Race condition in Ajax-based web application

ABSTRACT

The atomicity is an important issue in asynchronous based data communication. In the modern web application today, asynchronous introduces hazardous effect causing unexpected results. This paper discusses the race condition occurred between the user request and server response due to the asynchronous nature of the web application using Ajax. A race condition occurs when multiple threads in a process try to modify the critical section data at the same time. The data will depend on which thread arrived last. Concurrent requests will be running asynchronously and it is impossible to predict which will return first. The locking mechanism is not a very effective way but may avoid race condition. Our future project develops a more effective way to detect the race conditions while parsing.

REFERENCES

• 1: Race Conditions with Ajax and PHP Session, http://thwartedefforts.org/2006/11/11/race-conditions-with-ajax-and-php-sessions/
• 2: Macwan, Troubles with Asynchronous Ajax Requests and PHP Sessions, http://www.chipmunkninja.com/article/asyncsessions
• 3: Harry Fuecks, AJAX and Session "Race Conditions", http://www.sitepoint.com/blogs/2006/02/27/ajax-and-session-race-conditions/
• 4: A. Pnueli. The temporal semantics of concurrent programs. In Proceedings of the 18th Symposium on Foundations of Computer Science, 1977.
• 5: M. Y. Vardi and P. Wolper. An automata-theoretic approach to automatic program verification. In Proceedings of the First Symposium on Logic in Computer Science, pages 322--331, Cambridge, June 1986.
• 6: Stefano Di Paola [e-mail], Giorgio Fedon [e-mail], Subverting Ajax, December 2006
• 7: Jeremy Keith, Dom Scripting.
• 8: http://www.h-spot.net/threat_glossary.htm
• 9: J. J. Garrett, Ajax: A New Approach to Web Applications, http://www.adaptivepath.com/publications/essays/archives/000385.php
• 10: Gary McGraw, John Viega, Building Secure Software: Race Conditions.
• 11: Michael Sonntag, Institute for Information Processing and Microprocessor Technology, Johannes Kepler University Linz, Altenbergerstr, Ajax Security in Groupware.
• 12: Ali Mesbah, Arie van Deursen Software Evolution Research Laboratory, Delft University of Technology, An Architectural Style for Ajax
• 13: PHP Manuel, www.php.net
• 14: Semaphore, http://en.wikipedia.org/wiki/Semaphore_%28programming%29
• 15: Greg Murray, Asynchronous JavaScript Technology and XML (Ajax) with the Java Platform.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.3 INFORMATION STORAGE AND RETRIEVAL
      H.3.5 On-line Information Services
          Subjects: Web-based services

Additional Classification:
  D. Software
  D.1 PROGRAMMING TECHNIQUES
      D.1.3 Concurrent Programming

General Terms:
Design, Reliability

Keywords:
Ajax, concurrency, dynamic web application, lock, race condition