Server-side Components Research Articles

Full Stack Web Development

Full-stack development encompasses the comprehensive design and implementation of both client-side and server-side components of web applications. Utilizing HTML for structuring content, CSS for styling and layout, and JavaScript for dynamic interactivity, developers create engaging and responsive user interfaces. On the server side, PHP serves as a robust scripting language for handling back-end logic, including data processing and application flow. Coupled with MongoDB, a NoSQL database, developers manage data storage and retrieval efficiently, leveraging its flexibility for complex data structures. This synergy of technologies empowers developers to build scalable and high-performance applications that meet modern web standards. Index Terms—Web Development, Html, CSS, JavaScript, React, Php MongoDB.

Functional Programming in Financial Markets (Experience Report)

We present a case-study of using functional programming in the real world at a very large scale. At Standard Chartered Bank, Haskell is used in a core software library supporting the entire Markets division -- a business line with 3 billion USD operating income in 2023. Typed functional programming is used across the entire tech stack, including foundational APIs and CLIs for deal valuation and risk analysis, server-side components for long-running batches or sub-second RESTful services, and end-user GUIs. Thousands of users across Markets interact with software built using functional programming, and over one hundred write functional code. In this experience report we focus on how we leverage functional programming to orchestrate type-driven large-scale pricing workflows. The same API can be used to price one trade locally, or millions of trades across thousands of cloud nodes. Different parts of the computation can be run and inspected individually, and recomputing one part triggers recalculation of the dependent parts only. We build upon decades of research and experience in the functional programming community, relying on concepts such as monads, lenses, datatype generics, and closure serialisation. We conclude that the use of functional programming is one of the main drivers of the success of our project, and we see no significant downsides from it.

Software Quality Assurance as a Service: Encompassing the quality assessment of software and services

This paper introduces the Software Quality Assurance as a Service (SQAaaS) concept and it describes an open-source implementation of a comprehensive platform that supports the automated assessment of specific quality metrics for software and services, defined as a set of baseline requirements. The platform is openly accessible, focuses on research software and open science, and promotes best practices by awarding standards-based digital badges to software and services. It provides an easy-to-use web-based graphical user interface which facilitates the interaction with server-side components in charge of automatically creating CI/CD (Continuous Integration/Continuous Delivery) pipelines for automated testing of the baseline criteria. The service is in production and has performed over 2800 assessments, awarding more than 125 digital badges across several scientific disciplines.

Development of the Remote Heart Health Monitoring System

Introduction. Cardiovascular disease (CVD) is the most common cause of death worldwide. This problem is especially relevant for Ukraine, where CVD accounts for more than 68% of all deaths. At the same time, in terms of population mortality rate (15.3 ‰), Ukraine is ahead of all European countries. Electrocardiography is the most useful diagnostic tools. Nowadays a lot of portable ECG devices are available on the market, which makes ECG accessible for each patient directly from home. Remote monitoring of patients with CVD is a very necessary solution, which can save patient’s lives, doctor’s time and hospital’s money. Existing remote monitoring solution doesn’t provide enough cyber security and scalability, especially in the context of tight regulation of medical software in the European Union. The purpose of the article is to develop a cloud-based software solution for remote monitoring of patients with CVD using a portable ECG device. We propose the full architecture, which include server-side components (databases, computational resources, gateways, queus, load balancers and others) and client-side components (mobile app for the Android and iOS and web browser app). Results. We proposed, designed, implemented and tested the full end-to-end Cloud-based solution for remote monitoring of patients with CVD. Security of the system is ensured by dividing the single database to three separate databases (database with patient’s data, database with ECG data and mapping database), hiding all server components under the virtual private network, and transferring data via secure HTTPS connection. Conclusions. Developed system successfully solve their goals. It is being used now in the Finnish company Cardiolyse. Keywords: telemedicine, client-server, medical devices, electrocardiography, cybersecurity, heart rate variability

MDWA: a model-driven Web augmentation approach—coping with client- and server-side support

