Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs

Laurent Christophe; Coen De Roover; Elisa Gonzalez Boix; Wolfgang De Meuter

doi:10.1145/3278122.3278135

Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs

Laurent Christophe, Coen De Roover, Elisa Gonzalez Boix, Wolfgang De Meuter

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › Research

4 Citations (Scopus)

21 Downloads (Pure)

Abstract

Dynamic analyses are commonly implemented by instrumenting the program under analysis.
Examples of such analyses for JavaScript range from checkers of user-defined invariants to concolic testers.
For a full-stack JavaScript program, these analyses need to reason about the state of the client-side and server-side processes it is comprised of.
Lifting a dynamic analysis so that it supports full-stack programs can be challenging.
It involves distributed communication to maintain the analysis state across all processes, which has to be deadlock-free.
In this paper, we advocate maintaining distributed analysis state in a centralized analysis process instead ---which is communicated with from the processes under analysis.
The approach is supported by a dynamic analysis platform that provides abstractions for this communication.
We evaluate the approach through a case study.
We use the platform to build a distributed origin analysis, capable of tracking the expressions from which values originate from across process boundaries, and deploy it on collaborative drawing application.
The results show that our approach greatly simplifies the lifting process at the cost of a computational overhead.
We deem this overhead acceptable for analyses intended for use at development time.

Original language	English
Title of host publication	GPCE 2018 - Proceedings of the 17th ACM SIGPLAN International Conference on Generative Programming
Subtitle of host publication	Concepts and Experiences, co-located with SPLASH 2018
Editors	Eric Van Wyk, Tiark Rompf
Publisher	ACM
Pages	107-118
Number of pages	12
ISBN (Electronic)	9781450360456
ISBN (Print)	978-1-4503-6045-6/18/11
DOIs	https://doi.org/10.1145/3278122.3278135
Publication status	Published - 5 Nov 2018
Event	International Conference on Generative Programming: Concepts & Experience - Boston, United States Duration: 5 Nov 2018 → 6 Nov 2018 Conference number: 17

Conference

Conference	International Conference on Generative Programming: Concepts & Experience
Abbreviated title	GPCE
Country/Territory	United States
City	Boston
Period	5/11/18 → 6/11/18

Keywords

Distributed Applications
Dynamic Analysis
JavaScript

Access to Document

10.1145/3278122.3278135

http://soft.vub.ac.be/Publications/2018/vub-soft-tr-18-17.pdf

Cite this

Christophe, L., De Roover, C., Gonzalez Boix, E., & De Meuter, W. (2018). Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs. In E. Van Wyk, & T. Rompf (Eds.), GPCE 2018 - Proceedings of the 17th ACM SIGPLAN International Conference on Generative Programming: Concepts and Experiences, co-located with SPLASH 2018 (pp. 107-118). ACM. https://doi.org/10.1145/3278122.3278135

Christophe, Laurent ; De Roover, Coen ; Gonzalez Boix, Elisa ; De Meuter, Wolfgang. / Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs. GPCE 2018 - Proceedings of the 17th ACM SIGPLAN International Conference on Generative Programming: Concepts and Experiences, co-located with SPLASH 2018. editor / Eric Van Wyk ; Tiark Rompf. ACM, 2018. pp. 107-118

@inproceedings{3023c2bad6244bf48d70439cdcf533cd,

title = "Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs",

abstract = "Dynamic analyses are commonly implemented by instrumenting the program under analysis.Examples of such analyses for JavaScript range from checkers of user-defined invariants to concolic testers.For a full-stack JavaScript program, these analyses need to reason about the state of the client-side and server-side processes it is comprised of.Lifting a dynamic analysis so that it supports full-stack programs can be challenging. It involves distributed communication to maintain the analysis state across all processes, which has to be deadlock-free.In this paper, we advocate maintaining distributed analysis state in a centralized analysis process instead ---which is communicated with from the processes under analysis. The approach is supported by a dynamic analysis platform that provides abstractions for this communication.We evaluate the approach through a case study.We use the platform to build a distributed origin analysis, capable of tracking the expressions from which values originate from across process boundaries, and deploy it on collaborative drawing application. The results show that our approach greatly simplifies the lifting process at the cost of a computational overhead.We deem this overhead acceptable for analyses intended for use at development time.",

keywords = "Distributed Applications, Dynamic Analysis, JavaScript",

author = "Laurent Christophe and {De Roover}, Coen and {Gonzalez Boix}, Elisa and {De Meuter}, Wolfgang",

year = "2018",

month = nov,

day = "5",

doi = "10.1145/3278122.3278135",

language = "English",

isbn = "978-1-4503-6045-6/18/11",

pages = "107--118",

editor = "{Van Wyk}, Eric and Tiark Rompf",

booktitle = "GPCE 2018 - Proceedings of the 17th ACM SIGPLAN International Conference on Generative Programming",

publisher = "ACM",

note = "International Conference on Generative Programming: Concepts & Experience , GPCE ; Conference date: 05-11-2018 Through 06-11-2018",

