动态Web应用中的缺陷定位研究

Study of defect localization in dynamic Web application

在动态Web应用中,动态生成的HTML页面产生的缺陷难以定位并且会严重影响Web应用程序的可用性和稳定性。针对以上问题,提出了一种基于符号约束集的Web缺陷定位方法,通过对Web服务端程序的动态符号执行生成一个带有符号约束的树模型,并给出了一个高效的缺陷映射定位算法。为验证该方法的有效性,对几个基于PHP的开源Web程序进行实验,结果表明该方法在Web应用的HTML缺陷检测定位覆盖率和准确率方面都有所改进。

In dynamic Web applications, the defects of dynamically generated HTML pages are difficuh to locate and seriously affect the usability and stability of the Web applications. In view of these problems, this paper proposed a Web defect location method based on symbolic constraint set. The method generated a tree model with symbolic constraints by executing the dynamic symbol execution of the Web server codes, and presented an efficient algorithm for defect mapping. In order to verify the effectiveness of the proposed method, this paper made an experiment on several open source PHP Web programs. The results show that the proposed method can improve the coverage and accuracy of HTML defect detection and localization in Web applications.