Web augmentation is a set of techniques allowing users to define and execute software which is dependent on the presentation layer of a concrete Web page. Through the use of specialized Web augmentation artifacts, the end users may satisfy several kinds of requirements that were not considered by the analysts, developers and stakeholders that built the application. Although some augmentation approaches are contemplating a server-side counterpart (to support aspects such as collaboration or cross-browser session management), the augmentation artifacts are usually purely client-side. The server-side support increases the capabilities of the augmentations, since it may allow sharing information among users and devices. So far, this support is often defined and developed in an ad hoc way. Although it is clear that server-side support brings new possibilities, it is also true that developing and deploying server-side Web applications is a challenging task that end users hardly may handle. This work presents a novel approach for designing Web augmentation applications based on client-side and server-side components. We propose a model-driven approach that raises the abstraction level of both, client- and server-side developments. We provide a set of tools for designing the composition of the core application with new features on the back-end and the augmentation of pages in the front-end. The usability and the value of the produced augmentations have been evaluated through two experiments involving 30 people in total.

Detecting Cache-Based Side Channel Attacks in IaaS using Enhanced Algorithm

The Connectivity of the information among people throughout the world is made possible through computers and smart devices connected over the internet. The economic related transactions also happen over the network which needs a secured transaction medium. Therefore, lots of intrusion detection and prevention systems are implemented in order to reduce the impact of the attack. But every year the impact of attack over the shared VMs is being dramatically increased. The economic transactions occur with the help of web applications and they are divided into browser-side and server-side components. One of the major services provided by the cloud environment is Infrastructure-asa-Service in which the virtual machines are used to provide the shared services to the multiple users. Though the VMs are secured by implementing the various security algorithms, one of the attacks, Side-channel attack, uses the leaked information acquired from the implementation of hardware component. Cache-based side channel attack is the serious attack, which tries to steal the sensitive information like credit card details, password, medical related details, etc., by establishing various algorithms like PRIME+PROBE, FLUSH+RELOAD, FLUSH+FLUSH, etc.,. The VM does speculative execution for improving the CPU performance, thus resulting in a scenario which allows the user to access the sensitive data on the cache line. So in this paper the environment is set up with 5 various scenarios with the combinations consisting of attack, no-attack, Full load, Average load and no-load. The Hardware Performance Counters (HPC) is used along with Intel CMT to monitor and distinguish the attacker VM, thus increasing the detection accuracy and reducing the system overhead.

OMeta: an ontology-based, data-driven metadata tracking system

BackgroundThe development of high-throughput sequencing and analysis has accelerated multi-omics studies of thousands of microbial species, metagenomes, and infectious disease pathogens. Omics studies are enabling genotype-phenotype association studies which identify genetic determinants of pathogen virulence and drug resistance, as well as phylogenetic studies designed to track the origin and spread of disease outbreaks. These omics studies are complex and often employ multiple assay technologies including genomics, metagenomics, transcriptomics, proteomics, and metabolomics. To maximize the impact of omics studies, it is essential that data be accompanied by detailed contextual metadata (e.g., specimen, spatial-temporal, phenotypic characteristics) in clear, organized, and consistent formats. Over the years, many metadata standards developed by various metadata standards initiatives have arisen; the Genomic Standards Consortium’s minimal information standards (MIxS), the GSCID/BRC Project and Sample Application Standard. Some tools exist for tracking metadata, but they do not provide event based capabilities to configure, collect, validate, and distribute metadata. To address this gap in the scientific community, an event based data-driven application, OMeta, was created that allows users to quickly configure, collect, validate, distribute, and integrate metadata.ResultsA data-driven web application, OMeta, has been developed for use by researchers consisting of a browser-based interface, a command-line interface (CLI), and server-side components that provide an intuitive platform for configuring, capturing, viewing, and sharing metadata. Project and sample metadata can be set based on existing standards or based on projects goals. Recorded information includes details on the biological samples, procedures, protocols, and experimental technologies, etc. This information can be organized based on events, including sample collection, sample quantification, sequencing assay, and analysis results. OMeta enables configuration in various presentation types: checkbox, file, drop-box, ontology, and fields can be configured to use the National Center for Biomedical Ontology (NCBO), a biomedical ontology server. Furthermore, OMeta maintains a complete audit trail of all changes made by users and allows metadata export in comma separated value (CSV) format for convenient deposition of data into public databases.ConclusionsWe present, OMeta, a web-based software application that is built on data-driven principles for configuring and customizing data standards, capturing, curating, and sharing metadata.

