检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

1,968 篇 期刊文献
877 篇 会议
853 篇 学位论文
114 册 图书
1 篇 成果

馆藏范围

3,813 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

2,887 篇 工学
- 1,931 篇 计算机科学与技术...
- 1,401 篇 软件工程
- 507 篇 仪器科学与技术
- 263 篇 电气工程
- 156 篇 信息与通信工程
- 94 篇 测绘科学与技术
- 86 篇 机械工程
- 80 篇 地质资源与地质工...
- 79 篇 网络空间安全
- 75 篇 控制科学与工程
- 37 篇 电子科学与技术（可...
- 18 篇 化学工程与技术
- 16 篇 交通运输工程
- 15 篇 公安技术
329 篇 管理学
- 279 篇 管理科学与工程(可...
- 23 篇 图书情报与档案管...
- 20 篇 公共管理
- 14 篇 工商管理
217 篇 理学
- 85 篇 地理学
- 30 篇 物理学
- 30 篇 生物学
- 27 篇 数学
- 23 篇 地球物理学
- 20 篇 化学
- 12 篇 天文学
208 篇 教育学
- 187 篇 教育学
- 21 篇 心理学(可授教育学...
52 篇 医学
- 21 篇 临床医学
- 20 篇 基础医学(可授医学...
17 篇 艺术学
16 篇 经济学
- 15 篇 应用经济学
15 篇 法学
15 篇 文学
15 篇 农学
2 篇 军事学
1 篇 历史学

主题

3,813 篇 javascript
378 篇 html
311 篇 text
299 篇 css
289 篇 ajax
277 篇 php
218 篇 web
184 篇 mysql
161 篇 html5
150 篇 xml
119 篇 java
100 篇 node.js
90 篇 web application
89 篇 dom
88 篇 jquery
83 篇 webgis
81 篇 asp
79 篇 information syst...
73 篇 informační systé...
67 篇 webová aplikace

机构

475 篇 brno university ...
29 篇 电子科技大学
24 篇 吉林大学
23 篇 北京邮电大学
20 篇 山东大学
19 篇 辽宁师范大学
17 篇 northeastern uni...
16 篇 武汉大学
15 篇 华中科技大学
15 篇 四川大学
14 篇 广东工业大学
14 篇 东北大学
13 篇 西南交通大学
13 篇 charles universi...
12 篇 四川职业技术学院
12 篇 aarhus univ aarh...
11 篇 南京大学
11 篇 昆明理工大学
11 篇 西安电子科技大学
10 篇 东南大学

作者

22 篇 tip frank
19 篇 mesbah ali
17 篇 ryu sukyoung
14 篇 pattabiraman kar...
12 篇 程晨
12 篇 moon soo-mook
11 篇 bonetta daniele
11 篇 moller anders
10 篇 pradel michael
9 篇 de roover coen
8 篇 binder walter
8 篇 turcotte alexi
8 篇 nicolay jens
8 篇 flanagan cormac
8 篇 krishnamurthi sh...
8 篇 guha arjun
7 篇 bibi stamatia
7 篇 shihab emad
7 篇 abdalkareem rabe
7 篇 serrano manuel

语言

2,003 篇 中文
1,770 篇 英文
36 篇 其他
1 篇 西班牙文
1 篇 日文
1 篇 葡萄牙文
1 篇 土耳其文

检索条件"主题词=JavaScript"

共 3813 条记录，以下是301-310 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Type-Aware Concolic Testing of javascript Programs 16

Type-Aware Concolic Testing of JavaScript Programs

引用

38th IEEE/ACM International Conference on Software Engineering (ICSE)

作者： Dhok, Monika Ramanathan, Murali Krishna Sinha, Nishant Indian Inst Sci Bengaluru India IBM Res New Delhi India

