Web Application Development Research Articles

Securing web applications against XSS and SQLi attacks using a novel deep learning approach

Modern web application development involves handling enormous amounts of sensitive and consequential data. Security is, therefore, a crucial component of developing web applications. A web application's security is concerned with safeguarding the data it processes. The web application framework must have safeguards to stop and find application vulnerabilities. Among all web application attacks, SQL injection and XSS attacks are common, which may lead to severe damage to Web application data or web functionalities. Currently, there are many solutions provided by various study for SQLi and XSS attack detection, but most of the work shown have used either SQL/XSS payload-based detection or HTTP request-based detection. Few solutions available can detect SQLi and XSS attacks, but these methods provide very high false positive rates, and the accuracy of these models can further be improved. We proposed a novel approach for securing web applications from both cross-site scripting attacks and SQL injection attacks using decoding and standardization of SQL and XSS payloads and HTTP requests and trained our model using hybrid deep learning networks in this paper. The proposed hybrid DL model combines the strengths of CNNs in extracting features from input data and LSTMs in capturing temporal dependencies in sequential data. The soundness of our approach lies in the use of deep learning techniques that can identify subtle patterns in the data that traditional machine learning-based methods might miss. We have created a testbed dataset of Normal and SQLi/XSS HTTP requests and evaluated the performance of our model on this dataset. We have also trained and evaluated the proposed model on the Benchmark dataset HTTP CSIC 2010 and another SQL/XSS payload dataset. The experimental findings show that our proposed approach effectively identifies these attacks with high accuracy and a low percentage of false positives. Additionally, our model performed better than traditional machine learning-based methods. This soundness approach can be applied to various network security applications such as intrusion detection systems and web application firewalls. Using our model, we achieved an accuracy of 99.84%, 99.23% and 99.77% on the SQL-XSS Payload dataset, Testbed dataset and HTTP CSIC 2010 dataset, respectively.

Diabetes Prediction using Data Mining Techniques

This project delves into the realm of data mining for diabetes prediction, with a focus on enriching the well- known Pima Indian Diabetes dataset by incorporating vital health metrics, particularly heart rate, derived from fitness trackers. The initiative encompasses three integral components: firstly, the exploration and enhancement of the dataset through the integration of heart rate; secondly, the application of diverse data mining techniques, ranging from logistic regression and random forest to support vector machines and naive Bayes, along with advanced machine learning algorithms and neural networks, for a comprehensive comparative analysis of their efficacy in diabetes prediction; and finally, the development of a user-friendly web application disseminating diabetes-related information, detailing project methodologies, and offering users the ability to assess their diabetes risk through instant feedback based on inputted health details. This multi-faceted approach not only contributes to the field of healthcare data analytics by evaluating diverse prediction methods but also aligns with contemporary trends in wearable technology integration for health monitoring, bridging the gap between data analytics and public health awareness. The findings offer valuable insights for healthcare professionals and researchers striving for robust methods in diabetes prediction and prevention.

Adaptive Security Activities Selection Model Using Multi-Criteria Decision-Making Methods

Adaptive security activities are a list of recommended security activities to be integrated smoothly with the software development life cycle (SDLC) to produce a secure application software. Adaptive security activities are needed due to the emergence of factors and constraints which have been determined as one of the reasons for the underutilisation of security activities implementation, especially in the earlier phase of software development process. Security activities selection models were proposed to select and recommend security activities but the models were focused on certain factors or as a solution for specific constraints, and thus the recommended security activities were not adaptive. Consequently, an adaptive security activities selection (ASAS) model was proposed by combining the factors and constraints faced by the development team in selecting security activities. The model consisted of two integrated multi-criteria decisionmaking (MCDM) methods, namely Analytic Network Process (ANP) and Reference Ideal Method (RIM). ANP was used to prioritise and weight the criteria while RIM was used to measure and evaluate the security activities with the value of constraints in regard to each criterion. To validate the model a case study was performed on four inhouse web application development teams in the Malaysian public sector. The proposed model was able to recommend security activities in the requirement and design phase based on different constraints faced by each of the development teams. The model was adaptive due to its flexibility and ability to change and suit different evolved conditions when recommending the security activities.