Privacy Pass: Bypassing Internet Challenges Anonymously

AbstractThe growth of content delivery networks (CDNs) has engendered centralized control over the serving of internet content. An unwanted by-product of this growth is that CDNs are fast becoming global arbiters for which content requests are allowed and which are blocked in an attempt to stanch malicious traffic. In particular, in some cases honest users-especially those behind shared IP addresses, including users of privacy tools such as Tor, VPNs, and I2P - can be unfairly targeted by attempted ‘catch-all solutions’ that assume these users are acting maliciously. In this work, we provide a solution to prevent users from being exposed to a disproportionate amount of internet challenges such as CAPTCHAs. These challenges are at the very least annoying and at their worst - when coupled with bad implementations - can completely block access from web resources. We detail a 1-RTT cryptographic protocol (based on an implementation of an oblivious pseudorandom function) that allows users to receive a significant amount of anonymous tokens for each challenge solution that they provide. These tokens can be exchanged in the future for access without having to interact with a challenge. We have implemented our initial solution in a browser extension named “Privacy Pass”, and have worked with the Cloudflare CDN to deploy compatible server-side components in their infrastructure. However, we envisage that our solution could be used more generally for many applications where anonymous and honest access can be granted (e.g., anonymous wiki editing). The anonymity guarantee of our solution makes it immediately appropriate for use by users of Tor/VPNs/ I2P. We also publish figures from Cloudflare indicating the potential impact from the global release of Privacy Pass.

A Javascript GIS Platform Based on Invocable Geospatial Web Services

Semantic Web technologies are being increasingly adopted by the geospatial community during last decade through the utilization of open standards for expressing and serving geospatial data. This was also dramatically assisted by the ever-increasing access and usage of geographic mapping and location-based services via smart devices in people’s daily activities. In this paper, we explore the developmental framework of a pure JavaScript client-side GIS platform exclusively based on invocable geospatial Web services. We also extend JavaScript utilization on the server side by deploying a node server acting as a bridge between open source WPS libraries and popular geoprocessing engines. The vehicle for such an exploration is a cross platform Web browser capable of interpreting JavaScript commands to achieve interaction with geospatial providers. The tool is a generic Web interface providing capabilities of acquiring spatial datasets, composing layouts and applying geospatial processes. In an ideal form the end-user will have to identify those services, which satisfy a geo-related need and put them in the appropriate row. The final output may act as a potential collector of freely available geospatial web services. Its server-side components may exploit geospatial processing suppliers composing that way a light-weight fully transparent open Web GIS platform.

In Container Integration Testing Frame Work

In Container Integration testing framework is a combination of four open source technologies. Arquillian, Test NG, JaCoCo, and Maven. The aim of this work is to deals with automating the code using JaCoCo. JaCoCo is a Java framework calculates code coverage. It find’s the amount of code coverage in each lines of module that has been executed or missed and finally it will be deploy to wild fly server in the user matrix project source container.The main idea behind developing in this automation testing framework is able to test server side components developed using Java. The tests will be such that they will run in the container/application server (e.g. Wild Fly) where the server side component (e.g. test1) is deployed and because of that the tests will be able to use all the real resources (e.g. EJB etc.) provided by the container instead of mocking them.[1]Web Service Description Language (WSDL) specification, we first automatically generate necessary Java code to implement a client. We then leverage automated unit test generation tools for Java to generate unit tests, and execute the generated unit tests, which in turn invoke the service under test. The next important objective is to calculate amount of code covered by the test cases.