ISBN: (纸本)9781450339001

Conventional concolic testing has been used to provide high coverage of paths in statically typed languages. While it has also been applied in the context of javascript (JS) programs, we observe that applying concolic testing to dynamically-typed JS programs involves tackling unique problems to ensure scalability. In particular, a naive type-agnostic extension of concolic testing to JS programs causes generation of large number of inputs. Consequently, many executions operate on undefined values and repeatedly explore same paths resulting in redundant tests, thus diminishing the scalability of testing drastically. In this paper, we address this problem by proposing a simple yet effective approach that incorporates type-awareness intelligently in conventional concolic testing to reduce the number of generated inputs for JS programs. We extend our approach inter-procedurally by generating preconditions for each function that provide a summary of the relation between the variable types and paths. Employing the function preconditions when testing reduces the number of inputs generated even further. We implement our ideas and validate it on a number of open-source JS programs (and libraries). For a significant percentage (on average 50%) of the functions, we observe that type-aware concolic testing generates a minuscule percentage (less than 5%) of the inputs as compared to conventional concolic testing approach implemented on top of JALANGI. On average, this approach achieves over 97% of line coverage and over 94% of branch coverage for all the functions across all benchmarks. Moreover, the use of function preconditions reduces the number of inputs generated by 50%. We also demonstrate the use of function preconditions in automatically avoiding real crashes due to incorrectly typed objects.

关键词： Dynamic analysis javascript Testing

来源：评论

学校读者我要写书评

暂无评论

Static javascript Call Graphs: a Comparative Study 18

Static JavaScript Call Graphs: a Comparative Study

引用

18th IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM)

作者： Antal, Gabor Hegedus, Peter Toth, Zoltan Ferenc, Rudolf Gyimothy, Tibor Univ Szeged Dept Software Engn Szeged Hungary MTA SZTE Res Grp Artificial Intelligence Szeged Hungary

ISBN: (纸本)9781538682906

The popularity and wide adoption of javascript both at the client and server side makes its code analysis more important than ever before. Most of the algorithms for vulnerability analysis, coding issue detection, or type inference rely on the call graph representation of the underlying program. Despite some obvious advantages of dynamic analysis, static algorithms should also be considered for call graph construction as they do not require extensive test beds for programs and their costly execution and tracing. In this paper, we systematically compare five widely adopted static algorithms - implemented by the npm call graph, IBM WALA, Google Closure Compiler, Approximate Call Graph, and Type Analyzer for javascript tools - for building javascript call graphs on 26 WebKit SunSpider benchmark programs and 6 real-world *** modules. We provide a performance analysis as well as a quantitative and qualitative evaluation of the results. We found that there was a relatively large intersection of the found call edges among the algorithms, which proved to be 100% precise. However, most of the tools found edges that were missed by all others. ACG had the highest precision followed immediately by TAJS, but ACG found significantly more call edges. As for the combination of tools, ACG and TAJS together covered 99% of the found true edges by all algorithms, while maintaining a precision as high as 98%. Only two of the tools were able to analyze up-to-date multi-file *** modules due to incomplete language features support. They agreed on almost 60% of the call edges, but each of them found valid edges that the other missed.

关键词： javascript call graph static code analysis comparative study

来源：评论

学校读者我要写书评

暂无评论

A Tested Semantics for Getters, Setters, and Eval in javascript

A Tested Semantics for Getters, Setters, and Eval in JavaScr...

引用

11th International Conference on Generative Programming and Component Engineering8th symposium on Dynamic Languages

作者： Politz, Joe Gibbs Carroll, Matthew J. Lerner, Benjamin S. Pombrio, Justin Krishnamurthi, Shriram Brown Univ Providence RI 02912 USA

We present S5, a semantics for the strict mode of the ECMAScript 5.1 (javascript) programming language. S5 shrinks the large source language into a manageable core through an implemented transformation. The resulting specification has been tested against real-world conformance suites for the language. This paper focuses on two aspects of S5: accessors (getters and setters) and eval. Since these features are complex and subtle in javascript, they warrant special study. Variations on both features are found in several other programming languages, so their study is likely to have broad applicability.

