Current Web Applications Research Articles

Analysis of the Possibilities of Carrying Out Attacks on the Functions of Transferring Control to Operating System Console Using Active Intelligence Methods

This paper researches the possibility of conducting attacks on the console control transfer functions using active intelligence methods. The research employs a comprehensive approach involving ports scanning, directories searching, parameters modifying, and credentials searching based on a user dictionary. Additionally, the study involves the development of a software tool designed to detect vulnerabilities in network nodes. The software developed within the framework of this study is delivered in the form of two modules, the first module contains the main program with the mechanisms implemented in it to indicate the possibility of attacks, with an emphasis on current web applications and services. Checking for the possibility of an attack for any network node is that first a list of requests is compiled, the purpose of which is to identify weaknesses of a web application running on the server, and a list of expected responses from the server is also compiled for these requests. After that request goes to the server, the program waits for responses from the server, and if the expected responses from the compiled list coincide with the actual ones, then this fact signals the possibility of an attack on the web application. The second module stores localization dictionaries responsible for the presence of two interface languages in the program – Russian and English. The result of this work is the MaxNetScanner2022 software, which identifies the possibility of an attack on the system control transfer functions using active intelligence tools.

Monitoring of Lake Water Quality Through Streamlit Web Application (Case Study: Lake Matano And Lake Towuti, South Sulawesi)

The Indonesian government, through the National Medium Term Development Plan (RPJMN) 2015-2019, stated that water reservation, including the function of lakes, is one of the priorities. Lakes are not only functioned to maintain the ecological balance but also to provide water, protein, mineral, energy sources, and even tourism to support the community's economic growth. Lake Matano and Lake Towuti are designated as Nature Tourism Park areas. However, the lakes' environment is starting to be damaged. The damages exist in areas such as water-absorbent areas, lake borders, and lake waters. In addition, these damages increase the disaster risk. Therefore, to maintain the lake's sustainability, it is necessary to conduct research on the parameters of the condition of the fertility level of the lake waters. One of the parameters of the fertility level of the waters is chlorophyll-a . In the previous studies, observations of chlorophyll-a in Lake Matano and Lake Towuti have been carried out using Landsat-8. However, with these observations, a chlorophyll-a had not properly been monitored by using an application through web-based satellite imagery using web applications using the primary python programming language. The data for processing chlorophyll-a itself are obtained through the geemap library. Chlorophyll-a itself was processed using the existing algorithm. The current web application displays several features, namely the web application information and the results of the chlorophyll-a map. The results of the estimated value of chlorophyll-a range from 0 - 0.6 mg/m 3 . The minimum value of chlorophyll-a was found in 2014 which was 0.4 mg/m 3 , while the highest value of chlorophyll-a was found at 0.6 mg/m 3 in 2016. The results of this chlorophyll-a analysis was categorized into oligotrophic waters with low fertility.

Front-end deep learning web apps development and deployment: a review.

Machine learning and deep learning models are commonly developed using programming languages such as Python, C++, or R and deployed as web apps delivered from a back-end server or as mobile apps installed from an app store. However, recently front-end technologies and JavaScript libraries, such as TensorFlow.js, have been introduced to make machine learning more accessible to researchers and end-users. Using JavaScript, TensorFlow.js can define, train, and run new or existing, pre-trained machine learning models entirely in the browser from the client-side, which improves the user experience through interaction while preserving privacy. Deep learning models deployed on front-end browsers must be small, have fast inference, and ideally be interactive in real-time. Therefore, the emphasis on development and deployment is different. This paper aims to review the development and deployment of these deep-learning web apps to raise awareness of the recent advancements and encourage more researchers to take advantage of this technology for their own work. First, the rationale behind the deployment stack (front-end, JavaScript, and TensorFlow.js) is discussed. Then, the development approach for obtaining deep learning models that are optimized and suitable for front-end deployment is then described. The article also provides current web applications divided into seven categories to show deep learning potential on the front end. These include web apps for deep learning playground, pose detection and gesture tracking, music and art creation, expression detection and facial recognition, video segmentation, image and signal analysis, healthcare diagnosis, recognition, and identification.

