检索结果-内蒙古大学图书馆

Factors and actors leading to the adoption of a javascript framework

EMPIRICAL SOFTWARE ENGINEERING 2018年第6期23卷 3503-3534页

作者： Pano, Amantia Graziotin, Daniel Abrahamsson, Pekka Free Univ Bozen Bolzano Fac Comp Sci Bolzano Italy Univ Stuttgart Inst Software Technol Stuttgart Germany Univ Jyvaskyla Fac Informat Technol Jyvaskyla Finland

The increasing popularity of javascript has led to a variety of javascript frameworks that aim to help developers to address programming tasks. However, the number of javascript frameworks has risen rapidly to thousands of versions. It is challenging for practitioners to identify the frameworks that best fit their needs and to develop new ones which fit such needs. Furthermore, there is a lack of knowledge regarding what drives developers toward the choice. This paper explores the factors and actors that lead to the choice of a javascript framework. We conducted a qualitative interpretive study of semi-structured interviews. We interviewed 18 decision makers regarding the javascript framework selection, up to reaching theoretical saturation. Through coding of the interview responses, we offer a model of desirable javascript framework adoption factors. The factors are grouped into categories that are derived via the Unified Theory of Acceptance and Use of Technology. The factors are performance expectancy (performance, size), effort expectancy (automatization, learnability, complexity, understandability), social influence (competitor analysis, collegial advice, community size, community responsiveness), facilitating conditions (suitability, updates, modularity, isolation, extensibility), and price value. A combination of four actors, which are customer, developer, team, and team leader, leads to the choice. Our model contributes to the body of knowledge related to the adoption of technology by software engineers. As a practical implication, our model is useful for decision makers when evaluating javascript frameworks, as well as for developers for producing desirable frameworks.

关键词： javascript Programming frameworks Decision making Technology adoption Human aspects of software development Qualitative research Interpretivism

来源：评论

学校读者我要写书评

暂无评论

A Study of Causes and Consequences of Client-Side javascript Bugs

引用

IEEE TRANSACTIONS ON SOFTWARE ENGINEERING 2017年第2期43卷 128-144页

作者： Ocariza, Frolin S., Jr. Bajaj, Kartik Pattabiraman, Karthik Mesbah, Ali Univ British Columbia Dept Elect & Comp Engn 2332 Main Mall Vancouver BC V6T 1Z4 Canada

Client-side javascript is widely used in web applications to improve user-interactivity and minimize client-server communications. Unfortunately, javascript is known to be error-prone. While prior studies have demonstrated the prevalence of javascript faults, no attempts have been made to determine their causes and consequences. The goal of our study is to understand the root causes and impact of javascript faults and how the results can impact javascript programmers, testers and tool developers. We perform an empirical study of 502 bug reports from 19 bug repositories. The bug reports are thoroughly examined to classify and extract information about each bug' cause (the error) and consequence (the failure and impact). Our results show that the majority (68 percent) of javascript faults are DOM-related, meaning they are caused by faulty interactions of the javascript code with the Document Object Model (DOM). Further, 80 percent of the highest impact javascript faults are DOM-related. Finally, most javascript faults originate from programmer mistakes committed in the javascript code itself, as opposed to other web application components. These results indicate that javascript programmers and testers need tools that can help them reason about the DOM. Additionally, developers can use the error patterns we found to design more powerful static analysis tools for javascript.

关键词： Faults javascript Document Object Model (DOM) bug reports empirical study

来源：评论

学校读者我要写书评

暂无评论

Scalable framework for parsing: from Fortress to javascript

引用

SOFTWARE-PRACTICE & EXPERIENCE 2016年第9期46卷 1219-1238页

作者： Ryu, Sukyoung Korea Adv Inst Sci & Technol Sch Comp 291 Daehak Ro Daejeon 305701 South Korea

Programming languages grow over time that requires frequent changes in language manipulations such as compilation, interpretation, and analysis. Because the very first step of most language manipulations is parsing, whether parsing can adapt to changes easily, quickly, and correctly, it affects the scalability of language manipulations. Even though various parsing techniques have been well studied theoretically, their practical experiences in scalable frameworks have not been available. In this paper, we present our experiences with parsing in scalable frameworks. We first describe our trials and errors using various parsing techniques in developing parsers for the Fortress programming language. Because Fortress was a scientific language under development, its mathematical and growable syntax introduced new challenges in parsing. We summarize the lessons learned from parsing Fortress, and we share our experience of applying the lessons to parsing the javascript programming language. While javascript is one of the most widely used languages, javascript itself and its diverse variants keep extending its syntax, and the extremely dynamic features of javascript also add new challenges in parsing. Using automatic generation tools and methods like staged parsing and automatic extraction and testing of examples in language specifications, our methodology for scalable parsing has shown to be very effective in practice. Copyright (c) 2015 John Wiley & Sons, Ltd.

