Chapter 10 - Developing Web Applications

A Web-Based Perioperative Dashboard as a Platform for Anesthesia Informatics Innovation.

The vagueness, fuzziness and uncertainty present in medical diagnosis are handled by fuzzy logic formalisms. Medical diagnosis process is simulated using various techniques, some of which are using fuzzy logic. The simulation of differential diagnosis process developed using fuzzy formalisms works in three stages. Initial screening stage accepts symptoms of patient and after computations results into an output as single or multiple diseases. For multiple diseases, this output is taken as input to Stage II which takes another input as history of the patient to give single or multiple diseases. This output and the investigative tests results are input to Stage III which works on Type 1 Fuzzy Inference System and gives single disease output. Development of a desktop application made the system scope limited to one user. The research web application widens the scope of the system thereby increasing utility of the model. The proposed system uses REST (Representational State Transfer) web service architecture having thin UI (User Interface) client serving multiple devices. Input is communicated to web server by client browser; web server in turn forward the request to application server. The application server executes all the complex algorithms to lift the heavy execution part and it shares the result to the client in the form of REST API via web server. The use of three-tier architecture helps to separate the application to divide the processing load on one machine. The client application is lightweight and stateless resulting minimum load on client browser. The use of Single Page Application (SPA) allows different devices and other applications to utilize same API developed. The web application for simulation of differential diagnosis in gynaecology diseases using fuzzy logic is an innovative step, can be used in medical centres at rural areas or can be a teaching aid to medical students or can be an assistant for general physicians.

It is important to know whether a website or web application is usable. What you need are statistics about how the website is used. Such statistics usually include information about how much time a web user spends on a web page. But to know whether those dwell times are acceptable you will need reference values. This paper provides and discusses such reference values based on a research study. To allow automatic analysis of input elements a web service is presented to reveal any possible element. Using this service and the results of our study, any kind of HTML/HTML5 input elements in a web form can be analysed.

’Notebook’ is one of the primary data management systems of the Finnish Biodiversity Information Facility (FinBIF). It is a web solution for recording opportunistic as well as sampling-event-based species observations. It is being used for systematic monitoring schemes, various citizen science projects, and platforms for species enthusiasts. Notebook's main software component is LajiForm, which is the engine that renders a given JSON Schema into a web form. LajiForm is a separate, reusable module that is fully independent from other FinBIF systems. Notebook as a whole, includes other features embedded in FinBIF, such as linking users' geographical data to observation documents, spreadsheet document importing and form templates. We will demonstrate how the Notebook system works as a whole and also focus on LajiForm's technical aspects. Fig. 1 All Notebook forms use FinBIF's ontological schema in JSON Schema format. Rendering user-friendly web forms based on a single schema is a difficult task, because the web form should be asking meaningful questions, instead of just rendering the schema fields according to the form description. We want to present questions in an interactive style. For instance, after drawing a geographical location on a map for a potential flying squirrel nesting tree, we would ask "did you see droppings at the nest?", and answering "yes" would update the document to include a flying squirrel taxon identification with fields "breeding" and "record basis" filled in but not rendered to the form. A simpler form engine without a user interface (UI) customization layer would just render the "taxon", "breeding" and "record basis" fields and the user would have no understanding why there are so many fields to answer and how they relate to their work or study. Some forms are complex, e.g., for experienced biology enthusiasts who need a form that is advanced, customizable, and compact. Some forms are simple, e.g., for elementary school children. To tackle these challenges, LajiForm uses a separate schema for UI that allows everything from simple customization like: defining widgets for fields (e.g., date widgets, taxon autocomplete widget, map widget), changing field order or customizing field labels; to more complex customization like transforming the schema object structure, defining conditions when certain fields are shown or if updating a field should have an effect on other fields. defining widgets for fields (e.g., date widgets, taxon autocomplete widget, map widget), changing field order or customizing field labels; to more complex customization like transforming the schema object structure, defining conditions when certain fields are shown or if updating a field should have an effect on other fields. All the functionality is split into a loosely coupled collection of components, which can be either used as standalone components or composed together in order to achieve more advanced customization. The programming philosophy has drawn inspiration from functional programming, which has been helpful in writing isolated, composable functionality. LajiForm is written with the JavaScript framework React. LajiForm is built on top of react-jsonschema-form (RJSF), which is an open source JSON schema web form library provided by Mozilla. RJSF handles only simple customization, but it is very flexible in design and allows us to build extensions with features that are more powerful. Some features and design proposals were submitted to Mozilla – FinBIF is the largest code contributor to RJSF outside of Mozilla, with a dozen pull requests merged.

