Javascript ahead-of-time compilation for embedded web platform

Park, Hyukwoo; Jung, Won-Ki; Moon, Soo-Mook

doi:10.1109/estimedia.2015.7351768

Cited by 5 publications

(3 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Since compilation happens before runtime, it is agnostic to input distribution. Ahead-of-time compilation is an option in some versions of Java [33], [34] and JavaScript [35], [36], but generally is not standard or even always available.…”

Section: Related Workmentioning

confidence: 99%

JIT Leaks: Inducing Timing Side Channels through Just-In-Time Compilation

Brennan

Rosner

Bultan

2020

2020 IEEE Symposium on Security and Privacy (SP)

View full text Add to dashboard Cite

Side-channel vulnerabilities in software are caused by an observable imbalance in resource usage across different program paths. We show that just-in-time (JIT) compilation, which is crucial to the runtime performance of modern interpreted languages, can introduce timing side channels in cases where the input distribution to the program is non-uniform. Such timing channels can enable an attacker to infer potentially sensitive information about predicates on the program input.We define three attack models under which such side channels are harnessable and five vulnerability templates to detect susceptible code fragments and predicates. We also propose profiling algorithms to generate the representative statistical information necessary for the attacker to perform accurate inference.We systematically evaluate the strength of these JIT-based side channels on the java.lang.String, java.lang.Math, and java.math.BigInteger classes from the Java standard library, and on the JavaScript built-in objects String, Math, and Array. We carry out our evaluation using two widely adopted, open-source, JIT-enhanced runtime engines for the Java and JavaScript languages: the Oracle HotSpot Java Virtual Machine and the Google V8 JavaScript engine, respectively.Finally, we demonstrate a few examples of JIT-based side channels in the Apache Shiro security framework and the GraphHopper route planning server, and show that they are observable over the public Internet.

show abstract

Section: Related Workmentioning

confidence: 99%

JIT Leaks: Inducing Timing Side Channels through Just-In-Time Compilation

Brennan

Rosner

Bultan

2020

2020 IEEE Symposium on Security and Privacy (SP)

View full text Add to dashboard Cite

show abstract

“…For the execution of the JavaScript code, a virtual machine is required, which is assigned to interpret the scripts. The most popular interpreters are JavaScriptCore (JSC) engine of WebKit, SpiderMonkey written by Brendan Eich 2 and the V8 3 engine of Google Chrome [20].…”

Section: A Javascript Environment For Iotmentioning

confidence: 99%

State-of-the-Art Javascript Language for Internet of Things

Oliveira¹,

Mattos²

2019

Anais Estendidos Do IX Simpósio Brasileiro De Engenharia De Sistemas Computacionais (SBESC Estendido 2019)

View full text Add to dashboard Cite

Currently, two technologies stand out in the field of research, the Internet of Things (IoT) and Javascript (JS). On one hand, IoT enables everyday objects to connect to the network, analyze, capture, and interact with the environment. On the other hand, we have JS, a programming language that was initially inside browsers but now it is being used in several backgrounds. This paper correlates IoT and JS technologies, showing how Javascript can be applied in the context of the Internet of Things. The survey has considered the work of the last ten years and presents state of the art from Javascript applied to the IoT-side.

show abstract

“…Ahead-of-time compilation (AOTC) [Park et al 2015] saves the bytecode or the machine code in advance to remove the parsing or compilation overhead. The space overhead of AOTC for bytecode or machine code is still much larger than concurrent parsing (2.3 times and 15.4 times of the app size, respectively).…”

Section: Web Loading Accelerationmentioning

confidence: 99%

Concurrent JavaScript Parsing for Faster Loading of Web Apps

Park

Myungsu

Moon

2016

ACM Trans. Archit. Code Optim.

Self Cite

View full text Add to dashboard Cite

JavaScript is a dynamic language mainly used as a client-side web script. Nowadays, web is evolving into an application platform with its web apps, and JavaScript increasingly undertakes complex computations and interactive user interfaces, requiring a high-performance JavaScript engine. There have been many optimizations for efficient JavaScript engines, but one component that has not been optimized much is JavaScript parsing. A JavaScript function needs to be parsed before being executed, and the parsing overhead takes a substantial portion of JavaScript execution time for web apps, especially during app loading. This article proposes concurrent parsing of JavaScript, which performs the parsing of JavaScript functions in advance on different threads, while the main thread is executing the parsed JavaScript functions. This can hide the parsing overhead from the main execution thread, reducing the JavaScript execution time, thus reducing the overall app loading time. More specifically, we separated JavaScript parsing and made it run on different threads without violating the execution semantics of JavaScript. We also designed an efficient multi-threaded parsing architecture, which reduces the synchronization overhead and schedules the parsing requests appropriately. Finally, we explored two methods of choosing the target functions for concurrent parsing: one based on profiled information and the other based on speculative heuristics. We performed experiments on the WebKit browser with the JSC engine for real web apps. The result shows that the proposed concurrent parsing can improve the JavaScript performance during app loading by as much as 64% and by 39.7% on average. This improves the whole app loading performance tangibly, by as much as 32.7% and by 18.2%, on average.

show abstract

Javascript ahead-of-time compilation for embedded web platform

Cited by 5 publications

References 10 publications

JIT Leaks: Inducing Timing Side Channels through Just-In-Time Compilation

JIT Leaks: Inducing Timing Side Channels through Just-In-Time Compilation

State-of-the-Art Javascript Language for Internet of Things

Concurrent JavaScript Parsing for Faster Loading of Web Apps

Contact Info

Product

Resources

About