A glimpse of Hopjs

Hop.js is a multitier programming environment for JavaScript. It allows a single JavaScript program to describe the client-side and the server-side components of a web application. Its runtime environment ensures consistent executions of the application on the server and on the client. This paper overviews the Hop.js design. It shows the JavaScript extensions that makes it possible to conceive web applications globally. It presents how Hop.js interacts with the outside world. It also briefly presents the Hop.js implementation. It presents the Hop.js web server implementation, the handling of server-side parallelism, and the JavaScript and HTML compilers.

Peer-to-Peer Content Sharing Based on Social Identities and Relationships

Mass-market users exploit remote storage solutions and centralized online social network (OSN) services to share user-generated content. Although these solutions are widely adopted, they introduce several issues related to user content/metadata migration on server-side components managed by third-party providers. The authors propose a middleware solution to support social-driven peer-to-peer content sharing while preserving content ownership. A prototype demonstrates the proposal's feasibility in terms of both performance results and easy integration with off-the-shelf devices using unmodified HTTP/UPnP protocols.

A Review on Java Servlets vs. Java Applets

Servlet technology is one of the leading web development technologies in the recent years due to its safety, portability, efficiency and elegance in design. They are platform and protocol-independent server side components, which run as part of a network service and dynamically extend Javaenabled servers. An applet on the other hand, is a Java program that can be embedded in an HTML page and executed by a Java enabled browser. It can be used for sharing resource data on enterprise intranets and for web page enhancements. Servlets used along with applets can be used for dynamic web content generation. The paper tries to analyze Java Servlets and Java Applets, their capabilities and limitations.

A GCM Solution for Leveraging Server-side JMS Functionality to Android-based Trading Application

The paper presents our solution for a message oriented communication mechanism, employing Google Cloud Messaging (GCM) on the client-side, and Java Message Service (JMS) on the server-side, in order to leverage JMS functionality to Android-based trading application. Our ongoing research has been focused upon conceiving a way to expose the trading services offered by our academic trading system ASETS to a mobile trading application based on Android platform. ASETS trading platform is a distributed SOA implementation, with an original API based on JMS. In order to design and implement an Android based client, able to intercommunicate with the server-side components of ASETS, in a manner consistent with publisher/subscriber JMS communication model, there was particularly necessary to have object imbedded messages, produced by various ASETS services, pushed to the client application. While point-to-point communication model could be resolved on the client-side by employing synchronous HTTP socket connections over TCP/IP, the asynchronously generated messages from the server-side had to reach the client application in a push manner.Keywords: Trading Technologies, JMS, GCM, Android Bridge Servlet, MOM(ProQuest: ... denotes formula omitted.)1 IntroductionMessaging and message oriented mid- dlewares (MOM) have revolutionized, over the past decade, the software solutions that can be delivered through service oriented ar- chitectures. Java Message Service (JMS) in- terface, in particular, has proved to offer the most flexible and opened manner for design- ing complex distributed software systems, ranging from social intercommunication ap- plications, to enterprise resource planning, internet banking, trading, and generic data dissemination [1],In tandem with the messaging solutions em- ployed on the enterprise server-side, Android powered mobile devices have become in- creasingly popular, and the diversity and the complexity of applications that the platform supports, open novel perspectives upon the way distributed computing and information technology impact our daily life and busi- nesses.Our research project intends to expand the reach of ASETS trading platform toward the users of mobile devices powered by Android OS.ASETS trading platform features a distribut- ed architecture, service orientated, being im- plemented entirely in Java, and having an original application programming interface (API) designed and built upon JMS [2], [3], Since the JMS libraries jms.jar and imq.jar, required to access the messaging interface that facilitates the communication with the message provider (OpenMQ), are not cur- rently available for the Android platform, we needed to explore a different approach that would provide a seamless communication mechanism between a trading client, residing on a mobile Android device, and the ASETS trading platform.ASETS platform offers a sophisticated API for supporting rich Java applet trading cli- ents, and provides services such as:* Order Management Server (OMS);* Portfolio Management Server (PMS);* Exchange Simulation Engine (ESE), which contains the order matching algo- rithm;* Pseudo Random Order Generator (PROG), to create liquidity within the simulation market;* Delayed Data Feed (DDF), for feeding the trading simulation platform with real world pricing data, captured from Bu- charest Stock Exchange (BSE).Such a JMS based API could not be exposed out of the box to an Android based trading GUI. There have been researches and devel- opments prior Google Cloud Messaging for Android introduction, for interconnecting ap- plications running on mobile devices with JMS based systems [4], [5],In the context of targeting to design and build a trading client application for Android OS, Google Cloud Messaging (GCM) service of- fers a messaging mechanism with the follow- ing main characteristics [6]:* allows third party application servers to send messages to Android-based appli- cations;* offers the ability to deliver messages to an Android application on an Android device, even if the application is not running - as long as the Android based application is set up with the proper broadcast receiver and permissions, the system will wake up the application via Intent broadcast when a message arrives;* the messaging service does not provide any built-in user interface or other han- dling for message data; GCM simply passes raw message data received from the producer straight to the Android ap- plication which, subsequently, has full control of how to handle it. …