Ontological Augmentation and Analytical Paradigms for Elevating Security in Healthcare Web Applications

The 4th and 5th industrial revelations provided huge access to a high volume of information in healthcare sectors. However, the vast majority of web applications are under attack constantly. Due to the huge volume of attack vectors in recent years, technical breaches to the web applications of healthcare sectors are becoming a common issue. Hence, it is essential to develop an effective framework that would help experts and healthcare practitioners in web application security management. In this research, we proposed an ontology-based technique for developing secure online web applications in healthcare sectors. This study presents a conceptual framework with 5 stages namely: idea understanding, requirement identification, design and code, threat classification, and facilitate. The proposed methodology involves several various advantage features such as providing a unified path for future professional applications. Also, the proposed solution provides a clear pathway for implementing the easy-to-use secure web application development in short term in the healthcare sector. Finally, the study used a multi-criteria decision-making methodology to undertake a performance simulation assessment. Out of the evaluated process, Fuzzy-AHP has shown better performance for scheduling each step of the final developed security system better. In the future, the proposed method will be evaluated using more databases in the healthcare sector to improve the applications of the proposed method.

An Enhanced Mechanism for Protecting Web Applications from Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) is considered one of the top vulnerabilities in today’s web, where an untrusted website can force the user browser to send an unauthorized valid request to the trusted site. Legitimate users will lose their integrity over the website when the CSRF takes place. So far, many solutions have been proposed for the CSRF attacks such as the referrer HTTP header, custom HTTP header, origin header, client site proxy, a browser plug-in, and random token validation, but in this research, the use of random token validation to solve the problem of CSRF attacks was implemented. The proposed solution in the study used a concept known as Nonce which is a type of random token attached to requests sent over a server. This solution proved to be effective enough to protect and prevent web applications from CSRF attacks. Although no system can be secured against attacks, this study recommends that the random token validation (Nonce) approach of protecting web applications should be adopted by all web applications developers and users to improve on the already established solutions to reduce the chances of attacks on web applications to a very slim percentage, if not eliminated.

Integrated Project Development through Combined Theory and Practices of Core Courses focusing on Software Development Skills: Integrated Learning Framework

The National Education Policy promotes moving from the conventional content-heavy and memorization learning practice towards holistic learning/integrated learning. It imparts a creative and multidisciplinary curriculum that focuses equally on curriculum and assessment. All educational establishments assess students using written examinations, quizzes, seminars, term paper writing, and course projects. A semester typically includes 4-5 courses, and students must earn credits for these courses by scoring a good Cumulative Grade Point Average (CGPA). As course projects offer depth knowledge/holistic learning/lifelong learning of a course for the student, many courses include course projects as one of the activities in the course. If all the courses are intended to include course projects as a mandatory pedagogy, it will be difficult for students to acquire in-depth knowledge and required skills while also dealing with stress. So we are proposing an integrated learning framework by applying the theory and practices of two core courses- Software Engineering and Web Technologies to develop a web application. This integrated learning focuses on developing software development and software testing skills in computer science for undergraduate students pursuing a bachelor of engineering degree. This framework alleviated the pressure on students during placement and created job opportunities in software development. The framework consists of three important phases- The first phase includes the identification of the problem as a need for customers, writing requirements and analyzing the same. Students apply modular design principles and break down the codebase into distinct modules. This technique enhances code organization, reusability, and maintainability. The second phase focused on developing the front end by harnessing the power of Angular, a leading web framework, to craft a sleek and interactive user interface. The backend is built using Node.js, which serves as the foundation, enabling the software system to cater to highperformance server environments. These modules communicated seamlessly through well-defined APIs, facilitating the integration of various components within the application, ultimately delivering a seamless and responsive user experience. An industry expert conducted a workshop on Angularsoftware testing workshop was conducted for students by industry experts to expose the students to designing test cases, test plans, and testing strategies. The hands-on experience on testing tools was provided during the workshop. Faculty reviews are conducted on each phase, and rubrics-based assessment is done on each phase. Approximately sixty teams created web-based applications for real-world scenarios. Positive aspects of the framework in feedback indicated that more than 87% of the students agreed that they could apply Software engineering principles and practices such as requirements management. modular design and testing in web applications. Also, more than 85% of students acquire skills from code-to-web design mastery by developing web applications in Angular Node.js and backend implementation. This framework helped to improve teamwork, presentation and communication skills. Confidence in software development improved to a greater extent. The design and implementation of the framework met the stated outcome of the courses. The student's academic performance improved by 10% compared to the previous year when students were not involved in the integrated project development. Keywords— Framework, learning, practices, project, skills, technology, testing, web

Advancing Population Health Through Open Environmental Data Platforms.

