Hypertext Transfer Protocol Research Articles

WEB DESIGN AND WEB PROGRAMMING IN THE MODERN INTERNET WORLD

Modern web content development capabilities are undergoing characteristic changes due to the improvement of web technologies in programming. The origin of web technologies began in the early 80s of the last century when the Hypertext Transfer Protocol (HTTP) and the Hypertext Markup Language (HTML) made a significant contribution to the development of Internet capabilities. The web evolution, characterised by scientific and technological progress in information technology, has opened up new opportunities for the development of web programming, which has led to the emergence of programming languages, frameworks, cascading style sheets, and hypertext markup languages. This research aims to study and analyse the key aspects of web programming and web design with a combination of modern features of the Internet environment. To analyse web design, the article considers the possibilities of using the Bootstrap framework, which combines and contains the HTML5 hypertext markup language, CSS3 cascading style sheets, and the JavaScript programming language. Having analysed two web development technologies—front-end and back-end—we can conclude that the presentation level (front-end development) corresponds to the client side, with which the client can interact and where dynamic elements can be added to an HTML page using JavaScript with the visual definition of a web page using CSS. In the case of back-end development, the application layer corresponds to the server side, with which the client cannot interact, as the shell is hidden. Using the modern capabilities of the programming language, its code, and a set of auxiliary tools in website development, the paper presents a development algorithm where each stage contains separate processes and operations during website development, which makes it impossible for them to exist independently. Thus, tools for designing and laying out websites using modern technologies can greatly simplify the development process, which can create higher-quality web content. Keywords: Web, web environment, web technologies, front-end, framework, Bootstrap, CSS3, HTML5, CCS3, JavaScript.

A novel deep-learning based approach to DNS over HTTPS network traffic detection

<div align="center"><span lang="EN-US">Domain name system (DNS) over hypertext transfer protocol secure (HTTPS) (DoH) is currently a new standard for secure communication between DNS servers and end-users. Secure sockets layer (SSL)/transport layer security (TLS) encryption should guarantee the user a high level of privacy regarding the impossibility of data content decryption and protocol identification. Our team created a <a name="_Hlk143263730"></a>DoH data set from captured real network traffic and proposed novel deep-learning-based detection models allowing encrypted DoH traffic identification. Our detection models were trained on the network traffic from the Czech top-level domain maintainer, Czech network interchange center (CZ.NIC), and successfully applied to the identification of the DoH traffic from Cloudflare. The reached detection model accuracy was near 95%, and it is clear that the encryption does not prohibit the DoH protocol identification.</span></div>

Artificial Intelligence Web Application Firewall for advanced detection of web injection attacks

AbstractCurrently, web services‐based applications have an important presence in public and private organizations. The vulnerabilities that these types of applications may have pose an inherent potential risk to the business model of these organizations. These applications have the inherent risk of being used by organizations in such a way that their activity is affected and they become the main entry point for attackers who want to breach their security. The main barrier to this type of attack are web application firewalls (WAF), which are responsible for processing Hypertext Transfer Protocol requests between clients and web servers, classifying them and rejecting malicious requests. This type of (WAF) applications, for the most part, have regular expressions that correspond to general rules and allow detecting malicious requests that follow a pattern contained in them. However, due to the knowledge of these rules by attackers, it is easy to circumvent security and to impersonate a malicious request by an innocuous request. Therefore, in this article, we present a study of different models based on artificial intelligence techniques as Naïve Bayes, k‐nearest neighbors, support vector machines, and linear regression to test their effectiveness in detecting malicious requests from a synthetic dataset containing more than 100,000 requests. The results obtained show that the implementation of these methods optimize the detection of malicious requests obtaining results between 92% and 99% of success in their classification.