}

Christophe, L , De Roover, C , Gonzalez Boix, E & De Meuter, W 2018, Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs. in E Van Wyk & T Rompf (eds), GPCE 2018 - Proceedings of the 17th ACM SIGPLAN International Conference on Generative Programming: Concepts and Experiences, co-located with SPLASH 2018. ACM, pp. 107-118, International Conference on Generative Programming: Concepts & Experience , Boston, United States, 5/11/18. https://doi.org/10.1145/3278122.3278135

Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs. / Christophe, Laurent ; De Roover, Coen ; Gonzalez Boix, Elisa ; De Meuter, Wolfgang.

GPCE 2018 - Proceedings of the 17th ACM SIGPLAN International Conference on Generative Programming: Concepts and Experiences, co-located with SPLASH 2018. ed. / Eric Van Wyk; Tiark Rompf. ACM, 2018. p. 107-118.

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › Research

TY - GEN

T1 - Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs

AU - Christophe, Laurent

AU - De Roover, Coen

AU - Gonzalez Boix, Elisa

AU - De Meuter, Wolfgang

N1 - Conference code: 17

PY - 2018/11/5

Y1 - 2018/11/5

N2 - Dynamic analyses are commonly implemented by instrumenting the program under analysis.Examples of such analyses for JavaScript range from checkers of user-defined invariants to concolic testers.For a full-stack JavaScript program, these analyses need to reason about the state of the client-side and server-side processes it is comprised of.Lifting a dynamic analysis so that it supports full-stack programs can be challenging. It involves distributed communication to maintain the analysis state across all processes, which has to be deadlock-free.In this paper, we advocate maintaining distributed analysis state in a centralized analysis process instead ---which is communicated with from the processes under analysis. The approach is supported by a dynamic analysis platform that provides abstractions for this communication.We evaluate the approach through a case study.We use the platform to build a distributed origin analysis, capable of tracking the expressions from which values originate from across process boundaries, and deploy it on collaborative drawing application. The results show that our approach greatly simplifies the lifting process at the cost of a computational overhead.We deem this overhead acceptable for analyses intended for use at development time.

AB - Dynamic analyses are commonly implemented by instrumenting the program under analysis.Examples of such analyses for JavaScript range from checkers of user-defined invariants to concolic testers.For a full-stack JavaScript program, these analyses need to reason about the state of the client-side and server-side processes it is comprised of.Lifting a dynamic analysis so that it supports full-stack programs can be challenging. It involves distributed communication to maintain the analysis state across all processes, which has to be deadlock-free.In this paper, we advocate maintaining distributed analysis state in a centralized analysis process instead ---which is communicated with from the processes under analysis. The approach is supported by a dynamic analysis platform that provides abstractions for this communication.We evaluate the approach through a case study.We use the platform to build a distributed origin analysis, capable of tracking the expressions from which values originate from across process boundaries, and deploy it on collaborative drawing application. The results show that our approach greatly simplifies the lifting process at the cost of a computational overhead.We deem this overhead acceptable for analyses intended for use at development time.

KW - Distributed Applications

KW - Dynamic Analysis

KW - JavaScript

UR - http://www.scopus.com/inward/record.url?scp=85058985693&partnerID=8YFLogxK

U2 - 10.1145/3278122.3278135

DO - 10.1145/3278122.3278135

M3 - Conference paper

SN - 978-1-4503-6045-6/18/11

SP - 107

EP - 118

BT - GPCE 2018 - Proceedings of the 17th ACM SIGPLAN International Conference on Generative Programming

A2 - Van Wyk, Eric

A2 - Rompf, Tiark

PB - ACM

T2 - International Conference on Generative Programming: Concepts & Experience

Y2 - 5 November 2018 through 6 November 2018

ER -

Christophe L , De Roover C , Gonzalez Boix E , De Meuter W. Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs. In Van Wyk E, Rompf T, editors, GPCE 2018 - Proceedings of the 17th ACM SIGPLAN International Conference on Generative Programming: Concepts and Experiences, co-located with SPLASH 2018. ACM. 2018. p. 107-118 https://doi.org/10.1145/3278122.3278135

Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

IWTSBO11: TEARLESS: Secure Coordination of Rich Internet Application Tiers

Cite this

Orchestrating Dynamic Analyses of Distributed Processes for Full-Stack JavaScript Programs

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Projects

IWTSBO11: TEARLESS: Secure Coordination of Rich Internet Application Tiers

Cite this