Dynamic web worker pool management for highly parallel javascript web applications

Web Workers is a specification that defines an API which allows Web application developers to use background workers running scripts in parallel. Web Workers is used with JavaScript and is platform-independent. Hence, Web applications written in JavaScript can be used for a wide variety of purposes. There are many Web applications and some of them, for instance Internet election campaign and real-time broadcasting, need secure communications. We can include digital signatures with such Web applications to guarantee their security of communications. In this demonstration proposal, we assess the performance of parallel implementations of public key cryptosystems on several Web browsers (Internet Explorer, Google Chrome, Opera, and Firefox). With our implementation, it is possible to verify a message in 1.03 milliseconds on a Windows PC and 5.49 milliseconds on an Android tablet (Nexus 7). We also propose cryptography applications for Web browsers.

It is desirable for web applications to be reusable, for example in case a vendor wants to deliver new valuable services by using and combining existing applications quickly. One of the well-known ways of reusing web applications, Mashup, has become popular in the web development community and applied to many open web sites, as we can just combine the data retrieved from Web pages or APIs of the web applications. But in the case of the Mashup of enterprise web applications, or Enterprise Mashup, it is quite difficult since these applications are often not intended to be reusable and have no Web APIs. That means we have to create the Web APIs for the applications, which takes much work. In this paper, we describe a light-weight Web API creation methodology in order to create Web APIs for enterprise web applications much more easily than we can by extending the source code. The created Web API can connect to the web application just as a client who has an account does. So we can create a Web API for Enterprise Mashup without modifying the application at all and we can call the Web API securely using the user account information of the application. We developed the implementation of our methodology and applied it to actual applications to evaluate its effectiveness.

Since 2020, the SARS-CoV-2 virus has infected billions of people and spread to 185 countries. The virus spreads by making new copies of its genome inside human cells and exploits the cells’ machinery to synthesise viral proteins it needs to infect further cells. Each time the virus copies its genetic material there’s a chance that the replication process introduces an error to the genetic sequence. Over time, these mutations accumulate which can give rise to new variants with different properties. These new variants, originating from a common ancestor, may spread faster or be able to evade immune systems that have learnt to recognise previous variants. To understand where new variants of SARS-CoV-2 come from and how related they are to each other, scientists build family trees called ‘phylogenetic trees’ based on similarities in the genetic sequences of different variants of the virus. Looking at these trees researchers can track how a variant spreads geographically, and also attempt to identify new worrying variants that might lead to a new wave of infections. The scale of the COVID-19 pandemic together with the global effort by clinicians and researchers to sequence SARS-CoV-2 genetic material means a library of over 13 million SARS-CoV-2 genomes now exists, making it the largest such collection for any organism. Although phylogenetic trees of viruses have been studied for a long time, exploring the SARS-CoV-2 library presents technical and practical challenges due to its sheer size. Sanderson has developed an open-source web tool called Taxonium that allows users to explore phylogenetic trees with millions of sequences. With help from collaborators at the University of California, Santa Cruz, Sanderson built a website called Cov2Tree, that uses the Taxonium platform to allow immediate access to an expansive tree of all publicly available SARS-CoV-2 sequences. Cov2Tree enables users to visualise all SARS-CoV-2 genomes in a birds-eye view akin to a ‘Google Earth for virus sequences’ where anyone can zoom in on a related family of viruses down to the level of individual sequences. This can be used to compare variants and follow geographic spread. Using Taxonium, scientists can explore how virus sequences are related to each other. They can also see the individual mutations that have occurred at each branch of the tree, and can search for sequences based on mutation, geographical location, or other factors. Interestingly, a trend appearing in the SARS-CoV-2 phylogenetic tree is the emergence of identical mutations at different branches of the tree without a common origin. These mutations may be a result of convergent evolution, a phenomenon that occurs when a mutation appears independently in different variants as it confers an advantage to the virus making such mutations more likely to persist. This means that scientists may be able to expect certain mutations to appear in more distantly related variants if they have appeared independently in several different variants already. Overall, Taxonium is an important tool for monitoring SARS-CoV-2 genomes, but it also has broader applications. The tool can be used to browse phylogenetic trees of other viruses and organisms. Furthermore, the Taxonium website offers a way to browse a tree of life, with images and links to Wikipedia. The SARS-CoV-2 library might be the largest now, but in the future even bigger datasets will likely be available, highlighting the importance of tools like Taxonium.

