A Component Based Architecture for Web Content Management: Runtime Deployable WebManager Component Bundles

This paper addresses the rapidly increasing issue of sensitive user data theft and the data incongruity due to Web Content Management System (WCMS) structure and very complex WCMS to WCMS conversion procedure. After retaining the full picture of the situation, the paper approaches a solution for securely accessing, modifying and migrating WCMS database(DB) using a precise information hiding and data integrity manager named Data Security Processor Software Unit (DSPSU) without compromising the sensitive data to fraudsters.

Rapid development of Internet technique and electronic commerce change the way of operation and management in enterprises and organizations, of which information storage systems will be affected greatly. Researchers are now more and more interested in finding a way to access information effect and efficient. We design and implement a web content management system which allows content creators to create, submit and manage contents conveniently. In our web content management system, data can be defined as documents, movies, pictures, phone numbers, scientific data, and so forth. We analyze the destination and function of web content management system first, and then design how files are organized and managed. In web content management system, the content is stored and managed at the sub-document or component level for greater content reuse. With web content management system, users can maintain security, manage objects, manage servers, and manage auditing easily.

The open service gateway initiative (OSGi) framework is to provide an open environment for home services, which can be deployed by different service providers. However, currently there is no total solution for the OSGi framework to diagnose and recover from unexpected faults, especially those generated by resource conflicts between services, which would require user intervention. This paper summarizes the requirements for diagnosis in the open service platform and proposes an integrated approach to detect service conflict faults, handle general exceptions, and diagnose service errors on OSGi platforms. By providing user friendly diagnosis messages, and suggestions to fix exceptions, users can operate home gateways without a heavy learning burden, and service providers can reduce the overhead associated with user requests for technical support. The implementation is packaged as a service bundle running on the service layer of the OSGi platform. This is the first attempt to diagnose and handle the service conflicts on the OSGi platform during runtime.

현재 여러 종류의 홈 네트워크(home network) 기술들이 존재하고 있으며, 단일화된 홈 컴퓨팅(home computing) 환경을 위해서는 서로 다른 네트워크 프로토콜간의 연동이 필수적이다. 이를 위하여 여러 종류의 홈 네트워크 미들웨어(home network middleware)가 개발되었고 특히 OSGi (Open Service Gateway Initiative)는 다양한 미들웨어 환경 사이의 서비스 상호연동을 제공하기 위해 제안되었다. 그러나 OSGi의 실행환경인 프레임워크(framework)는 수동적으로 서비스 번들(service bundle), 사용자 및 장치 관리 등을 수행하는 취약점을 가지고 있다. 본 논문에서는 사용자들의 편의성을 위해 수동적으로 관리되는 부분들의 문제점을 개선하고자 한다. 이를 위하여 자동화 서비스와 효율적인 서비스 번들의 관리를 위한 SBM (Service Bundle Manager)의 구조를 제안하고, SBM을 구현하여 SBM의 실효성을 검증하였다. Since different kinds of home network technologies coexist, seamless connections between different kinds of network protocols are essential for home computing environments. Several kinds of home network middleware have been developed and OSGi(Open Service Gateway Initiative) was initiated mainly for interoperability support with service distribution between various middleware environments. Framework, OSGi service platform, has weaknesses of passive service bundle management, user management and device management. Therefore, this paper resolves passive management parts which are critical weaknesses of OSGi Specification Version 3 and proposes SBM (Service Bundle Manager) to effiently manage various service bundles. Additionally, we verify practical effects of SBM through experiments.

This paper discusses the benefits of a proposed Session Initiation Protocol (SIP)-based device communication Service for deployment on a Mobile Open Services Gateway Initiative (OSGi) framework. Mobile OSGi deployment provides a gateway to a mobile user’s Personal Area Network (PAN). When the SIP Service is deployed in OSGi, it is possible to bridge multiple devices and gateways, offering device and service mobility as users traverse multiple mobile and home networks. Additionally, the SIP Service provides protocol bridging via bridging bundles and grants application layer mobility to OSGi services. In this paper, we discuss a novel architecture, based on the deployment of the SIP Service in a mobile OSGi framework, which effectively delivers PAN and home network device interoperability. Finally, we offer a use case scenario and analysis of its implementation using our proposed architecture.

Given that microblogging has been shown to play a valuable role in knowledge management within companies, it is useful to understand how it is being used in relation to OSS. This project studies tweets related to 12 open source projects and keywords, ranging from web content management systems (CMSes) to general office applications. It found considerable differences in the content and exchange of tweets, especially between specialist products such as CMSes and office suites such as OpenOffice. Tweets concerning the more specialist projects tended to provide information rather than updates on the user’s current status. We found a high proportion of event-driven traffic for some CMS projects, and a lower proportion for the office products and groups of projects.

