Computer Science Technical Reports
CS at VT

A Practical Blended Analysis for Dynamic Features in JavaScript

Wei, Shiyi and Ryder, Barbara G. (2012) A Practical Blended Analysis for Dynamic Features in JavaScript. Technical Report TR-12-11, Computer Science, Virginia Tech.

Full text available as:
PDF - Requires Adobe Acrobat Reader or other PDF viewer.
BlendedJS-FSE12Submission.pdf (407625)


The JavaScript Blended Analysis Framework is designed to perform a general-purpose, practical combined static/dynamic analysis of JavaScript programs, while handling dynamic features such as run-time generated code and variadic func- tions. The idea of blended analysis is to focus static anal- ysis on a dynamic calling structure collected at runtime in a lightweight manner, and to rene the static analysis us- ing additional dynamic information. We perform blended points-to analysis of JavaScript with our framework and compare results with those computed by a pure static points- to analysis. Using JavaScript codes from actual webpages as benchmarks, we show that optimized blended analysis for JavaScript obtains good coverage (86.6% on average per website) of the pure static analysis solution and nds ad- ditional points-to pairs (7.0% on average per website) con- tributed by dynamically generated/loaded code.

Item Type:Departmental Technical Report
Keywords:Program analysis, points-to analysis, JavaScript
Subjects:Computer Science > Multimedia & Hypertext
ID Code:1202
Deposited By:Administrator, Eprints
Deposited On:04 August 2012