Data stand as the foundation for studying, evaluating, and addressing the multifaceted challenges within environmental health research. This chapter highlights the contributions of the Canadian Urban Environmental Health Research Consortium (CANUE) in generating and democratizing access to environmental exposure data across Canada. Through a consortium-driven approach, CANUE standardizes a variety of datasets - including air quality, greenness, neighborhood characteristics, and weather and climatic factors - into a centralized, analysis-ready, postal code-indexed database. CANUE's mandate extends beyond data integration, encompassing the design and development of environmental health-related web applications, facilitating the linkage of data to a wide range of health databases and sociodemographic data, and providing educational training and events such as webinars, summits, and workshops. The operational and technical aspects of CANUE are explored in this chapter, detailing its human resources, data sources, computational infrastructure, and data management practices. These efforts collectively enhance research capabilities and public awareness, fostering strategic collaboration and generating actionable insights that promote physical and mental health and well-being.

Algorithm and software implementation of real-time collaborative editing of graphical schemes using Socket.IO library

In the modern world, teamwork is becoming more and more common. Different participants may be in different places, but they still need to work together on the same project, including graphic diagrams. An important aspect of this approach is the ability to observe changes made by other participants in real time. This allows, first of all, to reduce the frequency of conflicts when simultaneously editing the same schema element. However, existing solutions for sharing data in real-time collaborative editing of graphical diagrams face a number of problems, such as delays in data transmission. The subject of research in this article is the development of a minimum viable web application that allows users to perform collaborative graphical editing of a canvas in real time. The object of the study is a model of the process of collaborative editing in real time, taking into account the resolution of emerging conflicts. The research methodology is based on a theoretical approach to identifying mathematical formulas that describe changes in the state of a document when it is jointly edited by users. The characteristics of the use of the HTTP and WebSocket protocols in multi-user client-server applications are given. To use the WebSocket protocol, the Socket.IO library is used. The application server is built using the Express framework. The authors' main contribution to the topic is a model of the real-time collaborative editing process, as well as a mechanism for detecting conflicts for any number of users and a conflict resolution function for each pair of conflicting changes when online collaborative editing of documents. Within the framework of this study, an algorithm for collaborative editing of graphic schemes in real time is additionally proposed and its implementation in the form of a software system is given. The algorithm proposed as a result of the study in the JavaScript programming language can be used as a basis for developing more rich web applications using the Socket.IO library and be the object of future research affecting multi-user interaction and real-time conflict resolution.

Informacioni sistem za podršku rada auto-parka

Introduction/purpose: Information systems represent a set of people, data, processes and information technologies related to the purpose of data collection, processing, storage and their filtering into useful information needed for supporting organizations or decision making. The information system is developed as a Web application with the help of the Javascript programming language, Node.js, and React.js, while in the background it relies on data storage and communication with the SQL database. Methods: Modern web application development tools are used and tested on low budget hardware. Results: Effective software for a car park with low maintenance cost and great reliability has been developed. Conclusion: The software made work easier, increased access to data and facilitated data review, reducing the possibility of error. The application described in this article and made for research shows how modern commercial technologies can be used for military purposes.

Role of Python in Rapid Web Application Development Using Django

Role of Python in Rapid Web Application Development Using Django

Resumability—A New Primitive for Developing Web Applications

Resumability—A New Primitive for Developing Web Applications

Django Unleashed: A Deep Dive into the Features and Advantages of the Django Framework

Django is a powerful framework for developing web applications enabling researchers and students to efficiently access and analyse organic compound data contributing to improved patient care and safety. Its security data modelling integration capabilities and user friendly interfaces make it an excellent choice for building systems that assist in reaction planning and retro synthesis enhancing the efficiency and effectiveness of chemical research and development. This paper presents a comprehensive review on the core features user friendliness and extensive documentation of the framework providing guidance and instructions on how to integrate it with these and other technologies empowering developers to create robust and innovative web applications.