We present an approach to write web applications in the programming languages Haskell [8] and Curry [6]. The web applications we propose are directly based on the Hypertext Transfer Protocol (HTTP) – no additional protocol on top of HTTP is necessary. Although the main ideas are not new and already applied using other programming languages, we believe that features present in modern declarative languages – especially algebraic datatypes – serve well to represent resources on the web. 1 TRANSFER OF RESOURCE REPRESENTATIONS A resource is any piece of information named by a Uniform Resource Identifier (URI). A web application provides access to internally stored information over the Internet or accesses such information provided by other web applications. Usually, (a representation of) this information is transferred using the Hypertext Transfer Protocol (HTTP) [3] – possibly employing some protocol on top of it. Note that we do not primarily consider applications running inside a web browser like [4, 7, 9]. HTTP provides different methods to access resources from which the most important are the GET and the POST method. GET is used to retrieve some information, e.g., web browsers use GET to ask for the content of web pages. POST is used to send information to be processed by a server, e.g., entries in a web form can be sent to the server using POST. While processing the request, the server can update its internally stored information and usually sends back a result of this process. Web applications differ in their use of these two HTTP methods: RPC-style web applications are accessible through a single URI and communication is performed using the POST method. A representation of a procedure call is transferred to the server, which returns a representation of the result of this call as answer to the POST request. Note that both retrieval and update operations are performed using the POST method in RPC-style web applications and the interface of such applications is determined by the procedure calls that are understood by the server. Fielding [2] proposes another architectural style for web applications: He proposes to use the POST method only to update the internal state of the server and to use the GET method to purely retrieve information. Consequently, everything that should be available for retrieval by clients needs to be identified by an own URI. This is a big difference to RPC-style web applications that are usually accessible ?This work was partially supported by the German Research Council (DFG) grant Ha 2457/5-1. through a single URI. In the architectural style proposed by Fielding, a client sends an HTTP GET request to an URI to retrieve a representation of the resource identified by this URI corresponding to the current state of the server. To change this state, the client sends a POST request to the URI of the resource he wants to update. Fielding calls this architectural style Representational State Transfer (REST). The interface of a RESTful web application is given by the methods of HTTP and the URIs identifying the applications resources. In this work, we show how the interface given by the most important HTTP methods can be made available to Haskell or Curry programmers, hiding the details of HTTP communication.

Huge amounts of structured data sources are hidden in the databases behind web forms. Volumes of deep web contents were estimated to be around 500 times those of surface web. However, many web forms are not deep web query interfaces. To retrieve contents in the web databases, an important task is to identify those web forms that are deep web query interfaces. Deep web contents normally are associated with a specific domain, and many domain semantics are embedded in the web forms. Additionally, returned HTML pages of deep web queries contain particular patterns, which could assist identifying query interfaces. Thus, we collect the following semantics to assist the classification: (1) feature words: for non-query forms and for keyword fields in deep web query interfaces; (2) common fields in a particular domain: their valid values and relationships, and their synonyms. We design and implement a Semantics-Assisted deep Web Query Interface Classifier (SAWQIC) system based on heuristics. In the pre-query analysis of SAWQIC, feature words of non-query form attributes are combined with heuristics to filter out non-query forms. For web forms passing the filtering, we utilize semantics in filling in valid input data for their components to submit the form. In the post-query analysis of SAWQIC, we then use heuristics in analyzing the returned HTML pages to identify the deep web query interfaces. The SAWQIC system is evaluated against web forms for the "Book" and "Job" domains. The experimental results illustrate that SAWQIC could generate highly effective classification measures.