关键词： parsing Fortress javascript automatic generation scalable framework staged parsing

来源：评论

学校读者我要写书评

暂无评论

LeakSpot: detection and diagnosis of memory leaks in javascript applications

引用

SOFTWARE-PRACTICE & EXPERIENCE 2017年第1期47卷 97-123页

作者： Rudafshani, Masoomeh Ward, Paul A. S. Univ Waterloo Dept Elect & Comp Engn 200 Univ Ave West Waterloo ON Canada

The migration of application logic to the client side of modern web applications and the use of javascript as the main language for client-side development have made memory leaks in javascript an issue for web applications. Client-side web applications communicate with the server asynchronously, remaining on the same web page during their lifetime. Thus, even minor memory leaks can eventually lead to excessive memory usage, negatively affecting user-perceived response time and possibly causing page crashes. To detect memory leaks and guide developers in fixing the leaks quickly and easily, this paper introduces LeakSpot, a tool that creates a run-time heap model by modifying the application code in a browser-agnostic way to record object allocations, accesses, and references created to objects. LeakSpot reports those allocation sites causing the leaks instead of all the leaky allocation sites. It also identifies the locations in the code where leaked objects are accumulated, for example, the locations where a reference from a data structure is created but forgotten to be removed by the developer. To facilitate debugging and fixing the leaks, for every leaked object, LeakSpot reports all the locations in the code that create a reference to the object. To confirm usefulness and efficacy of LeakSpot experimentally, we have used LeakSpot to find and fix four memory leaks in a javascript benchmark suite and in open-source web applications. LeakSpot is also shown to be effective in pointing out the potential causes of three leaks in large and popular web applications. Copyright (c) 2016 John Wiley & Sons, Ltd.

关键词： javascript memory leaks dynamic analysis code transformation and manipulation

来源：评论

学校读者我要写书评

暂无评论

Typing and semantics of asynchronous arrows in javascript

引用

SCIENCE OF COMPUTER PROGRAMMING 2017年 141卷 1-39页

作者： Fritz, Eric Zhao, Tian Univ Wisconsin Milwaukee WI 53201 USA

Asynchronous programs in javascript using callbacks and promises are difficult to write correctly. Many programs have subtle errors due to the unwanted interaction of event handlers. To fix such errors, the programmer is burdened with explicit registration and de-registration of event handlers. This produces fragile code which is difficult to read and maintain. Arrows, a generalization of monads, are an elegant solution to asynchronous program composition. In this paper, we present the semantics of an arrow-based DSL in javascript which can encode asynchronous programs as a state machine where edge transitions are triggered by external events. To ensure that arrows are composed correctly, we provide an optional type checker that reports errors before the machine begins execution. (C) 2017 Elsevier B.V. All rights reserved.

关键词： javascript Asynchronous programming Type inference Type checking Semantics

来源：评论

学校读者我要写书评

暂无评论

javascript-based Device Fingerprinting Mitigation Using Personal HTTP Proxy 2

JavaScript-based Device Fingerprinting Mitigation Using Pers...

引用

International Conference on Information Technology Systems and Innovation (ICITSI)

作者： Laksono, Tio Dwi Rosmansyah, Yusep Dabarsyah, Budiman Choi, Jong Uk Inst Teknol Bandung Sch Elect Engn & Informat Bandung West Java Indonesia Sangmyung Univ Seoul South Korea

ISBN: (纸本)9781467366649

In this paper, we designed a mechanism to mitigate the existence of device fingerprinting process by utilizing personal HTTP proxy. For the purpose of detection and prevention of device fingerprinting, the proxy utilizes a two-stage filtering process;header-based filtering and content-based filtering. We define 6 values of attribute among with their weight based on the value of the highest entropy. In addition, we also define the ConfLevel coefficient as the weight accumulation value of the existence of each attribute. There is also defined ThresholdLevel coefficient for the purpose of determining the limit condition if there is an indication of device fingerprinting. System testing was performed by accessing Alexa's Top 125 Indonesia Website. We obtained 15.5796 as the ThresholdLevel value. Among the 125 web pages tested, it was found that 38 web pages were indicated utilizing javascript as the media of device fingerprinting activity.

关键词： Device Fingerprinting Mitigation javascript HTTP Proxy

来源：评论

学校读者我要写书评

暂无评论

Research on Malicious javascript Detection Technology Based on LSTM

引用

IEEE ACCESS 2018年 6卷 59118-59125页

作者： Fang, Yong Huang, Cheng Liu, Liang Xue, Min Sichuan Univ Coll Cybersecur Chengdu 610207 Sichuan Peoples R China Sichuan Univ Coll Elect & Informat Chengdu 610065 Sichuan Peoples R China

The attacker injects malicious javascript into web pages to achieve the purpose of implanting Trojan horses, spreading viruses, phishing, and obtaining secret information. By analyzing the existing researches on malicious javascript detection, a malicious javascript detection model based on LSTM (Long Short-Term Memory) is proposed. Features are extracted from the semantic level of bytecode, and the method of word vector is optimized. It can distinguish malicious javascript code and combat obfuscated code effectively. Experiments showed that the accuracy of detection model based on LSTM is 99.51%, and the F1-score is 98.37%, which is better than the existing model based on Random Forest and SVM algorithm.

