TU Darmstadt / ULB / TUbiblio

ARROW: automated repair of races on client-side web pages

Wang, Weihang and Zheng, Yunhui and Liu, Peng and Xu, Lei and Zhang, Xiangyu and Eugster, Patrick (2016):
ARROW: automated repair of races on client-side web pages.
In: ISSTA 2016 Proceedings of the 25th International Symposium on Software Testing and Analysis, ACM, Saarbrücken, Germany, ISBN 978-1-4503-4390-9,
DOI: 10.1145/2931037.2931052,
[Conference or Workshop Item]

Abstract

Modern browsers have a highly concurrent page rendering process in order to be more responsive. However, such a concurrent execution model leads to various race issues. In this paper, we present ARROW, a static technique that can automatically, safely, and cost effectively patch certain race issues on client side pages. It works by statically modeling a web page as a causal graph denoting happens-before relations between page elements, according to the rendering process in browsers. Races are detected by identifying inconsistencies between the graph and the dependence relations intended by the developer. Detected races are fixed by leveraging a constraint solver to add a set of edges with the minimum cost to the causal graph so that it is consistent with the intended dependences. The input page is then transformed to respect the repair edges. ARROW has fixed 151 races from 20 real world commercial web sites.

Item Type: Conference or Workshop Item
Erschienen: 2016
Creators: Wang, Weihang and Zheng, Yunhui and Liu, Peng and Xu, Lei and Zhang, Xiangyu and Eugster, Patrick
Title: ARROW: automated repair of races on client-side web pages
Language: German
Abstract:

Modern browsers have a highly concurrent page rendering process in order to be more responsive. However, such a concurrent execution model leads to various race issues. In this paper, we present ARROW, a static technique that can automatically, safely, and cost effectively patch certain race issues on client side pages. It works by statically modeling a web page as a causal graph denoting happens-before relations between page elements, according to the rendering process in browsers. Races are detected by identifying inconsistencies between the graph and the dependence relations intended by the developer. Detected races are fixed by leveraging a constraint solver to add a set of edges with the minimum cost to the causal graph so that it is consistent with the intended dependences. The input page is then transformed to respect the repair edges. ARROW has fixed 151 races from 20 real world commercial web sites.

Title of Book: ISSTA 2016 Proceedings of the 25th International Symposium on Software Testing and Analysis
Number: 25
Publisher: ACM
ISBN: 978-1-4503-4390-9
Uncontrolled Keywords: Automatic repair, constraint solving, race condition
Divisions: Profile Areas
Profile Areas > Cybersecurity (CYSEC)
Event Location: Saarbrücken, Germany
Date Deposited: 14 Aug 2017 13:44
DOI: 10.1145/2931037.2931052
Identification Number: TUD-CS-2016-14778
Export:
Suche nach Titel in: TUfind oder in Google

Optionen (nur für Redakteure)

View Item View Item