关键词： javascript LambdaJS getters setters accessors eval desugar wat wtfjs

来源：评论

学校读者我要写书评

暂无评论

Keep Me Updated: An Empirical Study on Embedded javascript Engines in Android Apps 21

Keep Me Updated: An Empirical Study on Embedded JavaScript E...

引用

IEEE/ACM 21st International Conference on Mining Software Repositories (MSR)

作者： Wen, Elliott Zhou, Jiaxiang Luo, Xiapu Russello, Giovanni Dietrich, Jens Univ Auckland Auckland New Zealand Hong Kong Polytech Univ Hong Kong Peoples R China Victoria Univ Wellington Wellington New Zealand

ISBN: (纸本)9798350363982;9798400705878

Although javascript (JS) has been widely used in mobile development, little is known about the security implications of utilizing JS engines shipped as native app libraries. In this paper, we conduct an empirical study by designing a JS-Inspector pipeline to identify the embedded JS engines in Android apps and assess their security. We investigate over 65,000 Android apps released between Jan 2018 and July 2023. The results show that many popular apps use embedded JS engines, and their engines remain outdated for extended periods. Moreover, approximately 85% of apps have not received updates since their initial release. As such, over 70% of the identified embedded engines are vulnerable to known exploits. We further present case studies of popular apps catering to millions of users. By exploiting their unpatched JS engines through various strategies, such as man-in-the-middle attacks, intent abuse, and malicious mini-apps, we can easily seize control of the targeted apps and execute arbitrary code. This work highlights critical security concerns associated with embedded JS engines. It emphasizes the urgency for timely updates and enhanced security measures during app development.

关键词： Android Hybrid javascript Vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

Symbolic Execution for javascript 18

Symbolic Execution for JavaScript

引用

20th International Symposium on Principles and Practice of Declarative Programming (PPDP)

作者： Santos, Jose Fragoso Maksimovic, Petar Grohens, Theotime Dolby, Julian Gardner, Philippa Imperial Coll London London England ENS Paris Paris France IBM Res New York NY USA

ISBN: (纸本)9781450364416

We present a framework for trustworthy symbolic execution of javascripts programs, whose aim is to assist developers in the testing of their code: the developer writes symbolic tests for which the framework provides concrete counter-models. We create the framework following a new, general methodology for designing compositional program analyses for dynamic languages. We prove that the underlying symbolic execution is sound and does not generate false positives. We establish additional trust by using the theory to precisely guide the implementation and by thorough testing. We apply our framework to whole-program symbolic testing of real-world javascript libraries and compositional debugging of separation logic specifications of javascript programs.

关键词： Symbolic execution Separation logic Formal semantics javascript

来源：评论

学校读者我要写书评

暂无评论

A Proposal of Code Modification Problem for Web Client Programming Using javascript 9

A Proposal of Code Modification Problem for Web Client Progr...

引用

9th International Symposium on Computing and Networking (CANDAR)

作者： Wai, Khaing Hsu Funabiki, Nobuo Mon, Khin Thet Shwe, San Hay Mar Kyaw, Htoo Htoo Sandi Lin, Khin Sandar Okayama Univ Dept Elect & Commun Engn Okayama Japan Pathein Univ Dept Phys Pathein Myanmar

ISBN: (纸本)9781665442466

Programming Learning Assistant System (PLAS) has been developed as a web-based self-learning platform for programming. PLAS offers several types of exercise problems for code reading and code writing skills, namely, grammar-concept understanding problem (GUP), value trace problem (VTP), element fill-in-blank problem (EFP), code completion problem (CCP), and code writing problem (CWP), to support studies at various levels for C, C++, Java, Python, and javascript programming and each problem has different targets for the students. javascript is commonly used together with HTML and CSS, to introduce dynamic behaviors of web pages in web application systems. Thus, javascript should be studied along with them for web client programming. In this paper, we propose a code modification problem (CMP) as a new type in PLAS, to study web client programming using javascript. Since a web page is made by using various functions together, reading and understanding sample source codes using them will be an effective way. Actually, students should have a lot of practices in code reading before implementing source codes from scratch. The CMP instance gives a source code using the functions to be studied and the screenshot of the web page generated by it. Then, it requests to modify the code to generate another web page given by the screenshot. The correctness of any answer is checked through string matching with the correct one. For the evaluation, we generated 25 CMP instances and assigned them to 23 students in Okayama University. Their solution results confirm the validity of the proposal.