CAPTCHA is an acronym of Completely Automated Turing Test to Tell Computers and Humans Apart which is also referred to as HIP (Human Interaction Proof). It is a computer program that generates challenges or tests that only humans can solve and the machines or automated software cannot solve. CAPTCHAs are used in various Web Applications to restrict bots from doing unwanted activities in areas of protected content and unwanted submissions of web forms. In this paper a Model for Multilingual CAPTCHA challenges which can be more accessible and easy to use for non-English users is proposed. Rendering CAPTCHA tests in regional languages can improve usability and accessibility for non-native speakers of English language. The suggested model can be implemented in all major web programming languages such as PHP, .NET, J2EE, Perl, Ruby etc. I. INTRODUCTION The websites and web applications using CAPTCHA may be usually targeted for a large audience nationally or globally and not limited to a particular location or city. The websites and web applications are therefore used by people with knowledge of different languages and scripts including but not limited to English. Modern websites and web applications and designed in a way that the users can use them in their own languages. In India, there are 22 officially recognized languages and 12 different scripts. Majority of people in India have knowledge of and use their regional languages are not well versed in English. More and more websites and web applications for India are providing content and user interface in the regional languages of India. Many of these websites and web applications contain resources and areas protected by CAPTCHAs. The Government of India has also issued several guidelines for using Hindi and other regional languages in the websites of Government Departments. More and more Govt. Departmental websites are providing content in regional languages. The CAPTCHAs used in these Websites and web applications are English only even if the users choose to use them in a non-English regional language. This leads to very poor accessibility and usability of these websites.

The telecare system has become usable and accessible nowadays due to the development of information and communication technology. Its daily use has been made possible in long-term care through the use of wireless sensor networks. Unfortunately, the person in need of care may not be able to operate this sensor by him/herself. He/she is only able to turn this sensor on and off. Furthermore, he/she may be unconscious when an alert message is transferred. Against this backdrop, this paper therefore focuses on how the sensor can be automatically turned on to begin measuring physiological signals. In this research, a bidirectional sensor controlling design for a wireless sensor network with a Web-based interface using the Internet was proposed. Rich Internet application (RIA) technology was used to make a Web client-side user interface (UI) easier to use. Scalable vector graphics (SVG) technology, recommended by World Wide Web Consortium (W3C), was adopted to achieve dynamic charting of the browser. The combination of Ajax and SVG technology provides real-time interactivity and improves user experience on the use of the healthcare system. A complete system which includes the sensors, the wireless physiological detection network, the Web and database server, and the client side user interface was developed. To prove system reliability and accessibility, experiment and performance test of a real case were conducted.

Web 2.0, the interactive form of World Wide Web, is not just a combination of exciting technologies and services but something more than that. Basically complex pieces of software and their interconnection form Web 2.0. Web 2.0 applications have proliferated at a phenomenal pace over the last few years. These applications are distinguished from traditional Web applications by their focus on user participation, user-generated content, rich user interfaces, social and collaborative features, and the delivery of software as a service. Gmail, You Tube, Google Docs, and Face book are just some examples of Web 2.0 applications. Like any engineered system, web applications can also behave in unpredictable ways under conditions of extreme stress from users, external applications and other software/hardware systems. The proposed solution measures the reliability of Web 2.0 Application on the basis of maximum value of the users, and the events generated by those users. The failure probability of the events is then calculated at browser and servers. An object oriented model of our overall system provides the foundations for state chart diagrams for the browser and servers separately. The state chart diagrams are then converted to markov models which are used to make a probabilistic model of the system. The final value of the execution rate and the event generation rate are compared to confirm that the events generated by the users have been successfully executed and the system is reliable for that particular value of users and events. An extensive verification of the overall proposed methodology has been carried out by using MATLAB.

