JavaScript優(yōu)化編譯執(zhí)行模式下的動態(tài)污點(diǎn)分析技術(shù)
發(fā)布時(shí)間:2018-10-24 10:53
【摘要】:目前,主流的JavaScript執(zhí)行引擎為了提高效率,引入優(yōu)化編譯執(zhí)行模式,對頻繁運(yùn)行的熱點(diǎn)函數(shù)進(jìn)行即時(shí)優(yōu)化編譯。優(yōu)化編譯執(zhí)行模式的引入,給通過動態(tài)插樁實(shí)現(xiàn)JavaScript程序的動態(tài)污點(diǎn)分析(dynamic taint analysis,DTA)帶來了新的挑戰(zhàn)。針對這一問題,該文針對HTML5混合型安卓應(yīng)用,通過修改其所使用的V8JavaScript引擎,基于動態(tài)插樁實(shí)現(xiàn)了一種優(yōu)化編譯執(zhí)行模式下的動態(tài)污點(diǎn)分析方法。該方法使用污染包裹對象的方式對污點(diǎn)標(biāo)簽進(jìn)行存儲,在優(yōu)化編譯執(zhí)行模式下的Hydrogen中間代碼層面進(jìn)行插樁操作。實(shí)驗(yàn)結(jié)果表明:該方法能夠有效地在優(yōu)化編譯執(zhí)行模式下進(jìn)行污點(diǎn)跟蹤,且性能開銷也在可以接受的范圍內(nèi)。
[Abstract]:At present, in order to improve the efficiency, the mainstream JavaScript execution engine introduces the optimized compilation execution mode to optimize the frequently running hotspots. The introduction of optimized compiler execution mode brings a new challenge to the implementation of dynamic stain analysis (dynamic taint analysis,DTA) of JavaScript programs by dynamically inserting piles. In order to solve this problem, this paper proposes a dynamic stain analysis method based on dynamic piling for HTML5 hybrid Android application, by modifying the V8JavaScript engine it uses. In this method, the tainted label is stored in the way of contaminated wrapping object, and the piling operation is carried out at the middle code level of Hydrogen in the optimized compilation execution mode. The experimental results show that the proposed method can effectively track the corruption in the optimized compilation execution mode, and the performance overhead is within acceptable range.
【作者單位】: 數(shù)據(jù)工程與知識工程教育部重點(diǎn)實(shí)驗(yàn)室(中國人民大學(xué));中國人民大學(xué)信息學(xué)院;
【基金】:國家自然科學(xué)基金資助項(xiàng)目(91418206,61472429)
【分類號】:TP312.2
本文編號:2291186
[Abstract]:At present, in order to improve the efficiency, the mainstream JavaScript execution engine introduces the optimized compilation execution mode to optimize the frequently running hotspots. The introduction of optimized compiler execution mode brings a new challenge to the implementation of dynamic stain analysis (dynamic taint analysis,DTA) of JavaScript programs by dynamically inserting piles. In order to solve this problem, this paper proposes a dynamic stain analysis method based on dynamic piling for HTML5 hybrid Android application, by modifying the V8JavaScript engine it uses. In this method, the tainted label is stored in the way of contaminated wrapping object, and the piling operation is carried out at the middle code level of Hydrogen in the optimized compilation execution mode. The experimental results show that the proposed method can effectively track the corruption in the optimized compilation execution mode, and the performance overhead is within acceptable range.
【作者單位】: 數(shù)據(jù)工程與知識工程教育部重點(diǎn)實(shí)驗(yàn)室(中國人民大學(xué));中國人民大學(xué)信息學(xué)院;
【基金】:國家自然科學(xué)基金資助項(xiàng)目(91418206,61472429)
【分類號】:TP312.2
【相似文獻(xiàn)】
相關(guān)期刊論文 前2條
1 楊英;邏輯程序的“與”和“或”算子的獨(dú)立于機(jī)器的并行執(zhí)行:第二部分──編譯執(zhí)行[J];管理科學(xué)文摘;1996年02期
2 謝東;五子連珠[J];電腦編程技巧與維護(hù);1996年12期
,本文編號:2291186
本文鏈接:http://www.sikaile.net/kejilunwen/ruanjiangongchenglunwen/2291186.html
最近更新
教材專著