A New Method of Dynamic Horizontal Fragmentation for Multimedia Databases Contemplating Content-Based Queries

The proper storage and management of multimedia data is a topic of great interest to industry and academia. Database fragmentation plays a fundamental role as a mechanism to guarantee cost reduction and improve response time performance in distributed data management environments. Multimedia database access patterns are constantly changing; due to this, it is important that the partitioning schemes also adapt to these changes. Dynamic fragmentation techniques offer this advantage and represent a reduction of the tasks that an administrator must perform and the complete autonomy to determine when to carry out a new fragmentation based on a cost model. This work proposes a new method of dynamic horizontal fragmentation for multimedia databases, including a way to contemplate content-based queries in the creation of new fragments. The use of content-based queries is on the rise, as multimedia elements are often presented within databases, and for this reason new fragmentation strategies must include this aspect to provide better-performing schemas. The method included in this research is placed within a current web application called XAMANA. We performed some experiments to demonstrate the effectiveness of our approach.

Historical and Modern Bridges over the Elbe-Vltava Waterway

The Elbe-Vltava Waterway (EVW) consists of continuously navigable sections of the Vltava and Elbe rivers in the Czech Republic comprising a total length of over 300 km. Most of the length of this waterway was obtained by building a system of interconnected weir basins using the canalization method. Detailed plans for making this waterway navigable started in the early 19th century, and the construction of the structures was enabled by the Austro-Hungarian Water Act of 1869. So, most locks along this waterway constitute a part of industrial heritage. Among its main structures are weirs, hydroelectric power stations and locks designed by pre-eminent Czech architects of the 19th and early-20th centuries. Many of them are excellent examples of modernist industrial architecture. Since the beginning of construction of the weir system along the EVW, bridge construction also came into focus in order to provide transportation access to both banks of the Elbe and Vltava rivers in this historically heavily urbanised area of Bohemia. This article deals with the historical development of bridge constructions over the EVW, systematically categorising them as road, railway and pedestrian bridges. Focus is on the basic technical aspects of the bridge design and technical solution, but also on their historical value and the need for a sensitive approach to their modernisation. The goal of the research is to complete the current web application www.lvvc.cz devoted to the EVW structures with the architectonically and technically most interesting bridges, including their histories. The system has been designed as an expert system, making the archived historical documents, maps, plans and photographs available for use by government institutions as well as by the general public for education and for the protection of this technical cultural heritage. The research was conducted as part of project no. DG18P02OVV004 entitled “Documentation and presentation of technical cultural heritage along the Elbe-Vltava Waterway” within a support programme for applied research and experimental development of national and cultural identity, funded by the Ministry of Culture of the Czech Republic.

Development of mobile application for Malay translated hadith search engine

This paper presents the development of mobile application for Malay Translated Hadith search engine. Limitations of current Hadith web application are the design is to optimize its usage on desktop computer but not on mobile devices, which requires simple and user friendly interface. Besides that, web application also needs internet connection to use. Due to increase usage of mobile application among mobile phone users, many existing web applications have moved to mobile based applications to cater for increasing numbers of mobile users. In this study, a mobile application for Android and iOS mobile application has been developed using Flutter framework, a hybrid mobile application framework. A Malay Translated hadith search engine mobile application can easily assist those who are seeking knowledge to learn more about certain topics in hadith, a second source of Islamic knowledge. This mobile application has search and directory features for users to browse the 2028 Sahih Bukhari hadith collection. Users can enter their query using search features to find selected hadith in Malay language. Queries will be processed for searching relevant hadith and display the results to the user. Evaluation using Recall and Precision shows that on the average Recall is 73% and Precision is 33%. Functionality testing is also conducted to test against the functional requirements or specifications. Results shows all requirements are successfully tested.

