COMPARATIVE ANALYSIS OF SOFTWARE DEVELOPMENT SYSTEMS BASED ON FRAMEWORKS

Filtergraph: An interactive web application for visualization of astronomy datasets

Modern web applications are built on top of web frameworks, which offer benefits such as feature reuse and productivity improvement. By relying on web frameworks, developers can safely handle the multiple needs of real-world web applications. Despite the benefits of web frameworks, they are not intended to address all requirements to create web applications. In particular, the Django web framework provides a rich software ecosystem of reusable applications to support developers with advanced development aspects, such as modern authentication, caching, and deployment. However, currently, it is not clear what solutions developers can reuse or how active and reliable this ecosystem really is. To overcome this gap, this paper proposes an empirical study to assess the Django ecosystem of reusable applications. We analyze 487 reusable applications to understand their target domain, activity level, frequency of tests, and compatibility. We find that reusable applications are mostly concentrated in three categories: developer tools (27.8%), user interface (17.1%), and persistence (15.9%). Overall, these categories have distinct characteristics; for example, developer tools have the highest concentration of young and inactive applications, while persistence applications are the oldest. The reusable applications are 7.7 years old but have 10.17 months without commits, on the median. We also find that 80% of the reusable applications include the supported Python versions, 64% include the Django versions, and only 61% include both Python and Django versions. We detect that upgrading to recent versions of Django and Python may not be supported in some reusable applications, but compatibility issues become less problematic in recent Django and Python versions. Finally, based on our findings, we provide implications for practitioners and researchers.

The person who posts a tweet contains linguistic cues for personality on social media. Myers-Briggs Type Indicator (MBTI) is more widely used and discussed online, so MBTI data is available on social media. This paper aims to design, implement, and test a web-based application to predict an Indonesian user from tweets on Twitter. The framework used in the development of MBTI Prediction is Software Development Life Cycle (SDLC). The architecture design follows the built-in development provided by the Flask framework using API Twitter. MBTI prediction method using combination of machine learning approach and feature extraction approach. Time MBTI prediction is 8.74 seconds per user. The development web-based used Python programming language, and Flask framework with SDLC process has been implemented to design, develop and test good quality application.

In Current scenario, many Web applications go through rapid development phases like adopting agile methodology of development with very short turnaround time, making it difficult to identify and eliminate vulnerabilities. This paper provides analysis of requirement of Secure Development and Web application security assessment mechanisms in order to identify poor coding practices that render Web applications vulnerable to attacks such as SQL injection and cross-site scripting. This paper also list out the different categories of vulnerability with the small examples along with prevention guidance and a sample of research by different vendors about the State of Software Security Report and Web Application Vulnerability Statistics of 2012. This paper reviews need of secure development, resource s available for creating secure Web applications. These resources ranges from the security features of the development, to automated tools evaluating an existing Web application, to Web sites dedicated to all facets of Web application security. In Web application security, making one single mistake can lead to many unwanted flaws. By using the different resources available, the risk of the applications to be vulnerable can be reduced to an acceptable level. In addition, some risk can be avoided at the very beginning of the project life cycle when the requirements for the system are defined.

The fundamental aim of this research is to develop a face detection system for a quadcopter in order to follow the face object. This research has two main stages, namely the face detection stage and the position control system. The face detection algorithm used in this research is the haar cascade method which is run using the python and OpenCV programming languages. The algorithm worked well, getting around 16fps on a low spec computer without a GPU unit. The results of the face detection algorithm are proven to be able to recognize faces from the camera installed on the DJI Tello mini drone. The mini drone was chosen because it is small and light, so it is harmless, and testing can be carried out indoors. Besides, the DJI Tello can be programmed easily using the python programming language. The drone’s position is then compared with the set point in the middle of the image to obtain errors so that control signals can be calculated for up/down, forward/backward, and right/left movements. From the testing results, the response speed that occurs in the right/left and up/down movements is less than 2 seconds, while for the forward/backward movement, it is less than 3 seconds.