Today, many common tasks (e.g. booking flights, ordering food) can be done by filling out web forms. Automatic processing of Web forms to support interactive speech input is useful for numerous reasons, including ease of use for mobile device users and accessibility for people with visual or print disabilities. In this paper, we propose an automated method to process web forms and convert them into dialog flows for spoken interaction. First we identify relevant information for each form element (including element type, label, values and help messages) and key relationships between form elements (including ordering and dependencies). We then generate two types of dialog flow for each Web form. Experimental results show that the method generates efficient and informative dialog flows for web tasks, a key step for building virtual assistants. An Android application has been realized as a use case of the generated dialog flows.

A Metadata Approach for Building Web Application User Interface

A relevant consequence of the expansion of the web and e-commerce is the growth of the demand of new web sites and web applications. As a result, web sites and applications are usually developed without a formalized process, and web pages are directly coded in an incremental way, where new pages are obtained by duplicating existing ones. Duplicated web pages, having the same structure and just differing for the data they include, can be considered as clones. The identification of clones may reduce the effort devoted to test, maintain and evolve web sites and applications. Moreover, clone detection among different web sites aims to detect cases of possible plagiarism. In this paper we propose an approach. based on similarity metrics, to detect duplicated pages in web sites and applications, implemented with HTML language and ASP technology. The proposed approach has been assessed by analyzing several web sites and Web applications. The obtained results are reported in the paper with respect to some case studies.

With conventional regression test tools for Web applications, it is difficult to specify the values to be verified that are repeated output inside loop statements. We need to select each of these values displayed in Web pages with the mouse. This paper presents a method that automates regression testing of Web applications on the server side. This method makes it easy to specify values to be verified and enables us to specify them when we develop Web applications. We can directly check the verification results on the Web pages that are shown in the Web browser. If we find a fault, we can even directly modify a part of the server program in the Web browser that corresponds to the currently displayed Web page.

Today almost all organizations have changed their traditional systems and have improved their performance using web-based applications. This process will make more profit and at the same time will increase the efficiency of their activities through customer support services and data transactions. Usually, web application take inputs from users through web form and send this input to get the response from database. Modern web-based application use web database to store all critical information such as user credentials, financial and payment information, company statistics etc. However error in validation of user input can cause database vulnerable to Structured Query Language Injection (SQLI) attack. By using SQLI attack, the attackers might insert malicious code in the user input and trying to gain access to the confidential and sensitive data from database. Security tester need to identify the appropriate test cases before starting exploiting SQL vulnerability in web-based application during testing phase. Identifying the test cases of a web application and analyzing the test results of an attack are important parts and consider as critical issues that affects the effectiveness of security testing. Thus, this research focused on the developing a framework for testing and detecting SQL injection vulnerability in web application. In this research, test cases will be generated automatically based on SQLI attack pattern and then the results will be executed automatically based on generated test cases. The primary focus in this paper is to develop a framework to automate security testing based on input injection attack pattern. To test our framework, we install a vulnerable web application and test result shows that the proposed framework can detect SQLI vulnerability successfully.

Service Oriented Architecture (SOA) is a design framework that permits the developer to build complex applications from smaller modules called services. When applying SOA to web applications, developers face several challenges. Among others, the heterogeneous user interfaces provided by these services must be adapted to fit into the larger application.This paper discusses approaches to automated adaptation of web application's layout and design. We review the range of web-based user interface modifications, suggest a technique that allows us the automated execution of the described steps and finally explore transparent integration of the modified user interfaces into a given web page flow (using a proxy server). Our approach relies on the proposed meta-language UDLD, which permits application providers to equip their user interfaces with semantic information about included components.