检索结果-内蒙古大学图书馆

Just-In-Time Defect Prediction on javascript Projects: A Replication Study

ACM TRANSACTIONS ON SOFTWARE ENGINEERING AND METHODOLOGY 2022年第4期31卷 76-76页

作者： Ni, Chao Xia, Xin Lo, David Yang, Xiaohu Hassan, Ahmed E. Zhejiang Univ Sch Software Technol Zheda Rd 38 West Lake Dist Hangzhou Zhejiang Peoples R China Huawei Software Engn Applicat Technol Lab Jianghong Rd 410 Hangzhou Zhejiang Peoples R China Singapore Management Univ 80 Stamford Rd Singapore Singapore Zhejiang Univ Coll Comp Sci & Technol Rd 38 West Lake Dist Hangzhou Zhejiang Peoples R China Queens Univ 25 Union St Kingston ON Canada

Change-level defect prediction is widely referred to as just-in-time (JIT) defect prediction since it identifies a defect-inducing change at the check-in time, and researchers have proposed many approaches based on the language-independent change-level features. These approaches can be divided into two types: supervised approaches and unsupervised approaches, and their effectiveness has been verified on Java or C++ projects. However, whether the language-independent change-level features can effectively identify the defects of javascript projects is still unknown. Additionally, many researches have confirmed that supervised approaches outperform unsupervised approaches on Java or C++ projects when considering inspection effort. However, whether supervised JIT defect prediction approaches can still perform best on javascript projects is still unknown. Lastly, prior proposed change-level features are programming languageindependent, whether programming language-specific change-level features can further improve the performance of JIT approaches on identifying defect-prone changes is also unknown. To address the aforementioned gap in knowledge, in this article, we collect and label the top-20 most starred javascript projects on GitHub. javascript is an extremely popular and widely used programming language in the industry. We propose five javascript-specific change-level features and conduct a large-scale empirical study (i.e., involving a total of 176,902 changes) and find that (1) supervised JIT defect prediction approaches (i.e., CBS+) still statistically significantly outperform unsupervised approaches on javascript projects when considering inspection effort;(2) javascript-specific change-level features can further improve the performance of approach built with language-independent features on identifying defect-prone changes;(3) the change-level features in the dimension of size (i.e., LT), diffusion (i.e., NF), and javascript-specific (i.e., SO and TC) are the m

关键词： Defect prediction just-in-time defect prediction empirical study javascript

来源：评论

学校读者我要写书评

暂无评论

Combining thread-level speculation and just-in-time compilation in Google's V8 javascript engine

引用

CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE 2017年第1期29卷 1-23页

作者： Martinsen, Jan Kasper Grahn, Hakan Isberg, Anders Blekinge Inst Technol Karlskrona Sweden Sony Mobile Commun AB Lund Sweden

Thread-level speculation can be used to take advantage of multicore architectures for javascript in web applications. We extend previous studies with these main contributions;we implement thread-level speculation in the state-of-the art just-in-time-enabled javascript engine V8 and make the measurements in the Chromium web browser both from Google instead of using an interpreted javascript engine. We evaluate the thread-level speculation and just-in-time compilation combination on 15 very popular web applications, 20 HTML5 demos from the JS1K competition, and 4 Google Maps use cases. The performance is evaluated on two, four, and eight cores. The results clearly show that it is possible to successfully combine thread-level speculation and just-in-time compilation. This makes it possible to take advantage of multicore architectures for web applications while hiding the details of parallel programming from the programmer. Further, our results show an average speedup for the thread-level speculation and just-in-time compilation combination by a factor of almost 3 on four cores and over 4 on eight cores, without changing any of the javascript source code. Copyright (c) 2016 John Wiley & Sons, Ltd.

关键词： parallel programming web applications javascript

来源：评论

学校读者我要写书评

暂无评论

Juicing V8: A primary account for the memory forensics of the V8 javascript engine

引用

FORENSIC SCIENCE INTERNATIONAL-DIGITAL INVESTIGATION 2022年 42卷

作者： Wang, Enoch Zurowski, Samuel Duffy, Orion Thomas, Tyler Baggili, Ibrahim Univ New Haven Samuel S Bergami Jr Cybersecur Ctr Cyber Forens Res & Educ Grp UNHcFREG West Haven CT 06516 USA Univ New Haven Connecticut Inst Technol West Haven CT USA