XperimentR: painless annotation of a biological experiment for the laboratory scientist

BackgroundToday’s biological experiments often involve the collaboration of multidisciplinary researchers utilising several high throughput ‘omics platforms. There is a requirement for the details of the experiment to be adequately described using standardised ontologies to enable data preservation, the analysis of the data and to facilitate the export of the data to public repositories. However there are a bewildering number of ontologies, controlled vocabularies, and minimum standards available for use to describe experiments. There is a need for user-friendly software tools to aid laboratory scientists in capturing the experimental information.ResultsA web application called XperimentR has been developed for use by laboratory scientists, consisting of a browser-based interface and server-side components which provide an intuitive platform for capturing and sharing experimental metadata. Information recorded includes details about the biological samples, procedures, protocols, and experimental technologies, all of which can be easily annotated using the appropriate ontologies. Files and raw data can be imported and associated with the biological samples via the interface, from either users’ computers, or commonly used open-source data repositories. Experiments can be shared with other users, and experiments can be exported in the standard ISA-Tab format for deposition in public databases. XperimentR is freely available and can be installed natively or by using a provided pre-configured Virtual Machine. A guest system is also available for trial purposes.ConclusionWe present a web based software application to aid the laboratory scientist to capture, describe and share details about their experiments.

Virtual Appliances for geospatial data management and processing in the Integrated Land Management System (ILMS)

Virtualization is increasingly taking on a key role in various system architectures which follow new platform concepts like Software as a Service (SaaS). This trend addresses more instant and short-term environments and comes with new methods and strategies for the distribution of mainly complex application stacks not only in large IT infrastructures. The paper presents how a so called Virtual Appliance can be set up in order to operate in virtual server environments using hypervisor software like Oracle Virtual-Box. Using the example of two server-side components within the Integrated Land Management System (ILMS), it will be shown that the use of state-of-the-art methods, standardized tools and interfaces on servers enables different aspects of environmental system management, analysis and planning.

A comparison of open source geospatial technologies for web mapping

The past decade has witnessed a steady growth of open source software usage in industry and academia, leading to a complex ecosystem of projects. Web and subsequently geographical information systems have become prominent technologies, widely adopted in diverse domains. Within this context, we developed an open source web platform for interoperable GIServices. In order to implement this architecture, 14 projects were selected and analysed, including the client-side libraries and the server-side components. Although other surveys have been conducted in this area, little feedback has been formally obtained from the users and developers concerning their opinion of these tools. A questionnaire was designed to obtain responses from the relevant online communities about a given set of characteristics. This article describes the technologies and reports the results of the survey, providing first-hand information about open source web and geospatial tools.