Enhancing Cognitive Skills in Children through CogniHome: A Comprehensive Home-Based Training Solution

Abstract: The future mental health of person is Depend on their childhood. To develop their cognitive skills in their childhood we are developing web application based on different technologies. CogniHome is also helpful to develop and increase their Intelligence Quotient (IQ). The abstract deals with the significance of cognitive skills. The IQ test in website is helpful for user to check their mental stage. User able to increase their cognitive skills using different Games, Therapies and Puzzles. Therapies include meditation, yoga, etc. which help user to stable mind. Puzzles and Quizzes are helpful to increase their IQ. The main purpose of CogniHome is to engage child in enjoyable and productive home learning experiences. Ultimately, the CogniHome is to enhance cognitive skills of child for their betterment future

The web application for supporting temporarily relocated persons in Germany

In current article a process of development of the information system for Ukrainian refugees in Germany was researched. Though this group is the only target audience, the number of people who belongs to it is big. Germany has an extremely complex bureaucracy system, particularly in migration area, especially for refugees. Therefore, people who come to Germany require help, but the number of volunteers involved in this help decreases gradually. That’s why a need of the system which can help them to get through themselves is high. Most of the questions, related to integrations, the person is ought to solve on his own, and there is a lack of sources with systematized and differentiated information, the obtaining, gathering information about required actions and legal requirements is rather complex. The need of the supporting system for people’s orientation in new conditions, that would decrease the pressure on volunteers and help people to easier cope themselves. The current information system is created as a website, based on PHP programming stack particularly MySQL as a database management system, Laravel as PHP framework and Javascript in the framework React as frontend. One of the key problems aside of building web application itself is a problem of gathering and reorganizing various types of data, when its sources, types and obsolescence rate as so different in each particular case. Furthermore, the importance of user experience through data was investigated, especially in the circumstances when normal interviewing, creating focus groups and staged user testing is impossible, as well as it is impossible to test different types of data organization. The main purpose of the paper is an experience of development of web application, which can help to create an intelligible algorithm of actions for the person who just arrives to Germany, as well as provides you up-to-date and reliable information and reference about different aspects of adaptation in the country of residence as a person with protective status

Web Application for Mathematical Modeling of Unsteady Oil Flow in Porous Medium

Introduction. The analysis and interpretation of hydrodynamic research data are based on theoretical models and computational algorithms. Despite the demand for this topic, numerous issues related to unsteady fluid flows in oil reservoirs still require solutions. Therefore, mathematical setting of problems related to the account of unsteady fluid flow, the development of effective numerical methods and algorithms, their solution using modern web technologies are pressing. This study is aimed at developing a web application for mathematical modeling of the process of fluid filtration in single- porosity reservoirs when conducting a hydrodynamic study at a production well.Materials and Methods. To solve the problem, the methods of continuum mechanics and computational mathematics were applied. A model of oil flow in a single-porosity reservoir was presented. Python and JavaScript programming languages were used in the development of the application. The calculation results were stored in a relational database implemented using PostgreSQL tools.Results. A new web application has been developed for modeling the oil filtration process in single- porosity reservoirs. It is applicable for studying fluid dynamic processes and can be used to predict flowrates, production and calculation of optimal well operation modes.Discussion and Conclusion. The developed web application provides for building pressure and temperature fields in the reservoir near a flowing and shut-in production well and at various distances from it. This information makes it possible to urgently assess the duration of hydrodynamic studies, as well as to regulate the operation of wells. The application can be deployed in an existing network infrastructure and use all the functionality by connecting to a remote server. It is optimized for use on various platforms and has broad prospects for further development.

Формирование методики безопасного программирования для разработки веб-приложений

Today, cyberphysical systems often become targets of targeted cyberattacks, including the exploitation of vulnerabilities in software operating in such systems. Vulnerable software can be used to distribute malicious software, steal or disclose confidential data, affect protected information in violation of established rights, leading to destruction, destruction, distortion or malfunction of automated systems in which this software operates. Determining the methodology for the secure development of web applications is the most important stage in the development of a comprehensive protection system for the object of informatization. This article proposes technologies to improve the level of security provided by the BSIMM method of secure programming, with the help of which it is possible to ensure the proper level of protection for each web application, depending on the sensitivity of the information processed.

