An analysis of the dynamic behavior of javascript programs

ACM SIGPLAN Notices

Volumn 45, Issue 6, 2010, Pages 1-12

  Richards, Gregor ^a   Lebresne, Sylvain ^a   Burg, Brian ^a   Vitek, Jan ^a  

^a Purdue University   (United States)

Author keywords

Dynamic Behavior; Dynamic Metrics; Execution Tracing; JavaScript; Program Analysis

Indexed keywords

DYNAMIC BEHAVIORS; DYNAMIC METRICS; EXECUTION TRACING; JAVASCRIPT; PROGRAM ANALYSIS;

HIGH LEVEL LANGUAGES; JAVA PROGRAMMING LANGUAGE;

DYNAMIC ANALYSIS;

EID: 77957605570     PISSN: 15232867     EISSN: None     Source Type: Journal    
DOI: 10.1145/1809028.1806598     Document Type: Conference Paper

References (28)

1. Christopher Anderson. Type Inference for JavaScript. PhD thesis, Department of Computing, Imperial College London, March 2006.
2. Christopher Anderson and Sophia Drossopoulou. BabyJ: From object based to class based programming via types. Electr. Notes Theor. Comput. Sci., 82(7), 2003.
3. Christopher Anderson and Paola Giannini. Type checking for JavaScript. Electr. Notes Theor. Comput. Sci., 138(2), 2005.
4. Brad Calder, Dirk Grunwald, and Benjamin Zorn. Quantifying behavioral differences between c and c++ programs. Journal of Programming Languages, (4), 1994.
5. Craig Chambers, Dave Ungar, and Erin Lee. An efficient implementation of SELF a dynamically-typed object-oriented language based on prototypes. SIGPLAN Not., 24(10):49-70, 1989.
6. Ravi Chugh, Jeffrey A. Meister, Ranjit Jhala, and Sorin Lerner. Staged information flow for JavaScript. In Programming Language Design and Implementation, (PLDI), 2009.
7. Bruno Dufour, Karel Driesen, Laurie J. Hendren, and Clark Verbrugge. Dynamic metrics for java. In Proceedings of the Conference on Object-Oriented Programming Systems, Languages and Applications (OOPSLA), 2003.
8. Ben Feinstein and Daniel Peck. Caffeinemonkey: Automated collection, detection and analysis of malicious JavaScript. In Black Hat USA 2007, Las Vegas, NV, USA, 2007.
9. Michael Furr, Jong hoon An, Jeffrey Foster, and Michael Hicks. Static type inference for ruby. In Symposium on Applied Computing (SAC), 2009.
10. Andreas Gal, Brendan Eich, Mike Shaver, David Anderson, David Mandelin, Mohammad R. Haghighat, Blake Kaplan, Graydon Hoare, Boris Zbarsky, Jason Orendorff, Jesse Ruderman, Edwin W. Smith, Rick Reitmaier, Michael Bebenita, Mason Chang, and Michael Franz. Trace-based just-in-time type specialization for dynamic languages. In Conference on Programming Language Design and Implementation (PLDI), 2009.
11. C.D. Garret, Jeff Dean, David Grove, and Craig Chambers. Measurement and application of dynamic receiver class distributions. Univ of Washington, 1994.
12. Arjun Guha, Shriram Krishnamurthi, and Trevor Jim. Using static analysis for ajax intrusion detection. In International Conference on World Wide Web (WWW), 2009.
13. Phillip Heidegger and Peter Thiemann. Recency types for dynamically-typed, object-based languages. In Foundations of Object Oriented Languages (FOOL), 2009.
14. Alex Holkner and James Harland. Evaluating the dynamic behaviour of Python applications. In Australasian Computer Science Conference (ACSC), 2009.
15. Daniel Ingalls, Krzysztof Palacz, Stephen Uhler, Antero Taivalsaari, and Tommi Mikkonen. The lively kernel a self-supporting system on a web page. In Self-Sustaining Systems, 2008.
16. ECMA International. ECMA-262: ECMAScript Language Specification. ECMA (European Association for Standardizing Information and Communication Systems), Geneva, Switzerland, third edition, December 1999.
17. Dongseok Jang and Kwang-Moo Choe. Points-to analysis for JavaScript. In Symposium on Applied Computing (SAC), 2009.
18. Simon Holm Jensen, Anders Møller, and Peter Thiemann. Type analysis for JavaScript. In Static Analysis Symposium (SAS), 2009.
19. Sylvain Lebresne, Gregor Richards, Johan Östlund, Tobias Wrigstad, and Jan Vitek. Understanding the dynamics of JavaScript. In Workshop on Script to Program Evolution (STOP), 2009.
20. Florian Loitsch and Manuel Serrano. Hop client-side compilation. In Symposium on Trends on Functional Languages, 2007.
21. Sergio Maffeis, John C. Mitchell, and Ankur Taly. Isolating JavaScript with filters, rewriting, and wrappers. In European Symposium on Research in Computer Security (ESORICS), 2009.
22. Paruj Ratanaworabhan, Benjamin Livshits, and Benjamin Zorn. JSMeter: Comparing the behavior of JavaScript benchmarks with real web applications. In USENIX Conference on Web Application Development (WebApps), June 2010.
23. Ewan D. Tempero, James Noble, and Hayden Melton. How do java programs use inheritance? an empirical study of inheritance in java software. In European Conference on Object-Oriented Programming (ECOOP), 2008.
24. Peter Thiemann. Towards a type system for analyzing JavaScript programs. In European Symposium on Programming (ESOP), 2005.
25. Sam Tobin-Hochstadt and Matthias Felleisen. The design and implementation of Typed Scheme. In POPL, pages 395-406, New York, NY, USA, 2008. ACM.
26. Philipp Vogt, Florian Nentwich, Nenad Jovanovic, Engin Kirda, Christopher Krügel, and Giovanni Vigna. Cross site scripting prevention with dynamic data tainting and static analysis. In Network and Distributed System Security Symposium (NDSS), 2007.
27. Dachuan Yu, Ajay Chander, Nayeem Islam, and Igor Serikov. JavaScript instrumentation for browser security. In Symposium on Principles of Programming Languages (POPL), 2007.
28. Chuan Yue and Haining Wang. Characterizing insecure JavaScript practices on the web. In 18th International World Wide Web Conference, pages 961-961, April 2009.