WAC (Wholesale Application Community) 기반 모바일 웹 애플리케이션의 보급이 널리 확산됨에 따라 자바스크립트와 HTML (Hyper Text Markup Language)로 구현된 애플리케이션의 처리 성능이 점차 이슈화되고 있다. 단순한 처리 기능만을 갖는 구조라면 현재 통용되는 브라우저에서도 문제가 없지만 자바스크립트의 처리량이 점점 증가 할수록 브라우저의 처리 부담 또한 가중된다. 현재 상용화 되어 있는 모바일 브라우저에서는 자바스크립트의 처리에 시간 및 용량의 제한을 두고 있다. 이러한 문제점의 해결을 위한 대안으로서 HTML 5에서는 기존의 자바스크립트에서는 지원하지 않는 멀티 스레드 구현을 위한 Web Worker를 제공하고 있다. Web Worker는 싱글 스레드에서 처리하는 일정 부분을 별도의 스레드를 통해서 처리하는 메커니즘을 제공한다. 하지만 이는 모바일상의 Native 애플리케이션만큼의 처리 능력을 보장하는 것이 아니며 근본적인 처리 속도 개선 방법으로는 미흡하다. Cyclostorm은 이러한 모바일 상에서의 자바스크립트 처리를 클라우드 상의 컴퓨터 서버에 이전함으로써 모바일 클라이언트로서의 자원적 한계를 극복하고 고성능 처리 서비스를 제공하여 Native 애플리케이션 만큼의 성능을 보장한다. 성능 평가 실험에서 Cyclostorm은 기존의 모바일 브라우저에서의 자바스크립트 처리보다 최대 6배 빠른 처리 속도를 보이고 있고 HTML 5의 Web Worker보다는 3∼6배정도의 빠른 성능을 보이고 있다. 또한 메모리 부분에서도 서버 측에 존재하는 메모리를 사용하기 때문에 전반적으로 기존의 방법보다는 낮은 사용량이 측정 되었다. 본 논문에서는 현재 모바일 산업에서 화두가 되고 있는 WAC 기반에서 모바일 브라우저가 갖고 있는 한계를 극복하고 기존 웹 애플리케이션의 성능을 획기적으로 개선할 수 있는 클라우드 컴퓨팅 서비스인 Cyclostorm을 소개한다.

JavaScript is single-threaded. As a result, long-lasting computations (not necessarily due to poorly written code) will block the UI thread and make it impossible to add text to text boxes, click buttons, use CSS effects, and, in most browsers, open new tabs until control has returned. As an answer to that problem, HTML5 Web Workers provide background-processing capabilities to web applications and typically run on separate threads so that JavaScript applications using Web Workers can take advantage of multicore CPUs. Separating long-running tasks into Web Workers also avoids the dreaded slow-script warnings, shown in Figure 10-1, that display when JavaScript loops continue for several seconds.KeywordsIncoming MessageMain PageStop WorkerEvent ListenerWindow ObjectThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Data Security is a worldwide concern mostly for small medium enterprise (SMEs) and frameworks, approaches, methods are constantly evolving that has a connection with cloud computing, information systems, artificial intelligence, blockchain. Many developers, administrators or product teams running blind. Those are not knowing of problems with their application or do not have the information to fix the problems. The things which can go wrong with web and mobile applications or services is unlimited like dependency failures, resources, and crashes. Main argument is an evaluation of benefits by using Cloud as infrastructure and application on proactive monitoring called Azure Application Insights (AppInsight) towards target like web application, web API, PKI etc. The findings, demonstration of the study should reveal and support our main hypothesis that there is direct link between the proactive monitoring and the main factors that affects utilizing the cloud services. To address this need, in this paper, we introduce AppInsight, the best practice and a model of proactive approach to monitor different targets using Microsoft technology on Azure Cloud services. AppInsight – a model of proactive monitoring includes several functionalities: (1) identifying availability, (2) failures dependencies, (3) performance and (4) using telemetry data generates ad-hoc solution to fix potential failure of web application, web API etc. AppInsight a feature of Azure Monitor used to monitor live applications. AppInsight will automatically detect performance anomalies, and includes powerful analytics tools to help you diagnose issues. You will get a range of telemetry data of analytics of your target which is monitored by AppInsight. To evaluate this tool, we conduct an empirical evaluation by comparing data from actual live monitoring of Y target. Demo Video: https://www.youtube.com/watch?v=q7R8-c0ge7M

JavaScript has become the most popular programming language for web front-end development. With such popularity, there is a great demand for thorough testing of client-side JavaScript web applications. In this paper, we present a novel approach to concolic testing of front-end JavaScript web applications. This approach leverages widely used JavaScript testing frameworks such as Jest and Puppeteer and conducts concolic execution on JavaScript functions in web applications for unit testing. The seamless integration of concolic testing with these testing frameworks allows injection of symbolic variables within the native execution context of a JavaScript web function and precise capture of concrete execution traces of the function under test. Such concise execution traces greatly improve the effectiveness and efficiency of the subsequent symbolic analysis for test generation. We have implemented our approach on Jest and Puppeteer. The application of our Jest implementation on Metamask, one of the most popular Crypto wallets, has uncovered 3 bugs and 1 test suite improvement, whose bug reports have all been accepted by Metamask developers on Github. We also applied our Puppeteer implementation to 21 Github projects and detected 4 bugs.