Enhancing QoS of Telecom Networks through Server Load Management in Software-Defined Networking (SDN)

In the modern era, with the emergence of the Internet of Things (IoT), big data applications, cloud computing, and the ever-increasing demand for high-speed internet with the aid of upgraded telecom network resources, users now require virtualization of the network for smart handling of modern-day challenges to obtain better services (in terms of security, reliability, scalability, etc.). These requirements can be fulfilled by using software-defined networking (SDN). This research article emphasizes one of the major aspects of the practical implementation of SDN to enhance the QoS of a virtual network through the load management of network servers. In an SDN-based network, several servers are available to fulfill users’ hypertext transfer protocol (HTTP) requests to ensure dynamic routing under the influence of the SDN controller. However, if the number of requests is directed to a specific server, the controller is bound to follow the user-programmed instructions, and the load on that server is increased, which results in (a) an increase in end-to-end user delay, (b) a decrease in the data transfer rate, and (c) a decrease in the available bandwidth of the targeted server. All of the above-mentioned factors will result in the degradation of network QoS. With the implementation of the proposed algorithm, dynamic active sensing server load management (DASLM), on the SDN controller, the load on the server is shared based on QoS control parameters (throughput, response time, round trip time, etc.). The overall delay is reduced, and the bandwidth utilization along with throughput is also increased.

Web server load prediction and anomaly detection from hypertext transfer protocol logs

<p><span lang="EN-US">As network traffic increases and new intrusions occur, anomaly detection solutions based on machine learning are necessary to detect previously unknown intrusion patterns. Most of the developed models require a labelled dataset, which can be challenging owing to a shortage of publicly available datasets. These datasets are often too small to effectively train machine learning models, which further motivates the use of real unlabeled traffic. By using real traffic, it is possible to more accurately simulate the types of anomalies that might occur in a real-world network and improve the performance of the detection model. We present a method able to predict and categorize anomalies without the aid of a labelled dataset, demonstrating the model’s usability while also gathering a dataset from real noisy network traffic. The proposed long short-term memory (LTSM) based intrusion detection system was tested in a real-world setting of an antivirus company and was successful in detecting various intrusions using 5-minute windowing over both the predicted and real update curves thereby demonstrating its usefulness. Our contribution was the development of a robust model generally applicable to any hypertext transfer protocol (HTTP) traffic with almost real-time anomaly detection, while also outperforming earlier studies in terms of prediction accuracy.</span></p>

Comparative performance analysis of different queuing techniques for campus area network

<span>A quality network infrastructure is a user demand for the increment of traffic nowadays. Due to data traffic congestion, a network’s service quality cannot fulfill the user demand, especially for streaming-type traffic. For this, an appropriate queuing method can be a convenient solution for network congestion at the time of picking traffic load. In this paper, a simulation was conducted using the OPNET application to examine the feasibility of three types of queuing methods, namely first in first out (FIFO), priority queuing (PQ), and weighted fair queuing (WFQ). During the simulation, several important parameters such as delay, throughput, and response time are considered as performance metrics and compared among four types of applications as file transfer protocol (FTP), hypertext transfer protocol (HTTP), voice over internet protocol (VoIP), and video conferencing. According to the result, it is observed that WFQ provides comparatively improved results than PQ and FIFO.</span>

Real-Time Multi-Agent Mobile Robot based on A Client-Server Model

A client-server network is one of the most important topics in a computer network. In this work, a real-time computer control system is designed based on the Client-Server Model for a Multi-Agent Mobile Robot System (CSM-MAMRS) and is applied to a building that consists of (N) floors and uses one mobile robot on each floor that has specific actions in different types of environments. The new proposed CSM-MAMRS consists of four layers. The first stage manages the network communication for each agent. The second stage solves the major problems of path planning by using a proposed hybrid algorithm that combines the Rapidly Exploring Random Tree Star (RRT*) and the Particle Swarm Optimization (PSO) algorithms in order to provide the shortest and smoothest path with collision avoidance between the starting and the target points in a static and dynamic robot environments are used.. In the third stage, a velocity planner controller is based on an inverse kinematic mobile robot model. In the fourth stage, the Hypertext Transfer Protocol HTTP is used to send velocity values to real mobile robots via the Wireless Network Control Administration. The simulation results and experimental works successfully achieved to significant improvement in real-time when using three missions of three mobile robots on different static map floors in the building. The maximum tracking pose errors for three robots in the static enviormnets are 0.39 cm, 0.02 cm, 0.32 cm respectively, but the maximum tracking pose error in the dynamic environments are 2.94 cm and 2.8 cm only for two mobile robots along the maximum distance of 250 cm. Index Terms— Real-time computer control, Mobile robot, Multi-agent system, Path planning algorithms.

