Generating permission-based security policies
Xin Li, Hua Vy Le Thanh, et al.
DSA 2018
Current practice in testing JavaScript web applications requires manual construction of test cases, which is difficult and tedious. We present a framework for feedback-directed automated test generation for JavaScript in which execution is monitored to collect information that directs the test generator towards inputs that yield increased coverage. We implemented several instantiations of the framework, corresponding to variations on feedback-directed random testing, in a tool called Artemis. Experiments on a suite of JavaScript applications demonstrate that a simple instantiation of the framework that uses event handler registrations as feedback information produces surprisingly good coverage if enough tests are generated. By also using coverage information and read-write sets as feedback information, a slightly better level of coverage can be achieved, and sometimes with many fewer tests. The generated tests can be used for detecting HTML validity problems and other programming errors. © 2011 ACM.
Xin Li, Hua Vy Le Thanh, et al.
DSA 2018
Vivek Kumar, Julian Dolby, et al.
PPPJ 2016
Manu Sridharan, Shay Artzi, et al.
OOPSLA 2011
Jinqiu Yang, Erik Wittern, et al.
MSR/ICSE 2018