Provenance use and it’s Application in Education Domain using owl/XML Syntax in Protégé

Current web applications are “closed” web applications. Such applications do not support integration and interoperability amongst them. Semantic web stack, however provides for languages and tools that help in achieving interoperability and integration amongst various web applications. Web applications developed nowadays are distributed and interoperable. Semantic web stack enables the designers to embed semantic web descriptions using Ontologies [1]. Ontologies provide a shared understanding of a given realm that can be disseminated amongst people and across application systems [2]. In addition to building semantic web systems that are interoperable and distributed there is also a need to make these semantically enabled systems trustworthy. Various work has been done till date regarding the trust and various mathematical models have been proposed t regarding the same. In this paper we are trying to address the issue of provenance using PROV-DM data model. The Provenance architecture has been proposed by the Provenance working group. We have tried to implement the data model in a university Ontology and have tried to show how provenance can be embedded to Semantically enabled University People Program Ontology.

Cognition and the Web: Extended, Transactive, or Scaffolded?

In the history of external information systems, the World Wide Web presents a significant change in terms of the accessibility and amount of available information. Constant access to various kinds of online information has consequences for the way we think, act and remember. Philosophers and cognitive scientists have recently started to examine the interactions between the human mind and the Web, mainly focussing on the way online information influences our biological memory systems. In this article, we use concepts from the extended cognition and distributed cognition frameworks and from transactive memory theory to analyse the cognitive relations between humans and the Web. We first argue that while neither of these approaches neatly capture the nature of human-Web interactions, both offer useful concepts to describe aspects of such interactions. We then conceptualize relations between the Web and its users in terms of cognitive integration, arguing that most current Web applications are not deeply integrated and are better seen as a scaffold for memory and cognition. Some highly personalised applications accessed on wearable computing devices, however, may already have the capacity for deep integration. Finally, we draw out some of the epistemic implications of our cognitive analysis.

An Application-Level QoS Control Method Based on Local Bandwidth Scheduling

Quality of service (QoS) is an important performance indicator for Web applications and bandwidth is a key factor affecting QoS. Current methods use network protocols or ports to schedule bandwidth, which require tedious manual configurations or modifications of the underlying network. Some applications use dynamic ports and the traditional port-based bandwidth control methods cannot deal with them. A new QoS control method based on local bandwidth scheduling is proposed, which can schedule bandwidth at application level in a user-transparent way and it does not require tedious manual configurations. Experimental results indicate that the new method can effectively improve the QoS for applications, and it can be easily integrated into current Web applications without the need to modify the underlying network.

A Front-End User Interface Layer Framework for Reactive Web Applications

Nowadays, people are relying more and more on web applications, such as Gmails, Google Map and Google Docs to complete their daily tasks. However, web applications often fail to provide reactive interactions with users. This paper explores the issues and problems of current web application frameworks and narrowed the research to the User Interface (UI) layer as it is the most important component to focus on in terms of increasing web application reactiveness. By integrating two Javascript libraries, namely, Preact and Preact-router into the UI layer, the proposed approach optimizes the way how the web server and web client communicates, which leads to a more reactive web application. The proposed UI layer framework was tested against a current framework and found that the proposed framework reduced a significant amount of page load time. In addition, number of requests sent to a web server was also reduced compared to the current framework. The proposed UI layer framework can be applied to business web applications to increase their applications load time and reactiveness. By making their web applications more reactive, it would potentially have a positive impact on the conversion rates of their businesses.

A SURVEY ON WEBSITE APPLICATION INTRUSION

Nowadays about all the companies have enhanced their presentation through allocating extra information trade inside their organization with among their distributers, dealers, and clients via web application assistance. Databases are innermost to the current web applications as they offer essential data with accumulates significant information for instance client testimonial, economic and expense information, corporation statistics etc. These web Applications have been constantly marked by extremely motivated malevolent intruders to obtain economic achieve. SQL injection XSRF and XSS is possibly main reason behind widespread of application layer intrusion method utilized by intruder to ruin the web Application, influence or remove the substance through entering unnecessary command threads. Structured Query Language Injection Attacks is one of the dangerous projects of OWASP of susceptibility list and has effected in enormous intrusions on various web Applications in the precedent years. Consequently, a lot examine have been prepared to discover and avoid intrusions and it consequence in a refuse of SQLI intrusions. Nevertheless, there are still schemes to evade them and these schemes are too difficult to apply in real world web applications. We show a useful review on a variety of SQL Injection weakness, intrusions, and discovery and avoidance techniques.