In recent years, there has been a demand for Web applications with complex functions. In addition, most web applications efficiently manage data based on databases. While the key and critical dimension of developing these Web applications is analysis and design, most object-oriented analysis and design methods do not have a consistent view of the database. In addition, Java Enterprise Edition (EE) -based technologies are used in Web application implementations, but they do not provide any correlation with the database. On the other hand, as users' demands for security increase, security becomes more important. To this end, Java EE and database systems provide security solutions. However, it does not provide any correlation with object-oriented analysis and design methodology. As a result, it is difficult to develop secure web applications in a consistent way from analysis to implementation. In this paper, we propose a consistent software development methodology from analysis to implementation of secure web applications. The proposed software development methodology for web application development uses UMLsec, a security-emphasized modeling language, and object-relational (O-R) mapping for relational database design. It also uses Java servlets and SQL to implement analysis and design results based on role-based access control (RBAC). The software development methodology for the secure web application proposed in this paper has been applied to the development of the online banking system, from the design stage of the user's requirements analysis to the implementation of the web application.

In current information era, every small-scale industry, MNC's, Schools, and Colleges utilise Web Applications to promote their organizations and provide services to society. Web Applications have become a simple and vital medium for communicating with society. This leads to an increase in website utilization. Threats and cyber-attacks are increasing according to the rate of growth of Web Applications. Any organization must ensure the privacy and security of its users' data in order to maintain the company's and users' integrity. Web application vulnerabilities represent major security risks, making it critical to conduct extensive assessments and penetration testing to discover and remediate such flaws. The paper provides a complete overview of web application vulnerability assessment and penetration testing, emphasizing the need of proactive security measures in protecting sensitive data and preserving application integrity. This study aims to identify and categorize web application vulnerabilities (OWASPs) that may compromise the security of the application and result in user data breaches. The primary focus of this project is the security and privacy of user data. Integrating security practices into the software development life cycle through investigating real-world case studies and industry standards. Ultimately, our research adds to the growing body of knowledge in web application security, assisting organizations in creating resilient defenses against cyber threats.

Strong security in web applications is critical to the success of your online presence. Security importance has grown massively, especially among web applications. Dealing with web application or website security issues requires deep insight and planning, not only because of the many tools that are available but also because of the industry immaturity. Thus, finding the proper tools requires deep understanding and several steps, including analyzing the development environment, business needs, and the web applications’ complexity. In this paper, we demonstrate the architecture of web applications then list and evaluate the widespread security vulnerabilities. Those vulnerabilities are: Fingerprinting, Insufficient Transport Layer Protection, Information Leakage, Cross-Site Scripting, SQL Injection, and HTTP Splitting. In addition, this paper analyzes the tools that are used to scan for these widespread vulnerabilities in web applications. Finally, it evaluates tools due to security vulnerabilities and gives recommendations to the web applications’ users and administrators aiming to educate them.

Data processing and visualization are crucial steps in data processing that greatly affect the quality of future analyses and machine learning algorithms application. Still, such data processing steps may be tedious and labour-intensive, and often require human effort which is associated with a lot of mistakes when users do not have sufficient computer science knowledge. The current research presents the development of a web based system called Dataverse. The purpose of developing this system is to automate and facilitate the process of data preparation and provide an opportunity for the user to explore the prepared data through interactive visualization. Dataverse is developed using Python programming language in Flask framework. The libraries employed during Dataverse development are mainly Pandas and Plotly. The system provides opportunities for importing datasets from files and online resources. According to experiments conducted, Dataverse facilitates the process of preparing data and makes it less labour-intensive and more efficient

Conventional library systems that are still manual-based often face various obstacles, such as delays in the transaction process, the risk of recording errors, and low efficiency in collection management. This research aims to design and build an integrated web library system at Esa Unggul University by applying the Object Oriented Programming (OOP) approach and Scrum method. The development process is carried out iteratively through the stages of Sprint Planning, Execution, Review, and Retrospective. The system was developed using Python programming language with Flask framework and MySQL database. The main features include book data management, members, loan and return transactions, automatic notifications, and time-based fine calculations. Evaluation was conducted using the Black Box Testing method on 35 scenarios, including input validation, transaction processing, and system resilience to extreme conditions. The test results showed a 100% success rate and a 60% increase in transaction efficiency compared to the manual system. End-user validation showed that the system has a responsive interface, easy to use, and supports digital library management. This research contributes to the digital transformation of libraries and opens up opportunities for development towards mobile platforms and data analytics.