Building an Electronic Medical Record System Exchanged in FHIR Format and Its Visual Presentation.

Currently, the Taiwan Electronic Medical Record Exchange Center uses the Clinical Document Architecture (CDA) framework, which is based on the international medical standard. The CDA R2 standard, defined in 2005, is used for cross-institution retrieval of electronic medical records (Ministry of Health and Welfare, Information Department, 2021). However, CDA R2 only supports the exchange of clinical documents and is limited to the XML format. Due to the lack of a standardized framework for medical data exchange in Taiwan, different standards and specifications result in different data interface methods between systems, requiring customization for each system by healthcare institutions or the government. The inconsistency in data formats requires healthcare institutions and the government to spend more time on data parsing and mapping, resulting in slow integration of medical data. In this study, we simulated healthcare institutions using Fast Healthcare Interoperability Resources (FHIR) for medical information exchange and utilized the exchanged medical information to create a dynamic dashboard to assist healthcare professionals in making medical decisions. To ensure information security, we employed Hyper Text Transfer Protocol Secure (HTTPS) for secure transmission, which encrypts the transmitted medical record data using the Transport Layer Security (TLS) protocol, preventing deliberate interception and tampering of medical record data between the two systems. Finally, to test the load and performance of static and dynamic resources and web applications, we conducted a system performance evaluation using Apache JMeter. The results of this study demonstrate that replacing the gateway of the Electronic Medical Record Exchange Center with an FHIR server effectively reduces the time and cost spent by developers on data format conversion while also mitigating the information security risks associated with the previous VPN solution. Additionally, by utilizing dynamic charts, healthcare professionals are assisted in making medical decisions.

Use of QUIC for CoAP transport in IoT networks

The QUIC protocol, formerly known as Quick UDP Internet Connection, has recently been standardized by the Internet Engineering Task Force (IETF). While initially designed to support the transport of Hypertext Transfer Protocol version 3 (HTTP/3) messages, QUIC can also be employed for various applications. This paper explores the effective utilization of the QUIC protocol for transporting Internet of Things (IoT) messages. Specifically, we propose a proxy-based scheme that leverages the multi-streaming features of QUIC to deliver Constrained Application Protocol (CoAP) messages. In the proposed scheme, multiple CoAP connections between IoT clients and a server are aggregated using client proxy and server proxy. Each CoAP connection is mapped onto a designated QUIC stream. It is noted that this proxy-based approach can be implemented without requiring modifications to existing CoAP applications at the client and server sides. Furthermore, we introduce a compressed mapping scheme from CoAP messages to QUIC streams to enhance performance within the proxy-based model. In testbed experimentation, the proposed QUIC-based CoAP transport scheme is compared with the existing UDP-based and TCP-based CoAP schemes in a variety of IoT network environment. From the experimentation results, we see that the proposed QUIC-based scheme can achieve 80% reduction in round-trip time and 9% increase in fast response rate, compared to the other candidate schemes. We can also see that the CoAP over QUIC scheme with compression provides a 10% performance gain over the case without compression.

Designing and Evaluating a Flexible and Scalable HTTP Honeypot Platform: Architecture, Implementation, and Applications

Digitalization of our economy and society has ushered in notable productivity increases but has also exposed more of our infrastructures and systems to cyberattacks. This trend is exacerbated by the proliferation of poorly designed Internet of Things (IoT) devices and cloud services, which often lack appropriate security measures, either due to bugs or configuration mistakes. In this article, we propose, validate, and critically evaluate a flexible honeypot system based on the Hypertext Transfer Protocol (HTTP) that can mimic any HTTP-based service and application. This covers a large share of IoT devices, including black box devices with no software or firmware available for emulation, as well as cloud- and web-based services. We validate the system by implementing 14 services and by running a 4-month experiment, collecting data from attackers. We propose a novel data enrichment mechanism for identifying internet scanning services, as well as several other data collection and enrichment approaches. Finally, we present some results and visualizations of the data collection experiment, demonstrating possible applications and future use cases, as well as potential drawbacks of such systems.