V8 is the open source interpreter developed by Google to enable javascript (JS) functionality in Chrome and power other software. Malicious threat actors abuse the usage of JS because most modern-day browsers implicitly trust script code to execute. To aid in incident response and memory forensics in such scenarios, our work introduces the first generalizable account of the memory forensics of the V8 JS engine and provides practitioners with a list of objects and their descriptors extracted from a memory image. These objects can be used to reveal key information about a user and their activity. We analyzed the V8 engine and its garbage collection process. We then developed and validated a Volatility plugin - V8MapScan - to reconstruct V8 objects from a memory image. The runtime of the V8 engine is housed within the V8 isolate which contains its own heap manager and garbage collector. Within the heap of the isolate exists a root object map known as the MetaMap. By using the MetaMap and a object-fitting technique, we were able to extract objects, object-maps, and object properties. The V8MapScan plugin scans process memory for the MetaMap data structure contained within the V8 isolate using its data structure, references to objects can be found and extracted. Our findings were verified with Chrome DevTool's Heap Profiler. Our approach recovered the majority of objects indicated by the heap profiler with common types such as the ONE_BYTE_INTERNALIZED_STR type returning more than 98.9%. Lastly, we provide a case study using our tools on the Monero Cryptocurrency Miner. (C) 2022 The Authors. Published by Elsevier Ltd.

关键词： Memory forensics Volatility V8 javascript Memory analysis Object recovery

来源：评论

学校读者我要写书评

暂无评论

JSOPT: A Framework for Optimization of javascript on Web Browsers

引用

MEHRAN UNIVERSITY RESEARCH JOURNAL OF ENGINEERING AND TECHNOLOGY 2018年第1期37卷 95-104页

作者： Waqas, Muhammad Khan, Minhaj Ahmad BahauddinZakariya Univ Dept Comp Sci Multan Pakistan

In the current era where multi-core technologies are very common in use, the existing web browsers are unable to fully utilize the capability of multi-core processors. The web browsers execute the javascript code locally in order to produce an efficient response of web pages. This responsiveness is however limited by the fact that the javascript code is uni-threaded, and consequently, the efficiency of the code degrades if it involves a large number of computations. In this paper, we propose a framework called JSOPT (javascript Optimizer) which generates an efficient javascript code to effectively utilize multi-core architectures. The framework uses a template containing constructs for communication & synchronization, and subsequently generates optimized code to be executed on the multi-core architectures. Multiple instances of templates are then generated with different implementations of the code and the best instance is selected to be incorporated in the library. With the optimized code generated using JSOPT, our results show a significant improvement in the performance of several benchmarks involving intensive computations based matrix operations on the Mozilla Firefox web browser.

关键词： javascript Threads Performance Web Browsers Code Generation

来源：评论

学校读者我要写书评

暂无评论

Investigating and recommending co-changed entities for javascript programs

引用

JOURNAL OF SYSTEMS AND SOFTWARE 2021年 180卷 111027-111027页

作者： Jiang, Zijian Zhong, Hao Meng, Na Virginia Polytech Inst & State Univ Blacksburg VA 24060 USA Shanghai Jiao Tong Univ Shanghai 200240 Peoples R China

javascript (JS) is one of the most popular programming languages due to its flexibility and versatility, but maintaining JS code is tedious and error-prone. In our research, we conducted an empirical study to characterize the relationship between co-changed software entities (e.g., functions and variables), and built a machine learning (ML)-based approach to recommend additional entity to edit given developers' code changes. Specifically, we first crawled 14,747 commits in 10 open-source projects;for each commit, we created at least one change dependency graph (CDG) to model the referencer-referencee relationship between co-changed entities. Next, we extracted the common subgraphs between CDGs to locate recurring co-change patterns between entities. Finally, based on those patterns, we extracted code features from co-changed entities and trained an ML model that recommends entities-to-change given a program commit. According to our empirical investigation, (1) three recurring patterns commonly exist in all projects;(2) 80%-90% of co-changed function pairs either invoke the same function(s), access the same variable( s), or contain similar statement(s);(3) our ML-based approach CoRec recommended entity changes with high accuracy (73%-78%). CoRec complements prior work because it suggests changes based on program syntax, textual similarity, as well as software history;it achieved higher accuracy than two existing tools in our evaluation. (C) 2021 Elsevier Inc. All rights reserved.

