Towards Runtime Monitoring of Node.js and Its Application to the Internet of Things

Davide Ancona,Luca Franceschini,Giorgio Delzanno,Maurizio Leotta,Marina Ribaudo,Filippo Ricca
DOI: https://doi.org/10.4204/EPTCS.264.4
2018-02-06
Abstract:In the last years <a class="link-external link-http" href="http://Node.js" rel="external noopener nofollow">this http URL</a> has emerged as a framework particularly suitable for implementing lightweight IoT applications, thanks to its underlying asynchronous event-driven, non blocking I/O model. However, verifying the correctness of programs with asynchronous nested callbacks is quite difficult, and, hence, runtime monitoring can be a valuable support to tackle such a complex task. Runtime monitoring is a useful software verification technique that complements static analysis and testing, but has not been yet fully explored in the context of Internet of Things (IoT) systems. Trace expressions have been successfully employed for runtime monitoring in widespread multiagent system platforms. Recently, their expressive power has been extended to allow parametric specifications on data that can be captured and monitored only at runtime. Furthermore, they can be language and system agnostic, through the notion of event domain and type. This paper investigates the use of parametric trace expressions as a first step towards runtime monitoring of programs developed in <a class="link-external link-http" href="http://Node.js" rel="external noopener nofollow">this http URL</a> and Node-RED, a flow-based IoT programming tool built on top of <a class="link-external link-http" href="http://Node.js" rel="external noopener nofollow">this http URL</a>. Runtime verification of such systems is a task that mostly seems to have been overlooked so far in the literature. A prototype implementing the proposed system for <a class="link-external link-http" href="http://Node.js" rel="external noopener nofollow">this http URL</a>, in order to dynamically check with trace expressions the correct usage of API functions, is presented. The tool exploits the dynamic analysis framework Jalangi for monitoring <a class="link-external link-http" href="http://Node.js" rel="external noopener nofollow">this http URL</a> programs and allows detection of errors that would be difficult to catch with other techniques. Furthermore, it offers a simple REST interface which can be exploited for runtime verification of Node-RED components, and, more generally, IoT devices.
Programming Languages,Logic in Computer Science,Software Engineering
What problem does this paper attempt to address?