Software maintenance and evolution are important processes in software development. Developers usually face issues in the process of maintaining and evaluating software. The common problem is software code not well structured and organized. This will have an impact on the difficulty of the process of maintaining and evolving software. Maintenance and evolution process is done in all types of applications. In this research, we focus on web-based applications. Web-based applications are chosen because the development of web-based applications is very evolving. One of the most widely used design patterns in web applications is the Model View Controller (MVC) design pattern. This research focuses on the model layer in web applications. Because this layer automatically changes if there is a change in the data structure or database. Therefore, to make the maintenance and evolution process easier, it is necessary to analyze and reorganize the model layer. In this study, we trying to group the functions on the model layer by looking at the similarity of table reference access in the query. For the analysis process of the reorganization of the function structure, we use DSM (Design Structural Matrix). in this research, we use DSM in a new field that is in the model layer on MVC based application. The preliminary result, the reorganization of the function structure provides better contex recommendations that following the reference table for each function.

It is a key problem for a 7*24 running system to update and maintain online. According to the feature of OSGi (Open Service Gateway Initiative) framework, current service dynamic update policies for OSGi framework are analyzed. In order to solve the problem of service mutual consistency and service state consistency during service update, the service dynamic update policy based on publish & subscribe model is presented. This policy is based on quiescent state theory to ensure mutual consistency when services are updated online. The process of the dynamic service update policy is described by Petri net. We realize the policy using Event Admin Service in the experiment with well-defined program model. The result shows that the policy is validate and feasibility.

The Open Services Gateway Initiative (OSGi) attempts to meet the ubiquitous computing environment by providing a managed, extensible framework to connect various devices in a local network such as in a home, office, or automobile. By defining a standard execution environment and service interface, the OSGi promotes the dynamic discovery and collaboration of devices and services from different sources. The OSGi offers a unique opportunity for ubiquitous computing as a potential framework for achieving interoperability between various sensors, home appliances, and networked devices. The OSGi framework supports a remote installation of a bundle, which is a unit that installs and deploys services. However, in order for the service in execution to move, a specific form of bundle such a mobile service manager is needed, one which is able to move through a heterogeneous network.This paper proposes a method that can manage bundles for supporting dynamic service’s mobility between frameworks, in order to ensure the mobility of services in a multiple the OSGi framework environment. For our purposes, we have designed the mobile service management system for managing the lifecycle of the bundle and for the mobility of services in the OSGi framework. The mobile service management system we are proposing implements a bundle form which can perform in an OSGi framework as well as manage the mobile services. As a result, mobility in a ubiquitous computing environment will be supported more efficiently.

Web content management systems, referred here as CMS, is a customizable software platform on which websites can be easily built. According to Web Technology Surveys, more than 55% of websites on the Internet use any one of the many popular CMS platforms [1]. Their popularity arises due to ease of use, capability to customize, and ability to abstract complex programming layers into a very simple user interface, especially for a novice user. However, while the user may have very little or no knowledge of the backend database system containing sensitive information, this platform offers itself as an easy target to ever-expanding malware threats. In this paper, we explore and analyze in depth of one such malware, focusing on the origin of the attack, its deployment, its regenerating methods, and the cost of combating and retrieving the compromised data.KeywordsMalware exploitsContent management systems (CMS)Malware analysisRemote-triggered virusesZero-day attacksMalicious redirectsMalware regeneration

Internet has been dominating the world nearly a decade. Web application is known to be the most widespread platform of the internet especially when it comes to share resources, e-commerce services, education and business platforms. Since the usage of web applications are increasing dramatically, it’s becoming more vulnerable for security attacks. Each year, organizations facing many security attacks towards their web applications. Although many security practices and mitigations have been applying in web application, however there are still some security loophole issues can be found in web application. For instance, these loopholes can be referred as lack of secure coding (standards) implemented in web application, lack of formal security training approach for web developers and improper security testing for their web application. Besides, social engineering attacks also tremendously increasing each year. Many organizations were compromised through phishing attacks due to lack of awareness among users (employees). As a solution to overcome the issues, a research project will be carried out to implement a system called Nscanner to detect Structured Query Language injection (SQLi) and Cross-Site Scripting (XSS) vulnerabilities for web application. Moreover, the developer also will design a malware detection feature based on machine learning approach to detect malware found in attachments from emails in order to prevent malware phishing attacks.

Web applications are among the main targets of malicious attacks. Attacks are increasing intensely on websites, especially on Web Content Management Systems (WCMS), as the currently used web applications include a number of different security vulnerabilities that have been identified and discovered in recent times. The main problem in CMSs is the exploitation of weaknesses. This work was done on web CMS, where the focus was on WordPress, Drupal and Joomal systems. The work was done by examining the some sites for each tool, and demonstrated the vulnerabilities in each website. The Zmap recorded an accuracy of 95% in detecting the vulnerabilities. Other parameters of detection were used; total number of weaknesses, total number of open ports found and average treatment time. The information obtained from this study provide the necessary need to implement and widely disseminate updates on CMS to help stop these vulnerabilities.

The present paper aims to compare and analyze the security of the most common three open-source Web Content Management Systems: WordPress, Joomla! and Drupal. The paper is focused on describing the main vulnerabilities regarding the security of CMS platforms and reflects relevant data that can be used to avoid the most common attacks. In the digital era, where all the information is stored on web servers to be accessed from everyone, security and confidential data protection is an important part when it comes to choosing the right CMS for our needs.

Websites are a great way to share information. While most modern websites are constructed using a web content management system like Drupal or WordPress, knowing how to create a website by writing HTML can be a handy skill.

Practical design and implementation of recognition assisted dynamic surveillance system