关键词： Multi-entity edit Change suggestion Machine learning javascript

来源：评论

学校读者我要写书评

暂无评论

Efficient Dynamic Access Analysis Using javascript Proxies

引用

ACM SIGPLAN NOTICES 2014年第2期49卷 49-60页

作者： Keil, Matthias Thiemann, Peter Univ Freiburg Inst Comp Sci D-79106 Freiburg Germany

JSConTest introduced the notions of effect monitoring and dynamic effect inference for javascript. It enables the description of effects with path specifications resembling regular expressions. It is implemented by an offline source code transformation. To overcome the limitations of the JSConTest implementation, we redesigned and reimplemented effect monitoring by taking advantange of javascript proxies. Our new design avoids all drawbacks of the prior implementation. It guarantees full interposition;it is not restricted to a subset of javascript;it is self-maintaining;and its scalability to large programs is significantly better than with JSConTest. The improved scalability has two sources. First, the reimplementation is significantly faster than the original, transformationbased implementation. Second, the reimplementation relies on the fly-weight pattern and on trace reduction to conserve memory. Only the combination of these techniques enables monitoring and inference for large programs.

关键词： Access Permission Contracts javascript Proxies Design Languages Security Verification

来源：评论

学校读者我要写书评

暂无评论

Of javascript AOT Compilation Performance

引用

PROCEEDINGS OF THE ACM ON PROGRAMMING LANGUAGES-PACMPL 2021年第ICFP期5卷 1–30页

作者： Serrano, Manuel Univ Cote dAzur INRIA Inria Sophia Mediterranee 2004 Route Lucioles F-06902 Sophia Antipolis France

The fastest javascript production implementations use just-in-time (JIT) compilation and the vast majority of academic publications about implementations of dynamic languages published during the last two decades focus on JIT compilation. This does not imply that static compilers (AoT) cannot be competitive;as comparatively little effort has been spent creating fast AoT javascript compilers, a scientific comparison is lacking. This paper presents the design and implementation of an AoT javascript compiler, focusing on a performance analysis. The paper reports on two experiments, one based on standard javascript benchmark suites and one based on 18 new benchmarks chosen for their diversity of styles, authors, sizes, provenance, and coverage of the language. The first experiment shows an advantage to JIT compilers, which is expected after the decades of effort that these compilers have paid to these very tests. The second shows more balanced results, as the AoT compiler generates programs that reach competitive speeds and that consume significantly less memory. The paper presents and evaluates techniques that we have either invented or adapted from other systems, to improve AoT javascript compilation.

关键词： javascript Scheme AOT JIT Compiler Dynamic Languages

来源：评论

学校读者我要写书评

暂无评论

javascript for the World Wide Web 3rd ed.

引用

丛书名： Visual quickstart guide

1999年

作者： Tom Negrino Dori Smith

ISBN: (纸本)0201354632

From the Book: Welcome to javascript! Using this easy-to-learn programming language, you'll be able to add pizzazz to your Web pages and make them more useful for you and for your site's visitors. We've written this book as a painless introduction to javascript, so you don't have to be a geek or a nerd to write a script. Pocket protectors will not be necessary at any time. As a friend of ours says, "We're geeky, so you don't have to be!" We wrote this book for you We figure that if you're interested in javascript, then you've already got some experience in creating HTML pages and Web sites, and you want to take the next step by adding some interactivity to your sites. We don't assume that you know anything about programming or scripting. We also don't assume that you are an HTML expert (though if you are, that's just fine). We do assume that you've got at least the basics of building Web pages down, and that you have some familiarity with common HTML, such as links, images, forms, and frames. How to use this book Throughout the book, we've used some devices that should make it easier for you to work with both the book and with javascript itself. In the step-by-step instructions that make up most of the book, we've used a special type style to denote either HTML or javascript code, like this: *** You'll also notice that we show the HTML in uppercase, and the javascript in lowercase, which makes it easier to distinguish between the two on a Web page. Whenever you see a quote mark in a javascript, it is always a straight quote (like " or "), never curlyquotes (aka "smart" quotes, like' or "). Curly quotes will prevent your javascript from working, so make sure that you avoid them when you write scripts. In the illustrations accompanying the stepby-step instructions, we've highlighted the part of the scripts that we're discussing in red, so you can quickly find what we're talking about. We often also highlight parts of the screen shots of Web browser windows i