ClimInonda: A Web Application for Climate Data Management: A Case Study of the Bayech Basin (Southwestern Tunisia)

The Bayech basin is located in southwestern Tunisia, a highly prone region to flooding risks. The Bayech basin is characterized by wadis that adopt a wide, sometimes ill-defined bed, often intersected by low-lying areas, resulting in a semi-endoreismo, greatly disrupting the flow regimes. The Bayech basin drains the slopes of the Nementchas and Tebessa mountains in Algeria, collecting water from the Medjen Bel Abbes plain in its middle course before crossing the Gafsa djebls chain at the Gafsa gap. In this basin, flooding is generally caused by high-intensity storms and is often relatively limited in extent. The slope shape and soil type can promote rapid surface runoff during intense rainfall. Therefore, the purpose of creating a web application, labeled ClimInonda, is to respond to a critical need of readily available information on climatic, environmental, and land use data collected in this basin and its morphometric characteristics using recent methods. The application consists of three essential components: the front-end, back-end, and database. The front-end focuses on the user interface, allowing users to interact with the application’s features. It communicates with the back-end through Hypertext Transfer Protocol requests for data processing and retrieval. The back-end handles the server-side operations, processes requests, and provides responses by retrieving data from the database. The database stores and manages the application’s data, ensuring integrity and efficient access. This modular architecture ensures a user-friendly interface, seamless data processing, and reliable data storage. Visualizations can include different types of data, such as satellite imagery, weather data, and terrain data, and can be displayed using various techniques, such as heat maps, contour maps, and 3D models, by providing easy-to-understand visualizations. ClimInonda is an application developed to expand upon existing platforms by providing a suite of exploratory data analysis features, including the ability to calculate the total precipitation depth recorded for any period, interpolate the annual recurrence interval for rainfall events, etc. A simple evaluation of the platform was performed to assess the usefulness and user satisfaction of the tool by professional users, and positive feedback was received. There is clear evidence that ClimInonda would provide the necessary basis for informed decision making by stakeholders and development agencies in arid and semi-arid Tunisia.

Enhancing Cloud Computing Analysis: A CCE-Based HTTP-GET Log Dataset

The Hypertext Transfer Protocol (HTTP) is a common target of distributed denial-of-service (DDoS) attacks in today’s cloud computing environment (CCE). However, most existing datasets for Intrusion Detection System (IDS) evaluations are not suitable for CCEs. They are either self-generated or are not representative of CCEs, leading to high false alarm rates when used in real CCEs. Moreover, many datasets are inaccessible due to privacy and copyright issues. Therefore, we propose a publicly available benchmark dataset of HTTP-GET flood DDoS attacks on CCEs based on an actual private CCE. The proposed dataset has two advantages: (1) it uses CCE-based features, and (2) it meets the criteria for trustworthy and valid datasets. These advantages enable reliable IDS evaluations, tuning, and comparisons. Furthermore, the dataset includes both internal and external HTTP-GET flood DDoS attacks on CCEs. This dataset can facilitate research in the field and enhance CCE security against DDoS attacks.

Hypertext transfer protocol performance analysis in traditional and software defined networks during Slowloris attack

<p>The extensive use of the internet has resulted in novel technologies and protocol improvisation. Hypertext transfer protocol/1.1 (HTTP/1.1) is widely adapted on the internet. However, HTTP/2 is found to be more efficient over transport control protocol (TCP). The HTTP/2 protocol can withstand the payload overhead when compared to HTTP/1.1 by multiplexing multiple requests. However, both the protocols are highly susceptible to application-level denial of service (DoS) attacks. In this research, a slow-rate DoS attack called Slowloris is detected over Apache2 servers enabled with both versions of HTTP in traditional networks and software defined networks (SDN). Server metrics such as server connection time to the webpage, latency in receiving a response from the server, page load time, response-response gap, and inter-packet arrival time at the server are monitored to analyze attack activity. A Monte Carlo simulation is used to estimate threshold values for server connection time and latency for attack detection. This work is implemented in a lab environment using virtual machines, Ryu controller, zodiac FX OpenFlow switch and Apache2 servers. This study also highlights SDN's security benefits over traditional networks.</p>