As technology is increasingly advanced and developing, shopping that was originally done in supermarkets is now done online. The COVID pandemic has also made people switch to shopping online, as in e-commerce. Research also shows that e-commerce in Indonesia has increased by 5–10 times during the pandemic. Ecommerce has always been associated with simple and convenient purchasing and payment methods. Ijabqabul.id is an e- commerce platform that provides a variety of product categories. In order to improve services for the development of ijabqabul.id e-commerce, particularly in terms of payment transactions, a payment gateway system as an online payment system is required. This research will result in a web service-based payment gateway system with JSON output. A payment gateway system is built using the Python programming language and the Flask framework. The Postman application is used to test a payment gateway system that is based on web services. Agile Development is the method used in the development of the payment gateway system. This method is carried out through brainstorming with researchers from the sharia study program. The developed payment gateway system generates a virtual account number, making the transaction process simpler, safer, and more convenient

This paper presents F4F (Framework For Frameworks), a system for effective taint analysis of framework-based web applications. Most modern web applications utilize one or more web frameworks, which provide useful abstractions for common functionality. Due to extensive use of reflective language constructs in framework implementations, existing static taint analyses are often ineffective when applied to framework-based applications. While previous work has included ad hoc support for certain framework constructs, adding support for a large number of frameworks in this manner does not scale from an engineering standpoint. F4F employs an initial analysis pass in which both application code and configuration files are processed to generate a specification of framework-related behaviors. A taint analysis engine can leverage these specifications to perform a much deeper, more precise analysis of framework-based applications. Our specification language has only a small number of simple but powerful constructs, easing analysis engine integration. With this architecture, new frameworks can be handled with no changes to the core analysis engine, yielding significant engineering benefits. We implemented specification generators for several web frameworks and added F4F support to a state-of-the-art taint-analysis engine. In an experimental evaluation, the taint analysis enhanced with F4F discovered 525 new issues across nine benchmarks, a harmonic mean of 2.10X more issues per benchmark. Furthermore, manual inspection of a subset of the new issues showed that many were exploitable or reflected bad security practice.

Web Application Development has shown progressive and rapid growth using various techniques. Nonetheless, web application security is a major component in web development that is often overlooked or not properly focused on. Due to ad hoc existence and poor code written, most available web applications are vulnerable and desirable target for the attackers. To alleviate this issue, the use of defensive programming basic technique allows the developers to develop secure applications. Defensive programming includes validate output and correctly manages error messages. This avoids the misuse of snippets and builds the program in a consistent way despite unpredictable inputs. The purpose of this paper is twofold. Firstly, this paper discussed the development of a web application program using PHP as server-side scripting exploiting defensive programming techniques to overwhelm web application vulnerabilities. Secondly, this paper examined common vulnerabilities of web application risks refer to Open Web Application Security Project to validate the effectiveness of defensive programming technique. The work presented in this paper shall be a fundamental guideline for the development of secure web-based applications.

Web applications represent an important category of applications that owe much of their popularity to the ubiquitous accessibility using standard web browsers. The complexity of web applications is steadily increasing since the inception of the Internet and the way it is perceived changes from a pure information source to a platform for applications. Many different web frameworks exist that support recurring and tedious development tasks in order to simplify the process of building web applications. Most of the currently available web frameworks adhere to the widely accepted Model 2 design pattern that targets a clean separation of model, view and controller parts of an application in the sense of MVC. Nevertheless, existing frameworks are conceived to work with standard object-oriented business applications only and do not respect the particularities and possibilities of agent applications. Hence, in this paper a new architecture, in accordance with the Model 2 design pattern, is proposed that is able to combine the strengths of agent-based computing with web interactions. This architecture is the basis for the Jadex Webbridge framework, which enables a seamless integration of the Jadex BDI framework with state-of-the art JSP technology. The usage of web technology in combination with agents is further exemplified by an electronic bookstore case study.

Modern and Responsive Mobile-enabled Web Applications