关键词： javascript

来源：评论

学校读者我要写书评

暂无评论

javascript恶意脚本检测方法的研究

JavaScript恶意脚本检测方法的研究

引用

作者：张金玲北京邮电大学

学位级别：硕士

目前已经有一些针对javascript恶意脚本的检测方法被提出,但是随着混淆技术和ECMAScript6新标准的逐渐应用,javascript恶意脚本的形式更加多样化,其隐蔽性也越来越高,这给相关的研究和检测工作带来了新的挑战,导致当前已有检测方法的检... 详细信息

目前已经有一些针对javascript恶意脚本的检测方法被提出,但是随着混淆技术和ECMAScript6新标准的逐渐应用,javascript恶意脚本的形式更加多样化,其隐蔽性也越来越高,这给相关的研究和检测工作带来了新的挑战,导致当前已有检测方法的检测效果都不尽人意,因此针对javascript恶意脚本的检测极具研究价值。本文从多个方面对javascript恶意脚本进行检测,提出了静态和动态两套javascript恶意脚本检测方法。具体研究成果如下:1.基于否定选择算法V-detector提出了一种可用于过滤javascript脚本的算法LMV-detector,并使用该算法对javascript脚本进行过滤。实验结果表明该算法可以快速区分正常样本和广告、插件、恶意等非正常样本,有助于对样本的标记工作。此外,实现了一个javascript脚本抓取工具,可以从指定网站抓取javascript脚本用于本文的研究工作。2.分析了针对javascript的混淆技术以及浏览器端javascript的相关特性,在此基础上总结了四类静态检测特征,并使用主成分分析法对原始特征向量进行降维。采用机器学习技术对降维后的特征进行了验证,实验结果表明本文提出的四类静态检测特征对javascript恶意脚本具有较高的识别能力。3.基于互信息提出了一个行为特征危害系数计算公式,并结合动态行为特征建立了 javascript恶意脚本评估指标。论文在模拟环境中解析执行javascript脚本并提取其动态行为特征,并使用评估指标对提取到的动态行为特征进行处理。采用SVM算法对处理后的特征进行了验证,实验结果表明检测准确率为99.6%。

关键词： javascript 恶意脚本检测否定选择算法机器学习动态行为特征

来源：评论

学校读者我要写书评

暂无评论

javascript动态切片技术的设计与实现

JavaScript动态切片技术的设计与实现

引用

作者：叶家彬上海交通大学

学位级别：硕士

javascript是目前最流行的编程语言之一。由于javascript具有高度动态的特性,它非常便于用来快速开发客户端的网络应用程序,也正因为这一点使得javascript的代码变得难以维护。运行在浏览器中的javascript程序还会和HTML代码、DOM等浏... 详细信息

javascript是目前最流行的编程语言之一。由于javascript具有高度动态的特性,它非常便于用来快速开发客户端的网络应用程序,也正因为这一点使得javascript的代码变得难以维护。运行在浏览器中的javascript程序还会和HTML代码、DOM等浏览器提供的接口交互,这样更加重了程序员在调试及维护javascript应用程序的难度。本文提出了一种针对javascript应用程序的动态切片技术,来帮助程序员调试javascript应用程序。该技术基于javascript系统依赖图的构建,将javascript程序切片的问题转换为依赖图的可达性问题。该技术提出的javascript系统依赖图包括了以下三种依赖关系:数据依赖、控制依赖以及DOM依赖。其中数据依赖和控制依赖是传统程序依赖分析中常见的两种依赖关系,本论文对这两种依赖的分析在javascript语言层面上进行了优化,使用动态分析策略来计算程序中的数据依赖关系,结合静态和动态两种分析策略来得到控制依赖的结果。在javascript应用程序的运行过程中,浏览器的DOM会和javascript对象交互并由此产生依赖关系。基于此,本文提出了一种新的依赖关系:DOM依赖,并设计了DOM依赖的分析算法。最后综合这三种依赖关系可以构建出一个完整的javascript系统依赖图,用户通过指定某一语句对应的节点就可以进行程序切片工作。基于以上提出的动态切片技术,本文作者实现了一个javascript动态切片工具,它可以对实际的javascript应用程序进行动态切片。本论文对六个javascript程序进行了测试,其中三个是实际的javascript应用程序,另外三个是常用的javascript库。实验结果表明,动态切片器可以高效地对javascript应用程序进行动态切片,其切片结果占原程序的比重基本小于5%。

关键词：程序切片程序分析 javascript

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：