A Survey on Packet Capture: Tool Introduction and Security Vulnerability Description

This work involves discovering network security vulnerabilities based on existing packet capture software. By learning the operation principle of packet capture software, we discuss the hidden network security problem among them. There are two basic packet capture software mentioned Wireshark and Sniffer. Analyse the SSL (Secure Socket Layer) protocol and HTTPS (Hypertext Transfer Protocol Secure) protocol to observe where causes a vulnerability in those protocols that allows the thief to obtain information through packet capture software. Finding an attack mode of the thief, we further study and discuss how to reduce the risk of information leakage caused by vulnerability existing. We hope the perspective proposed is not only to avoid workstation chaos caused by packet capture software as far as possible, but also to further encrypt the plaintext data to make it more difficult for packet capture tools to parse the packet.

Aksyaa- Android Application Accounting Information System

Today the development of software technology in the field of accounting is increase rapidly following the trend of using mobile devices and the increasing number of new business actors. Prior to this research, we proposed an Accounting Information System (AIS) that runs on a web platform as the main server. The development of this mobile application also uses the same database as the web version running on a dual-platform, web server and mobile based. The Application Programming Interface (API) was developed on the AIS system with the RESTFul method as an integration medium using the HTTP Hyper-Text Transfer Protocol protocol between web and mobile bases in a case study of a company's transaction data. Furthermore, techniques for using the API have described on the development side of the mobile interface. Communication in HTTP is centered on the request response cycle, where the request is the process of requesting data from the server and the response is the data sent by the server according to the client's request. Based on testing the integration process, the information displayed on the mobile version of the application can work properly. Likewise, testing was carried out by entering transaction data into the system as many as 798 records with 141 account lists provided.
 As a result, the display of the mobile page shows that all features are able to work and display the same output data as AIS on the web version, including features for reports on purchases and sales of goods, cash flow, general ledger, trial balance, and income statement.

Hybrid NarrowBand-internet of things protocol for real time data optimization

The level of dependence on data communication in the modern era is increasing exponentially. The internet of things (IoT) plays a very important role in the advancement of the industrial revolution 4.0 that utilizes data communication systems. IoT deployments require data communication protocols, such as hypertext transfer protocol (HTTP), and message queuing telemetry transport (MQTT) as well as network communication protocols (wireless) to meet the network needs of devices with limited resources. Optimization of data communication in IoT is needed to maintain the quality of sending and receiving data in real time. This research proposes a hybrid NarrowBand-IoT (NB-IoT) protocol designed using NarrowBand communication network technology with optimization of data communication using MQTT and HTTP protocols. In this research, the hybrid NB-IoT protocol has the best packet loss value of 0.010% against the HTTP NB-IoT protocol which has a value of 0.017%, and the MQTT NB-IoT protocol of 0.024%. The hybrid NB-IoT protocol has a latency value of 8.7 seconds compared to the HTTP NB-IoT protocol which has a latency of 10.9 seconds. Meanwhile, the throughput value of the hybrid NB-IoT protocol is 158906.1 byte/s and is better than the MQTT NB-IoT protocol which is only 158898.6 bytes/s.

A real-time hypertext transfer protocol intrusion detection system on web server

Behind the rapid development of the internet in today’s era, various types of crime are also targeting vital players in the internet industry. With many online crime types rampant, an antidote is also needed to suppress internet crime. Therefore, the researcher proposes a solution in the form of a Keris, namely the hypertext transfer protocol (HTTP) intrusion detection system (IDS) that runs on the server where our website is running. Keris works by detecting rampant intrusions that attack servers or websites. When an intrusion is detected, Keris will notify the system admin using the Keris Telegram chatbot or an alternative Keris mobile application with firebase cloud messaging (FCM) technology. The research was conducted by comparing the results of one-way delay (OWD) between Telegram Webhook and FCM with the help of the open web application security project (OWASP) zed attack proxy (ZAP) test tool. From the results of the tests, OWD against directory brute force attacks on Telegram Webhook for 0.72 seconds and on FCM for 0.44 seconds. In this case, FCM is more suitable for real-time notifications if we need a very responsive notification.