关键词： web client programming javascript HTML CSS code modification coding reading

来源：评论

学校读者我要写书评

暂无评论

Generation of TypeScript Declaration Files from javascript Code 18

Generation of TypeScript Declaration Files from JavaScript C...

引用

18th ACM SIGPLAN International Conference on Managed Programming Languages and Runtimes (MPLR)

作者： Cristiani, Fernando Thiemann, Peter Hsch Karlsruhe Karlsruhe Germany Albert Ludwigs Univ Freiburg Freiburg Germany

ISBN: (纸本)9781450386753

Developers are starting to write large and complex applications in TypeScript, a typed dialect of javascript. TypeScript applications integrate javascript libraries via typed descriptions of their APIs called declaration files. DefinitelyTyped is the standard public repository for these files. The repository is populated and maintained manually by volunteers, which is error-prone and time consuming. Discrepancies between a declaration file and the javascript implementation lead to incorrect feedback from the TypeScript IDE and, thus, to incorrect uses of the underlying javascript library. This work presents dts-generate, a tool that generates TypeScript declaration files for javascript libraries uploaded to the NPM registry. It extracts code examples from the documentation written by the developer, executes the library driven by the examples, gathers run-time information, and generates a declaration file based on this information. To evaluate the tool, 249 declaration files were generated directly from an NPM module and 111 of these were compared with the corresponding declaration file provided on DefinitelyTyped. All these files either exhibited no differences at all or differences that can be resolved by extending the developer-provided examples.

关键词： javascript TypeScript Dynamic Analysis Declaration Files

来源：评论

学校读者我要写书评

暂无评论

Beginning javascript and CSS Development with jQuery 1

引用

丛书名： Wrox Programmer to Programmer

2009年

作者： York Richard

ISBN: (数字)9780470500439

ISBN: (纸本)9780470227794

This book covers the jQuery javascript framework and the jQuery UI javascript framework to get more results more quickly out of javascript programming. I cover each method exposed by jQuery’s API, which contains methods to make common, redundant tasks go much more quickly in less code. I also cover how jQuery eliminates certain cross-browser, cross-platform development headaches like the event model; not only does it eliminate these headaches, but it also makes it easier to work with events by reducing the amount of code that you need to write to attach events. It even gives you the ability to simulate events. You should have a basic understanding of javascript. I review some basic javascript programming concepts, such as the Event API, but I do not go into great detail about the javascript language itself. You’ll want to have at least a basic grasp of the Document Object Model, or DOM, and basic javascript programming syntax. Additionally, you’ll need to know your way around CSS and HTML, since knowledge of those technologies is also assumed. You’ll see how you can leverage the jQuery UI library to make graphically driven UI widgets. jQuery gives you the ability to break content up among multiple tabs in the same page. You have the ability to customize the look and feel of the tabs, and even to create a polished look and feel by providing different effects that come in when you mouse over tabs and click on them. Some of the UI elements and techniques include: make any element draggable with the mouse drag-and-drop user interfaces lists that are sortable via drag-and-drop re-size elements on a page using the mouse entering a date into a field using a nice, accessible javascript-driven calendar that pops up when you click on an input field custom pop-up dialogues that are like virtual pop-up windows a graphical slider bar, similar to your media player’s volume control

关键词： javascript javascript development jQuery dynamic web applications Ajax techniques in javascript Ajax interactions in javascript best practices of web development javascript library event handling with jQuery animating with jQuery rapid web development code separation in web development code standards in web development code syntax in web development