TITINdb-a computational tool to assess titin's role as a disease gene.

SummaryLarge numbers of rare and unique titin missense variants have been discovered in both healthy and disease cohorts, thus the correct classification of variants as pathogenic or non-pathogenic has become imperative. Due to titin’s large size (363 coding exons), current web applications are unable to map titin variants to domain structures. Here, we present a web application, TITINdb, which integrates titin structure, variant, sequence and isoform information, along with pre-computed predictions of the impact of non-synonymous single nucleotide variants, to facilitate the correct classification of titin variants.Availability and implementationTITINdb can be freely accessed at http://fraternalilab.kcl.ac.uk/TITINdbSupplementary information Supplementary data are available at Bioinformatics online.

NMRPro: an integrated web component for interactive processing and visualization of NMR spectra

The popularity of using NMR spectroscopy in metabolomics and natural products has driven the development of an array of NMR spectral analysis tools and databases. Particularly, web applications are well used recently because they are platform-independent and easy to extend through reusable web components. Currently available web applications provide the analysis of NMR spectra. However, they still lack the necessary processing and interactive visualization functionalities. To overcome these limitations, we present NMRPro, a web component that can be easily incorporated into current web applications, enabling easy-to-use online interactive processing and visualization. NMRPro integrates server-side processing with client-side interactive visualization through three parts: a python package to efficiently process large NMR datasets on the server-side, a Django App managing server-client interaction, and SpecdrawJS for client-side interactive visualization. Demo and installation instructions are available at http://mamitsukalab.org/tools/nmrpro/ mohamed@kuicr.kyoto-u.ac.jp Supplementary data are available at Bioinformatics online.

Exploring JavaScript and ROOT technologies to create Web-based ATLAS analysis and monitoring tools

We explore the potential of current web applications to create online interfaces that allow the visualization, interaction and real cut-based physics analysis and monitoring of processes through a web browser. The project consists in the initial development of web- based and cloud computing services to allow students and researchers to perform fast and very useful cut-based analysis on a browser, reading and using real data and official Monte- Carlo simulations stored in ATLAS computing facilities. Several tools are considered: ROOT, JavaScript and HTML. Our study case is the current cut-based H → ZZ → llqq analysis of the ATLAS experiment. Preliminary but satisfactory results have been obtained online.

Complex-query web image search with concept-based relevance estimation

Complex queries are widely used in current Web applications. They express highly specific information needs, but simply aggregating the meanings of primitive visual concepts does not perform well. To facilitate image search of complex queries, we propose a new image reranking scheme based on concept relevance estimation, which consists of Concept-Query and Concept-Image probabilistic models. Each model comprises visual, web and text relevance estimation. Our work performs weighted sum of the underlying relevance scores, a new ranking list is obtained. Considering the Web semantic context, we involve concepts by leveraging lexical and corpus-dependent knowledge, such as Wordnet and Wikipedia, with co-occurrence statistics of tags in our Flickr corpus. The experimental results showed that our scheme is significantly better than the other existing state-of-the-art approaches.

Are web applications ready for parallelism?

In recent years, web applications have become pervasive. Their backbone is JavaScript, the only programming language supported by all major web browsers. Most browsers run on desktop or mobile devices with parallel hardware. However, JavaScript is by design sequential, and current web applications make little use of hardware parallelism. Are web applications ready to exploit parallel hardware? We answer the question in two steps: First, we survey 174 web developers about the potential and challenges of using parallelism. Then, we study the performance and computation shape of a set of web applications that are representative for the emerging web. Our findings indicate that emerging web applications do have latent data parallelism, and JavaScript developers' programming style is not a significant impediment to exploiting this parallelism.