Monitoring of submersible pumps using ESP32 microcontroller and photovoltaic panels

In this article, the Moroccan climate is currently undergoing several changes that have negatively affected agricultural activities, especially in the field of irrigation. That's why we relied on internet of things (IoT) technology to overcome these problems. In this article, we present the design and realization of an intelligent irrigation system via a solar submersible pump. We used the ESP32 microcontroller which reads the temperature and humidity values measured by the soil moisture sensor. The communication between the blocks is ensured by the radiofrequency module. We have implemented a Web server to monitor the measured quantities. The graphical representation of the data will be ensured using the ThingSpeak platform which makes it possible to store and collect the data coming from the sensors via the hypertext transfer protocol (HTTP). Our achievement was executed and tested without any problems detected, which shows that our smart irrigation study was very successful.

From Paper Files to Web-Based Application for Data-Driven Monitoring of HIV Programs: Nigeria's Journey to a National Data Repository for Decision-Making and Patient Care.

Timely and reliable data are crucial for clinical, epidemiologic, and program management decision making. Electronic health information systems provide platforms for managing large longitudinal patient records. Nigeria implemented the National Data Repository (NDR) to create a central data warehouse of all people living with human immunodeficiency virus (PLHIV) while providing useful functionalities to aid decision making at different levels of program implementation. We describe the Nigeria NDR and its development process, including its use for surveillance, research, and national HIV program monitoring toward achieving HIV epidemic control. Stakeholder engagement meetings were held in 2013 to gather information on data elements and vocabulary standards for reporting patient-level information, technical infrastructure, human capacity requirements, and information flow. Findings from these meetings guided the development of the NDR. An implementation guide provided common terminologies and data reporting structures for data exchange between the NDR and the electronic medical record (EMR) systems. Data from the EMR were encoded in extensible markup language and sent to the NDR over secure hypertext transfer protocol after going through a series of validation processes. By June 30, 2021, the NDR had up-to-date records of 1,477,064 (94.4%) patients receiving HIV treatment across 1,985 health facilities, of which 1,266,512 (85.7%) patient records had fingerprint template data to support unique patient identification and record linkage to prevent registration of the same patient under different identities. Data from the NDR was used to support HIV program monitoring, case-based surveillance and production of products like the monthly lists of patients who have treatment interruptions and dashboards for monitoring HIV test and start. The NDR enabled the availability of reliable and timely data for surveillance, research, and HIV program monitoring to guide program improvements to accelerate progress toward epidemic control.

Design and implementation of an energy management system based on distributed IoT

A Distributed IoT-based energy management system is planned and executed in this article. We tested the suggested strategy at Duhok and Shekhan, two institutes far apart. Utilizing ESP32 microcontrollers, the suggested system features two main phases (Monitoring and Controlling). There has been carefully monitoring and regulation of all power usage indicators, including Voltage, current, and Frequency. Three primary approaches are taken with each institution: monitoring all metrics for the whole institution, monitoring all metrics for the uncontrolled Lab, and monitoring and regulating all metrics for the controlled Lab. This technology gathers data incessantly, resulting in a large database for energy management. Up to this point, we have collected over two million data rows, and by the end of 2023, we anticipate collecting over ten million. Server-side protocols Message Query Telemetry Transport (MQTT) and Hypertext Transfer Protocol (HTTP) were used to collect the implementation results. According to the implemented findings, one can see that the energy consumption reduction ratios for the Duhok-controlled laboratory were (Weekly = 1.94%, Monthly = 21.65%, and Year-to-Date = 26.38%). There are several critical values recorded during the system's implementation at Shekhan Institute: maximum Voltage (281.2 V), Maximum Frequency (86.3 Hz), and minimum Power-Factor (0.07).