来源：评论

学校读者我要写书评

暂无评论

Beginning javascript 3

引用

丛书名： Programmer to Programmer

2007年

作者： Paul Wilton Jeremy McPeak

ISBN: (纸本)9780470051511;0470051515

javascript is a scripting language that enables you to enhance static web applications by providing dynamic, personalized, and interactive content. This improves the experience of visitors to your site and makes it more likely that they will visit again. You must have seen the flashy drop-down menus, moving text, and changing content that are now widespread on web sites—they are enabled through javascript. Supported by all the major browsers, javascript is the language of choice on the Web. It can even be used outside web applications—to automate administrative tasks, for example. This book aims to teach you all you need to know to start experimenting with javascript: what it is, how it works, and what you can do with it. Starting from the basic syntax, you'll move on to learn how to create powerful web applications. Don't worry if you've never programmed before—this book will teach you all you need to know, step by step. You'll find that javascript can be a great introduction to the world of programming: with the knowledge and understanding that you'll gain from this book, you'll be able to move on to learn newer and more advanced technologies in the world of computing. In order to get the most out of this book, you'll need to have an understanding of HTML and how to create a static web page. You don't need to have any programming experience. This book will also suit you if you have some programming experience already, and would like to turn your hand to web programming. You will know a fair amount about computing concepts, but maybe not as much about web technologies. Alternatively, you may have a design background and know relatively little about the Web and computing concepts. For you, javascript will be a cheap and relatively easy introduction to the world of programming and web application development. Whoever you are, we hope that this book lives up to your expectations. You'll begin by looking at exactly what javascript is, and

关键词： programmer javascript beginningIntroductory & Beginning Programming Computers & Internet

来源：评论

学校读者我要写书评

暂无评论

InspectJS: Leveraging Code Similarity and User-Feedback for Effective Taint Specification Inference for javascript 44

InspectJS: Leveraging Code Similarity and User-Feedback for ...

引用

ACM/IEEE 44th International Conference on Software Engineering - Software Engineering in Practice (ICSE-SEIP)

作者： Dutta, Saikat Garbervetsky, Diego Lahiri, Shuvendu K. Schafer, Max UIUC Urbana IL 61801 USA DC UBA ICC CONICET Buenos Aires DF Argentina Microsoft Res Seattle WA USA GitHub Oxford England

ISBN: (纸本)9781665495905

Static analysis has established itself as a weapon of choice for detecting security vulnerabilities. Taint analysis in particular is a very general and powerful technique, where security policies are expressed in terms of forbidden flows, either from untrusted input sources to sensitive sinks (in integrity policies) or from sensitive sources to untrusted sinks (in confidentiality policies). The appeal of this approach is that the taint-tracking mechanism has to be implemented only once, and can then be parameterized with different taint specifications (that is, sets of sources and sinks, as well as any sanitizers that render otherwise problematic flows innocuous) to detect many different kinds of vulnerabilities. But while techniques for implementing scalable inter-procedural static taint tracking are fairly well established, crafting taint specifications is still more of an art than a science, and in practice tends to involve a lot of manual effort. Past work has focussed on automated techniques for inferring taint specifications for libraries either from their implementation or from the way they tend to be used in client code. Among the latter, machine learning-based approaches have shown great promise. In this work we present our experience combining an exist- ing machine-learning approach to mining sink specifications for javascript libraries with manual taint modelling in the context of Gill-tub's CodeQL analysis framework. We show that the machine-learning component can successfully infer many new taint sinks that either are not part of the manual modelling or are not detected due to analysis incompleteness. Moreover, we present techniques for organizing sink predictions using automated ranking and code- similarity metrics that allow an analysis engineer to efficiently sift through large numbers of predictions to identify true positives.

关键词： Taint Analysis Machine Learning javascript

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共382页 << < 27 28 29 30 31 32 33 34 35 36 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：