Frank Tip

Static analysis of event-driven Node.js JavaScript applications

2015

Many JavaScript programs are written in an event-driven style. In particular, in server-side Node.js applications, operations involving sockets, streams, and files are typically performed in an asynchronous manner, where the execution of listeners is triggered …

Type Inference for Static Compilation of JavaScript (Extended Version)

2016 · arXiv (Cornell University)

We present a type system and inference algorithm for a rich subset of JavaScript equipped with objects, structural subtyping, prototype inheritance, and first-class methods. The type system supports abstract and recursive objects, and is expressive …

Platform-Independent Dynamic Taint Analysis for JavaScript

2018 · IEEE Transactions on Software Engineering

Previous approaches to dynamic taint analysis for JavaScript are implemented directly in a browser or JavaScript engine, limiting their applicability to a single platform and requiring ongoing maintenance as platforms evolve, or they require nontrivial …

Precise Dataflow Analysis of Event-Driven Applications

2019 · arXiv (Cornell University)

Event-driven programming is widely used for implementing user interfaces, web applications, and non-blocking I/O. An event-driven program is organized as a collection of event handlers whose execution is triggered by events. Traditional static analysis techniques …