TU Darmstadt / ULB / TUbiblio

ARROW: automated repair of races on client-side web pages

Wang, Weihang ; Zheng, Yunhui ; Liu, Peng ; Xu, Lei ; Zhang, Xiangyu ; Eugster, Patrick (2016)
ARROW: automated repair of races on client-side web pages.
Saarbrücken, Germany
doi: 10.1145/2931037.2931052
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

Modern browsers have a highly concurrent page rendering process in order to be more responsive. However, such a concurrent execution model leads to various race issues. In this paper, we present ARROW, a static technique that can automatically, safely, and cost effectively patch certain race issues on client side pages. It works by statically modeling a web page as a causal graph denoting happens-before relations between page elements, according to the rendering process in browsers. Races are detected by identifying inconsistencies between the graph and the dependence relations intended by the developer. Detected races are fixed by leveraging a constraint solver to add a set of edges with the minimum cost to the causal graph so that it is consistent with the intended dependences. The input page is then transformed to respect the repair edges. ARROW has fixed 151 races from 20 real world commercial web sites.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2016
Autor(en): Wang, Weihang ; Zheng, Yunhui ; Liu, Peng ; Xu, Lei ; Zhang, Xiangyu ; Eugster, Patrick
Art des Eintrags: Bibliographie
Titel: ARROW: automated repair of races on client-side web pages
Sprache: Deutsch
Publikationsjahr: Juli 2016
Verlag: ACM
(Heft-)Nummer: 25
Buchtitel: ISSTA 2016 Proceedings of the 25th International Symposium on Software Testing and Analysis
Veranstaltungsort: Saarbrücken, Germany
DOI: 10.1145/2931037.2931052
Kurzbeschreibung (Abstract):

Modern browsers have a highly concurrent page rendering process in order to be more responsive. However, such a concurrent execution model leads to various race issues. In this paper, we present ARROW, a static technique that can automatically, safely, and cost effectively patch certain race issues on client side pages. It works by statically modeling a web page as a causal graph denoting happens-before relations between page elements, according to the rendering process in browsers. Races are detected by identifying inconsistencies between the graph and the dependence relations intended by the developer. Detected races are fixed by leveraging a constraint solver to add a set of edges with the minimum cost to the causal graph so that it is consistent with the intended dependences. The input page is then transformed to respect the repair edges. ARROW has fixed 151 races from 20 real world commercial web sites.

Freie Schlagworte: Automatic repair, constraint solving, race condition
ID-Nummer: TUD-CS-2016-14778
Fachbereich(e)/-gebiet(e): Profilbereiche
Profilbereiche > Cybersicherheit (CYSEC)
Hinterlegungsdatum: 14 Aug 2017 13:44
Letzte Änderung: 12 Jan 2019 21:20
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen