Level of Detail Concepts in Data-Intensive Web Applications

Current web applications have many inherent vulnerabilities; in fact, in 2008, over 63% of all documented vulnerabilities are for web applications. While many approaches have been proposed to address various web application vulnerability issues, there has not been a study to investigate whether these vulnerabilities share any common properties. In this paper, we use an approach similar to the Goal-Question-Metric approach to empirically investigate four questions regarding open source web applications vulnerabilities: What proportion of security vulnerabilities in web applications can be considered as implementation vulnerabilities? Are these vulnerabilities the result of interactions between web applications and external systems? What is the proportion of vulnerable lines of code within a web application? Are implementation vulnerabilities caused by implicit or explicit data flows? The results from the investigation show that implementation vulnerabilities dominate. They are caused through interactions between web applications and external systems. Furthermore, these vulnerabilities only contain explicit data flows, and are limited to relatively small sections of the source code.

Significant effort is currently invested in application integration, enabling business processes of different companies to interact and form complex multiparty processes. Web service standards, based on WSDL (Web Service Definition Language), have been adopted as process-to-process communication paradigms. However, the conceptual modeling of applications using Web services has not yet been addressed. Interaction with Web services is often specified at the level of the source code; thus, Web service interfaces are buried within a programmatic specification.In this article, we argue that Web services should be considered first-class citizens in the specification of Web applications. Thus, service-enabled Web applications should benefit from the high-level modeling and automatic code generation techniques that have long been advocated for Web application design and implementation. To this end, we extend a declarative model for specifying data-intensive Web applications in two directions: (i) high-level modeling of Web services and their interactions with the Web applications which use them, and (ii) modeling and specification of Web applications implementing new, complex Web services.Our approach is fully implemented within a CASE tool allowing the high-level modeling and automatic deployment of service-enabled Web applications.

Due to problems in correctly understanding user requirements the Information System (IS) development community have recognised the need to involve end-users in the development and maintenance of web applications. End-users perceive web applications through user interfaces (UIs) and commonly use sketches of UIs to express their requirements. Thus, it would be desirable to provide an end-user development methodology centred on UI modelling techniques. In this paper a visual modelling approach is presented to empower end-users in developing data intensive web applications starting from user interface descriptions. The modelling language follows a holistic approach by representing both static and behavioural information of a web application in one visual model. The visual model allows the specification of the look-and-feel of the application through mock-ups, and the user interactions through links, annotations, and widget references. End-users are guided during the modelling process by providing a summary view to manage the design of complex applications and a data model view to improve the quality of the generated applications.

This paper addresses conceptual modeling and automatic code generation for search engine integration with data intensive Web applications. We have analyzed the similarities (and differences) between IR and database systems to extend an existing domain specific language for data-driven Web applications. The extended Web modeling language specifies the search engine’s index schemas based on the data schema of the Web application and uniquely designs the interaction between the database, the Web application, the search engine and users. We also provide an implementation of a CASE tool extension for visual modeling and code generation. Experimentation of the proposed approach has been successfully applied in the context of the COOPER project.

Web application development from simple web pages to complex interactive platforms (including social networks, e-commerce systems, corporate portals) requires new approaches, tools and technologies. JavaScript libraries and frameworks play a special role in developing web applications, simplifying the creation of effective, scalable, and convenient interfaces. The purpose of the article is to research the problems and prospects of using React in combination with Redux when creating web applications with a complex structure, to assess the advantages of their joint use in comparison with similar tools and to develop the web application “FarmerProducts”. The research methodology consists of the main methodological approaches and technological tools for developing web applications. Such methods, in particular, are: system and comparative analysis – to identify the features of creating web applications; method of expert assessments, which involves the study of literary sources and information resources, conducting interviews and surveys of experts, as well as the processes of developing and testing scalable and high-performance web applications based on the use of React and Redux. The scientific novelty of the research is the analysis of modern tools (React, Angular, Vue. js) for developing web applications, identifying problems and prospects for their use, creating an author’s web application (using React and Redux), which includes an intuitive interface, a flexible database, simplifying the process of working with the application by using a stack of modern technologies. Conclusions. The paper analyses the problems and prospects of using modern web application development tools; focuses on React, which is suitable for different projects; conducts a comparative analysis of React with Angular, Vue. js and Svelte, identifies their main characteristics, advantages, disadvantages; demonstrates the dependence of the choice of tools on the project context (React in combination with Redux can provide an optimal balance between performance, flexibility and scalability); describes the author’s web application – the FarmerProducts online store; identifies further ways to improve this web application.

Security is becoming one of the major concerns for web applications and other Internet based services, which are becoming pervasive in all kinds of business models, organizations, and so on. Moreover, critical systems such as those related to health care, banking, or even emergency response, are relying on such applications and services. Web applications must therefore include, in addition to the expected value offered to their users, reliable mechanisms to ensure their security. In this paper, we focus on the specific problem of preventing crosssite scripting attacks against web applications. We present a study of this kind of attacks, and survey current approaches for their prevention. Applicability and limitations of each proposal are also discussed.

The popularity of using NMR spectroscopy in metabolomics and natural products has driven the development of an array of NMR spectral analysis tools and databases. Particularly, web applications are well used recently because they are platform-independent and easy to extend through reusable web components. Currently available web applications provide the analysis of NMR spectra. However, they still lack the necessary processing and interactive visualization functionalities. To overcome these limitations, we present NMRPro, a web component that can be easily incorporated into current web applications, enabling easy-to-use online interactive processing and visualization. NMRPro integrates server-side processing with client-side interactive visualization through three parts: a python package to efficiently process large NMR datasets on the server-side, a Django App managing server-client interaction, and SpecdrawJS for client-side interactive visualization. Demo and installation instructions are available at http://mamitsukalab.org/tools/nmrpro/ mohamed@kuicr.kyoto-u.ac.jp Supplementary data are available at Bioinformatics online.

Finding similar questions in Community Question Answering (CQA) services plays more and more important role in current web and IR applications. The task aims to retrieve historical questions that are similar or relevant to new questions posed by users. However, traditional bag-of-words based models would fail to measure the similarity between question sentences, as they usually ignore sequential and syntactic information. In this paper, we propose a novel composite kernel to improve the accuracy in question matching. Our study illustrate that the composite kernel can efficiently capture both lexical semantics and syntactic information in a question sentence by leveraging word sequence kernel, POS tag sequence kernel and syntactic tree kernel. Experimental results on real world datasets show that our proposed method significantly outperforms the state-of-the-art models.

Most current web application use small objects to increase the data transfer speed between server and client. This leads to completion of the object transfer while the TCP is still in the initial slow-start phase, which starts with an initial window size. SCTP, a new transport layer protocol, uses congestion control mechanism that is similar to that of TCP but complements TCP's deficiencies in web applications. This paper presents an analytical model of object transfer latency for HTTP over SCTP as a function of the initial window size during the initial slow-start phase. Validation of our model using experimental testbed shows that our model results are within 4% of experimental results.

With the fast growing of the Internet and its Web users all over the world, how to manage and discover useful patterns from tremendous and evolving Web information sources become new challenges to our data engineering researchers. Also, there is a great demand on designing scalable and flexible data mining algorithms for various time-critical and data-intensive Web applications. In this paper, we purpose a new clustering model for generating and maintaining clusters efficiently which represent the changing Web user patterns in Websites. With effective pruning process, the clusters can be fast discovered and updated to reflect the current or changing user patterns to Website administrators. This model can also be employed in different Web applications such as personalization and recommendation systems.

The goal of disseminating and manipulating spatial knowledge over the Internet, has led to the development of Web applications, known as Web Geographic Information Systems (Web GIS). Web GIS can be considered as a particular class of data-intensive Web applications, since they are mainly devoted to handle (spatial) information to and from the user. The success of WebML (Web Modeling Language) for designing traditional data-intensive web applications suggested use to extend this visual formalism to model relevant interaction and navigation operations typical of Web GIS. In the paper, we describe the proposed extension and provide an example of its application.

The current web applications are supposed to provide high output, scalability and consistency besides facilitating rapid development and ongoing evolution. Such requirements have prompted the mass adoption of cloud-native architecture, component-based frontends and microservice-based backends. This review provides an in-depth analysis of a scaled-up web application framework based on React, Node.js and event-driven microservices that is focused on a cloud-native development. The paper summarizes current literature on frontend architecture, backend run-time, and asynchronous communication model to develop a coherent theoretical model. The literature provides comparative experimental evidence on analysis to determine performance in terms of throughput, latency, scalability and fault tolerance. The findings suggest that event-driven microservices are very effective in increasing the scalability and resilience of the system whereas the React-based frontends are useful in enhancing responsiveness and user experience.The review ends with the consideration of main challenges and the description of the future research directions of observability, consistency, and new cloud-native paradigms.

Recently, because the portable devices became popular, it is easily to see that each person carries more than just one portable device and the use of the smartphone stretches as time goes by. After the smartphone has propagated rapidly, the total usage of the smartphone applications has also increased. But still, each application store has a different platform to develop and to apply an application. The application store is divided into two big markets, the Android and the Apple. So the developers have to develop their application by using these two different platforms. Developing into two different platforms almost makes a double development cost. And for the other platforms, the weakness is, which still have a small market breadth like Bada is not about the cost, but about drawing the proper developers for the given platform application development. The web application is rising up as the solution to solve these problems, reducing the cost and time in developing applications for every platform. For web applications don`t need to make a vassal relationship with application markets platform. Which makes it possible for an application to operate properly in every portable devices and reduces the time and cost in developing. Therefore, all of the application markets could be united into one big market through a protocol which will connect each web applications market. But, still there is no standard for the web application store and no current web application store is possible to interlock with other web application stores. In this paper, we are trying to suggest a protocol by developing a prototype and prove that this protocol can supplement the current weakness.

Chapter 9 - Measuring Visual Fidelity

In recent years, the World Wide Web has become an ideal platform for developing Internet applications. World Wide Web service and application engineering is a complex task. Many web applications at present are large-scale and involve hundreds or thousands of web pages and sophisticated interactions with users and databases. Thus, improving the quality of web applications and reducing development costs are important challenges for the Internet industry. One way to resolve the difficulty is to provide web application developers with an integrated development environment. In this paper, I propose an efficient methodology and development environment for web application programs. This environment includes a design model to represent data and navigational structure, a modeling language for the notation technique of the design model, and a process model to define development stages.