Why web sites are lost (and how they're sometimes found)

Introduction The web is in constant flux---new pages and Web sites appear daily, and old pages and sites disappear almost as quickly. One study estimates that about two percent of the Web disappears from its current location every week. 2 Although Web users have become accustomed to seeing the infamous "404 Not Found" page, they are more taken aback when they own, are responsible for, or have come to rely on the missing material. Web archivists like those at the Internet Archive have responded to the Web's transience by archiving as much of it as possible, hoping to preserve snapshots of the Web for future generations. 3 Search engines have also responded by offering pages that have been cached as a result of the indexing process. These straightforward archiving and caching efforts have been used by the public in unintended ways: individuals and organizations have used them to restore their own lost Web sites. 5 To automate recovering lost Web sites, we created a Web-repository crawler named Warrick that restores lost resources from the holdings of four Web repositories: Internet Archive, Google, Live Search (now Bing), and Yahoo; 6 we refer to these Web repositories collectively as the Web Infrastructure (WI). We call this after-loss recovery Lazy Preservation (see the sidebar for more information). Warrick can only recover what is accessible to the WI, namely the crawlable Web. There are numerous resources that cannot be found in the WI: password protected content, pages without incoming links or protected by the robots exclusion protocol, and content hidden behind Flash or JavaScript interfaces. Most importantly, WI crawlers do not have access to the server-side components (for example, scripts, configuration files, databases, among others) of a Web site. Nevertheless, upon Warrick's public release in 2005, we received many inquiries about its usage and collected a handful of anecdotes about the Web sites individuals and organizations had lost and wanted to recover. Were these Web sites representative? What types of Web resources were people losing? Given the inherent limitations of the WI, were Warrick users recovering enough material to reconstruct the site? Were these losses changing their behavior, or was the availability of cached material reinforcing a "lazy" approach to preservation? We constructed an online survey to explore these questions and conducted a set of in-depth interviews with survey respondents to clarify the results. Potential participants were solicited by us or the Internet Archive, or they found a link to the survey from the Warrick Web site. A total of 52 participants completed the survey regarding 55 lost Web sites, and seven of the participants allowed us to follow-up with telephone or instant messaging interviews. Participants were divided into two groups: 1. Personal loss: Those who had lost (and tried to recover) a Web site that they had personally created, maintained or owned (34 participants who lost 37 Web sites). 2. Third party: Those who had recovered someone else's lost Web site (18 participants who recovered 18 Web sites).

Ontology querying and its software component for design support in supply chains

Effective support of the product design stage in Supply Chain Management (SCM) is important for raising the competitive power of a company. Existing technology for design support of the supply chain has limitations in managing semantic data and handling logical operations, which agents will use for their intelligent and autonomous activities. In this paper, we suggest an ontology querying mechanism and a software component for it, based on the supply chain network, for the agent's intelligent activities. This querying engine can service several operations, including reasoning and logical functions, together with the ontology of the specified domain of product attributes and the ontology's instance data. We defined operators to provide the necessary ontology query according to the operation category in the domain of design support in the SCM, which will be provided as several interfaces in the form of server side components and web service. Finally, we explain the meaning of our querying system, comparing it with an earlier version and other querying systems.

An introduction to lucent's service enhancement layer

The 3rd Generation Partnership Project (3GPP) IP Multimedia Subsystem (IMS) standards provide a core telecommunications network architecture that promises high flexibility in the creation of new and blended services. This stems primarily from two aspects: access independence and the highly flexible, extensible Session Initiation Protocol (SIP). Lucent Technologies' Service Enhancement Layer provides a suite of standards-compliant tools and technologies that can work in and above the IMS core, allowing service providers to realize the full potential of IMS in a cost-effective manner. These enablers are, at a fundamental level, carrier-grade middleware that can reside on the most appropriate hardware platform. The three most important components of this layer are the Lucent Service Broker™ application, which enables blending of IMS services without having to modify the application servers; the Unified Subscriber Data Server, which provides a comprehensive approach to managing subscriber profile data regardless of where it is sourced; and the Lucent Vortex™ policy management infrastructure, which provides a high-speed rules engine suitable for personalization and flexible network optimizations. This layer, which also includes other components such as the presence server, can grow to include additional components. The Active PhoneBook application, which includes both server-side and client-side components, is useful as a hub for providing blended services to end users.