Testing and analysis techniques to ensure that web applications function with a high level of quality are essential. However, many traditional software quality assurance techniques are not directly applicable to modern web applications. The reason for this is, in part, due to the highly dynamic nature of modern web applications. They typically use generated object programs (e.g., HTML and JavaScript), have dynamic interfaces, and different models of execution. This makes it challenging to apply or adapt conventional testing and analysis techniques.

My work on this area has included the development of program analysis based techniques for analyzing the server side implementation of web applications. In particular, the techniques can identify interface and invocation information and use it to improve the performance of traditional testing techniques, such as penetration testing, invocation verification, and test-input generation.