Web-Based Financial Management Socialization And Training In Mushalla Al – Hikmah Rumai – Pekanbaru

Financial management and governance training in mosques has a crucial role in ensuring efficient and transparent financial management. However, mosques often face challenges in managing finances properly due to limited knowledge and access to the latest technology. Therefore, this training aims to provide mosque administrators with a better understanding of modern financial management and to introduce web-based applications as an effective tool for mosque financial management. One of the unique features of this training is the introduction and training on using a web-based application that has been specifically designed for the needs of mosque financial management. This application includes various features, such as digital donation recording, expense tracking, automatic financial reports, and member and donor data management. By implementing this web-based application, it is hoped that mosque administrators can optimize their financial management, increase transparency, and minimize the risk of errors in managing mosque funds. This training was held collaboratively by a team of financial management experts, web application developers, and financial practitioners within the mosque. The results of this training are expected to help mosques achieve their financial goals in a sustainable manner, increase efficiency, and build community trust in the donations made.

Logistics Management System using Big Data Analytics

Nowadays, the e-commerce sector has emerged as a significant player in the current financial landscape. It offers a wide range of advantages for global customers, and given the increasing demand for various services and products, there is a pressing need for the development of efficient Web applications. This e-commerce application serves as the bridge between small businesses and their clientele. The application harnesses the capabilities of various technologies, including MongoDB for data storage, Node.js and Express.js for a fast and efficient backend, and HTML CSS for constructing a user-friendly interface for clients. This thesis underscores the proficiency of the (MongoDB, Express.js, HTML, CSS, Node.js) technology stack in the creation of a comprehensive e-commerce application with robust scalability options. The study delves into a meticulous development process, spanning from the backend to the frontend. The results unequivocally underscore the indispensable role in crafting a customizable Web application. We have also investigated the realm of big data analytics and its applications in logistics and supply chain management. It delves into innovative methods, practices, and prospects within this field. The articles within this collection scrutinize multiple avenues for enhancing big data analytics and its applications in logistics and supply chain management. These include the exploration of technology-centric tracking approaches, the examination of the correlation between financial performance and data-driven supply chains, as well as the assessment of implementation challenges and the maturity of supply chain capabilities in the context of big data.

Design and Implementation of a Software Result Processing and Transcript Generation

Result processing can be seen as a continuous process of converting data (scores, grade points, credit units etc.) into a definite and meaningful information (statement of result, transcripts etc.). These results are used to check the performance of each student in various courses. These results when processed manually leads to many problems such as error during computation, insecurity of results, untidy results after changes must have been affected and work load on the exam officer(s) etc. However, designing and implementing, as well as the computerization of result processing and transcript generation system will reduce these problems to the barest minimum. Providing password can do this, which grants access to only authorized user(s). Corrections or changes are affected without making the work untidy. Also stress on exam officer(s) is or are reduced. The design and implementation will be developed using the structured system analysis and design methodology (SSADM). The new system was designed using Visual Basic and MS Access. This language was chosen because of its easy syntax and features for developing web applications.

Initial development of web application to support excipient selection for immediate release tablets using message passing neural network

The formulation of immediate release tablets is a challenging task due to the need to balance multiple factors such as bioavailability and stability. The selection of appropriate excipients is critical in achieving these objectives. The recent successful application of Artificial Intelligence (AI) and Message Passing Neural Network (MPNN) in predicting physicochemical and biological properties of drug molecules suggests for the researchers on the ability to apply these models in selecting excipients. The aim of this study is to develop an innovative approach for selecting excipients using AI and MPNN and to create a user-friendly web application to support excipient selection for immediate release tablets. The study utilized a database of 13,278 immediate-release tablets to train, validate, and test the MPNN model on the basis of Simplified Molecular-Input Line-Entry system (SMILES) of drug substances. The performance of the model was validated based on its ability to predict the probability of selecting an excipient reasonably. A web application named FormAI was developed using the Streamlit web framework and integrated with the trained model. The MPNN model demonstrated good performance, with an average Area Under Curve > 0.98 and R2 > 0.99, indicating its ability to predict the probability of selecting an excipient reasonably. The FormAI application provides a user-friendly platform for excipient selection. The results of the study demonstrate the potential of using AI and MPNN in drug formulation design, specifically in excipient selection for immediate-release tablets. The FormAI application provides a practical solution for pharmaceutical scientists and formulators.