TY - GEN
T1 - Efficient Auditing of Event-driven Web Applications
AU - Tzialla, Ioanna
AU - Wang, Jeffery
AU - Zhu, Jingyi
AU - Panda, Aurojit
AU - Walfish, Michael
N1 - Publisher Copyright:
© 2024 ACM.
PY - 2024/4/22
Y1 - 2024/4/22
N2 - When a deployer of a web application puts that application on a server (on-prem or cloud), how can they be sure that the application is executing as intended? This paper studies how the deployer can efficiently check that the execution is faithful. We seek mechanisms that: (i) work with web applications that are built with modern event-driven web frameworks, (ii) impose tolerable computation and communication overheads on the web server, and (iii) are complete and sound. We exhibit such a mechanism, based on a new record-replay algorithm. We have implemented our algorithm in Karousos, a system that audits Node.js web applications.
AB - When a deployer of a web application puts that application on a server (on-prem or cloud), how can they be sure that the application is executing as intended? This paper studies how the deployer can efficiently check that the execution is faithful. We seek mechanisms that: (i) work with web applications that are built with modern event-driven web frameworks, (ii) impose tolerable computation and communication overheads on the web server, and (iii) are complete and sound. We exhibit such a mechanism, based on a new record-replay algorithm. We have implemented our algorithm in Karousos, a system that audits Node.js web applications.
KW - Execution Integrity
KW - JavaScript
KW - Web applications
UR - http://www.scopus.com/inward/record.url?scp=85191994320&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85191994320&partnerID=8YFLogxK
U2 - 10.1145/3627703.3650089
DO - 10.1145/3627703.3650089
M3 - Conference contribution
AN - SCOPUS:85191994320
T3 - EuroSys 2024 - Proceedings of the 2024 European Conference on Computer Systems
SP - 1208
EP - 1224
BT - EuroSys 2024 - Proceedings of the 2024 European Conference on Computer Systems
PB - Association for Computing Machinery, Inc
T2 - 19th European Conference on Computer Systems, EuroSys 2024
Y2 - 22 April 2024 through 25 April 2024
ER -