Improving Web Application Security Using Penetration Testing

The main issues of current web application is easily hacking the user information by unauthorized person. The development of entire web application depends on scripting languages that easily displays the user authentication code to the web browser. All code must be transferred through query string parameter (URL) of the web application. This kind of application security fails when verifying it by penetration testing which is based on XSS languages. This study overcomes the security issues by developing a web application based on cross site scripting technique which the user codes are encrypted using RSA algorithm and cookies, cross domain verification based on encrypted use code. XSS vulnerabilities come in different forms and may be categorized into two varieties: reflected and stored. Reflected is on type of attack which can be performed against applications that employ a dynamic page error message to users. Stored XSS vulnerability appears when data submitted by one user is store in the application or in the back-end database. The user cookies of the web browser store only the encrypted key values. These techniques applied in Enterprise web application it support multiple organization for processing product purchase order, sales order and invoice details.

개방형 웹 애플리케이션 스토어 연동을 위한 프로토콜의 설계 및 구현

Recently, because the portable devices became popular, it is easily to see that each person carries more than just one portable device and the use of the smartphone stretches as time goes by. After the smartphone has propagated rapidly, the total usage of the smartphone applications has also increased. But still, each application store has a different platform to develop and to apply an application. The application store is divided into two big markets, the Android and the Apple. So the developers have to develop their application by using these two different platforms. Developing into two different platforms almost makes a double development cost. And for the other platforms, the weakness is, which still have a small market breadth like Bada is not about the cost, but about drawing the proper developers for the given platform application development. The web application is rising up as the solution to solve these problems, reducing the cost and time in developing applications for every platform. For web applications don`t need to make a vassal relationship with application markets platform. Which makes it possible for an application to operate properly in every portable devices and reduces the time and cost in developing. Therefore, all of the application markets could be united into one big market through a protocol which will connect each web applications market. But, still there is no standard for the web application store and no current web application store is possible to interlock with other web application stores. In this paper, we are trying to suggest a protocol by developing a prototype and prove that this protocol can supplement the current weakness.

Extending the RPL Routing Protocol to Agricultural Low Power and Lossy Networks (A-LLNs)

The routing protocol for low power and lossy network (RPL) started to be designed by the ROLL working group of IETF since the year of 2008. Until the RFC6550 was released, this standard with its routing algorithms and four application scenarios, such as home and building automation, industrial control, and urban environment, have been grounded. As a main jigsaw of the paradigm of the Internet of Things (IoT), RPL plays the major role and has become an impressed technical tendency in the field of wireless communication. However, it is still very difficult to find effective approaches to simulate and evaluate RPL’s behaviors and other extensions of its applicability, especially in the domain of precision agriculture. Notice that wireless sensor network (WSN) has been deployed a wide variety of wireless sensing devices, and should be one valued supported part of the promising IoT ecosystem. In this paper, first the authors provide a brief presentation of the related protocols including their standardization, the existing implementations, and a group of simulation experiment results obtained from the RPL capable COOJA simulator with its developed modules. Second, the authors then focus on the utilization of this protocol in the agricultural low power and lossy network (A-LLN) area and propose their dedicated instances hybrid network architecture to meet its specific requirement. Moreover, the Web of things (WoT), a trend and new vision of IoT, is appended in the authors’ proposal to provide a novel dimension in design of A-LLN since it enables a full interoperability with current web application and higher efficiency of development. As a conclusion, the authors summarized their ongoing work and future solutions of the current technology issues.

面向多租户Web应用的性能隔离方法

Multi-tenancy enables the sharing of resources and costs across a large pool of users, thus allowing for centralization of infrastructure in locations with lower costs. Performance isolation is a key requirement for multi-tenant Web application hosting environments. This paper proposes a performance isolation approach for application-level sharing multi-tenancy Web applications. A fine-grained application-level resource management model based on the transaction-processing chain is first defined, as well as its concurrency control algorithm based on the semaphore mechanism. This model helps to manage resources usage in a transaction-level and phase-targeted way. It reuses one thread within a transaction process, and therefore, avoids the reengineering cost generated by system reconstruction. The end result is an approach that extends the current Web application hosting environments to multi-tenancy aware hosting environments. A detailed set of experiments were performed under different settings for changing workloads in the controlled TPC-W application to evaluate the effectiveness and performance overhead of our approach. Compared to the traditional coarse-grained strategy, experimental results show that the fine-grained strategy based on our approach is more efficient and agile in avoiding performance interference between multiple hosted tenants and CPU overload. Our results also show that the performance overhead of our approach is small.