关键词： javascript malicious code detection bytecode word vector LSTM

来源：评论

学校读者我要写书评

暂无评论

Scripting DNA: Identifying the javascript programmer

引用

DIGITAL INVESTIGATION 2015年 15卷 61-71页

作者： Wisse, Wilco Veenman, Cor Delft Univ Technol Software Engn Res Grp NL-2628 CD Delft Netherlands Netherlands Forens Inst Knowledge & Expertise Ctr Intelligent Data Anal NL-2497 GB The Hague Netherlands

The attribution of authorship is required in diverse applications, ranging from ancient novels (Shakespeare's work, Federalist papers) for historical interest to recent novels for linguistic research or even out of curiosity (Robert Galbraith alias J.K. Rowling). For this problem extensive research has resulted in effective general purpose methods. Also, for other types of text the original author needs to be discovered. Especially, we are interested in methods to identify javascript programmers, which can be used to reveal the offender who produced malicious software on a website. So far, for this hardly studied problem, mainly general purpose methods from natural language authorship attribution have been applied. Moreover, no suitable reference dataset is available to allow for method evaluation and method development in a supervised machine learning approach. In this work we first obtain a reference dataset of substantial size and quality. Further, we propose to extract structural features from the Abstract Syntax Tree (AST) to describe the coding style of an author. In the experiments, we show that the specifically designed features indeed improve the authorship attribution of scripting code to programmers, especially in addition to character n-gram features. (C) 2015 Elsevier Ltd. All rights reserved.

关键词： Authorship identification Authorship verification Source code javascript Abstract Syntax Tree Syntactic features

来源：评论

学校读者我要写书评

暂无评论

Deobfuscation,unpacking,and decoding of obfuscated malicious javascript for machine learning models detection performance improvement

引用

CAAI Transactions on Intelligence Technology 2020年第3期5卷 184-192页

作者： Samuel Ndichu Sangwook Kim Seiichi Ozawa Graduate School of Engineering Kobe UniversityKobe CityJapan Center for Mathematical and Data Sciences Kobe UniversityKobe CityJapan

Obfuscation is rampant in both benign and malicious javascript(JS)*** generates an obscure and undetectable code that hinders comprehension and ***,accurate detection of JS codes that masquerade as innocuous scripts is *** existing deobfuscation methods assume that a specific tool can recover an original JS code *** a multi-layer obfuscation,general tools realize a formatted JS code,but some sections remain *** the detection of such codes,this study performs Deobfuscation,Unpacking,and Decoding(DUD-preprocessing)by function redefinition using a Virtual Machine(VM),a JS code editor,and a python int_to_str()function to facilitate feature learning by the FastText *** learned feature vectors are passed to a classifier model that judges the maliciousness of a JS *** performance evaluation,the authors use the Hynek Petrak’s dataset for obfuscated malicious JS codes and the SRILAB dataset and the Majestic Million service top 10,000 websites for obfuscated benign JS *** then compare the performance to other models on the detection of DUD-preprocessed obfuscated malicious JS *** experimental results show that the proposed approach enhances feature learning and provides improved accuracy in the detection of obfuscated malicious JS codes.

关键词： javascript editor python

来源：评论

学校读者我要写书评

暂无评论

Platform-Independent Dynamic Taint Analysis for javascript

引用

IEEE TRANSACTIONS ON SOFTWARE ENGINEERING 2020年第12期46卷 1364-1379页

作者： Karim, Rezwana Tip, Frank Sochurkova, Alena Sen, Koushik Samsung Res Amer Mountain View CA 94043 USA Northeastern Univ Coll Comp & Informat Sci Boston MA 02115 USA Avast Prague 14000 Czech Republic Univ Calif Berkeley Berkeley CA 94720 USA

Previous approaches to dynamic taint analysis for javascript are implemented directly in a browser or javascript engine, limiting their applicability to a single platform and requiring ongoing maintenance as platforms evolve, or they require nontrivial program transformations. We present an approach that relies on instrumentation to encode taint propagation as instructions for an abstract machine. Our approach has two key advantages: it is platform-independent and can be used with any existing javascript engine, and it can track taint on primitive values without requiring the introduction of wrapper objects. Furthermore, our technique enables multiple deployment scenarios by varying when and where the generated instructions are executed and it supports indirect taint sources, i.e., situations where taint enters an application via arguments passed to dynamically registered event-listener functions. We implemented the technique for the ECMAScript 5 language in a tool called Ichnaea, and evaluated it on 22 NPM modules containing several types of injection vulnerabilities, including 4 modules containing vulnerabilities that were not previously discovered and reported. On these modules, run-time overheads range from 3.17x to 38.42x, which is significantly better than a previous transformation-based technique. We also report on a case study that shows how Ichnaea can be used to detect privacy leaks in a Tizen web application for the Samsung Gear S2 smart watch.

关键词： Instruments Engines Browsers Tools Privacy Gears Data privacy Taint analysis dynamic analysis javascript platform-independent instrumentation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：