, safely, and cost effectively patch certain race issues on client side pages. It works by statically modeling a web page as a causal graph denoting happens-before relations between page elements, according to the rendering process in browsers. Races are detected by identifying inconsistencies between the graph and the dependence relations intended by the developer. Detected races are fixed by leveraging a constraint solver to add a set of edges with the minimum cost to the causal graph so that it is consistent with the intended dependences. The input page is then transformed to respect the repair edges. ARROW has fixed 151 races from 20 real world commercial web sites. |
| Freie Schlagworte: | Automatic repair, constraint solving, race condition |
| ID-Nummer: | TUD-CS-2016-14778 |
| Fachbereich(e)/-gebiet(e): | Profilbereiche Profilbereiche > Cybersicherheit (CYSEC) |
| Hinterlegungsdatum: | 14 Aug 2017 13:44 |
| Letzte Änderung: | 12 Jan 2019 21:20 |
| PPN: | |
| Export: | |
| Suche nach Titel in: | TUfind oder in Google |
 |
Frage zum Eintrag |
Optionen (nur für Redakteure)
 |
Redaktionelle Details anzeigen |
Drucken
Impressum