Due to its high portability and simplicity, web application (app) based on HTML/JavaScript/CSS has been widely used for various smart-device platforms. To take advantage of its wide platform pool, a new idea called app migration has been proposed for the web platform. Web app migration is a framework to serialize a web app running on a device and restore it in another device to continue its execution. In JavaScript semantics, one of the language features that does not allow easy app migration is a closure. A JavaScript function can access variables defined in its outer function even if the execution of the outer function is terminated. It is allowed because the inner function is created as a closure such that it contains the outer function's environment. This feature is widely used in web app development because it is the most common way to implement data encapsulation in web programming. Closures are not easy to serialize because environments can be shared by a number of closures and environments can be created in a nested way. In this paper, we propose a novel approach to fully serialize closures. We created mechanisms to extract information from a closure's environment through the JavaScript engine and to serialize the information in a proper order so that the original relationship between closures and environments can be restored properly. We implemented our mechanism on the WebKit browser and successfully migrated Octane benchmarks and seven real web apps which heavily exploit closures. We also show that our mechanism works correctly even for some extreme, closure-heavy cases.

At present the web applications are used for most of the life activities, these applications are affected by an attack called (Structure Query Language Injection Attack) SQLIA due to the vulnerabilities of the web application. The vulnerabilities of the web application are increased because most of application developers do not care to security in designing.SQL injection is a common attack that infects a web application. The attacker adds (Structured Query Language) SQL code to web page for accessing and changing victim databases.The vital step in securing the database and detecting such an attack in web apps is preparing a tool. Many researchers propose different ways for detection and prevention of such as an attack. In this paper a tool it proposed using a powerful micro-framework web application designer called Flask in Python 3.7 to detect and prevent such attacks. The proposed system is called SQLIAD. SQLIAD analyzed a web application on-line.

In this paper, we describe a load distribution technique that employs web workers. We have been implementing a web-based MORPG as an interactive, real-time web application; previously, the web server alone was responsible for manipulating the behavior of all the game characters. As more users logged in, the workload on the server was increased. Hence, we have implemented a technique whereby the CPU load of the server is distributed among the clients; a performance evaluation reveals that our technique plays a role in decreasing the CGI latency of low-end servers and can decrease the CPU load of high-end servers when many users are logged in.

Web applications are one of the most useful platforms for the delivery of the information and service over the internet today. Day-to-Day the popularity of web application usage is increasing. Hence the web apps has to be designed for secure transformation of information from web client to web server and to mitigate the vulnerabilities. This paper presents a research survey report on constructing a secure web applications at the client side, server side and even in browsers. This paper initially gives an overview of web application, then followed by techniques or tools along with the attacks at the client side and serverside. It gives a big picture with the aim of promoting future research in this area.

Web APIs provide interfaces for interaction among systems based on the existing infrastructure for hosting Web sites and applications. The REST architectural style is the most employed approach for building Web APIs. However, the flexibility provided by REST may result in implementations with low quality design, limited reuse and poor documentation. This paper describes a maturity model for classifying Web APIs, aimed at promoting the adherence to REST architectural principles and the adoption of semantic Web technology in order to improve the design, reuse and documentation of Web APIs.

Effective support to web designers for fast development of web applications starting from third-party components or Web APIs requires to take into account different aspects. Among them, functional and non functional Web API features and suggestions coming from other web designers who faced similar problems and can share the solutions they adopted. In this paper, we propose a new model that brings together all these aspects to support Web API selection for building web mashups. We exploited the model to provide a map of existing Web API recommendation strategies, as well as to design new solutions based on the combined modeling of different Web API descriptive aspects. Since these aspects are extracted from different sources (such as Web API public repositories and social networks of web mashup developers), our model is built by relying on the Linked Data principles.

A range of static analysis tools and techniques have been developed in recent years with the aim of helping JavaScript web application programmers produce code that is more robust, safe, and efficient. However, as shown in a previous large-scale study, many web applications use the JavaScript eval function to dynamically construct code from text strings in ways that obstruct existing static analyses. As a consequence, the analyses either fail to reason about the web applications or produce unsound or useless results.<br/><br/>We present an approach to soundly and automatically transform many common uses of eval into other language constructs to enable sound static analysis of web applications. By eliminating calls to eval, we expand the applicability of static analysis for JavaScript web applications in general.<br/><br/>The transformation we propose works by incorporating a refactoring technique into a dataflow analyzer. We report on our experimental results with a small collection of programming patterns extracted from popular web sites. Although there are inevitably cases where the transformation must give up, our technique succeeds in eliminating many nontrivial occurrences of eval.

The use of mobile and ubiquitous computing devices is advantageous for collecting and sharing patient data at the bedside or in hospital waiting areas. iPhone web applications - or web apps - combine the power of Internet based solutions with the simplicity of multi-touch and gesture technology, all one portable device. Since many data collection platforms have moved to an online paradigm (or are in the process of doing so), a web app is an ideal solution. In this work, we show the advantages of using a web app for patient data collection, as an imaging engine, and for patient feedback and survey systems. This can be achieved by taking advantage of simple functions available on the iPhone OS when using an online collection platform.