403,005 research outputs found

    Static Taint Analysis via Type-checking in TypeScript

    Get PDF
    With the widespread use of web applications across the globe, and the ad- vancements in web technologies in recent years, these applications have grown more ubiquitous and sophisticated than ever before. Modern web applications face the constant threat of numerous web security risks given their presence on the internet and the massive influx of data from external sources. This paper presents a novel method for analyzing taint through type-checking and applies it to web applications in the context of preventing online security threats. The taint analysis technique is implemented in TypeScript using its built-in type-checking features, and then integrated into a web application developed using the React web framework. This web application is then validated against different types of injection attacks. The results of the validation show that taint analysis is an effective means to prevent pervasive online attacks, such as eval injection, cross-site scripting (XSS), and SQL injection in web applications. Considering that our proposed taint analysis technique can be implemented using existing type-checking features of TypeScript, it can be quickly adopted by developers to add taint analysis into their applications with no performance overhead. With the large number of web applications developed in TypeScript, the widespread adoption of our technique can help prevent cyberattacks and protect the online community from potential harm. By combining taint analysis with other secure web practices, such as input validation, application developers can strengthen the overall security of web applications

    WEB BASED PRODUCT E-COMMERCE RECOMMENDER SYSTEM USING A KNOWLEDGE CASE BASED ALGORITHM

    Get PDF
    Understanding customer needs is crucial to gaining and retaining customers in a web store, on online e-commerce applications. In order to ensure a versatile system for e-commerce, the pattern generated by customers when they click icons to select some particular products on an e-commerce website, based on their choice, ought to be studied, recorded and built-up into a database. Data mining techniques can then be applied in mining and analyzing information for this database in order to help wholesaler and retailers, improve sales, marketing strategies and product advertisement. In this paper, a conceptualized a framework for determining customers’ product choice and factors involved in choosing online commodities is proposed. The system is tailored for phone products

    Methods for Evaluating Respondent Attrition in Web-Based Surveys

    Get PDF
    Background: Electronic surveys are convenient, cost effective, and increasingly popular tools for collecting information. While the online platform allows researchers to recruit and enroll more participants, there is an increased risk of participant dropout in Web-based research. Often, these dropout trends are simply reported, adjusted for, or ignored altogether. Objective: To propose a conceptual framework that analyzes respondent attrition and demonstrates the utility of these methods with existing survey data. Methods: First, we suggest visualization of attrition trends using bar charts and survival curves. Next, we propose a generalized linear mixed model (GLMM) to detect or confirm significant attrition points. Finally, we suggest applications of existing statistical methods to investigate the effect of internal survey characteristics and patient characteristics on dropout. In order to apply this framework, we conducted a case study; a seventeen-item Informed Decision-Making (IDM) module addressing how and why patients make decisions about cancer screening. Results: Using the framework, we were able to find significant attrition points at Questions 4, 6, 7, and 9, and were also able to identify participant responses and characteristics associated with dropout at these points and overall. Conclusions: When these methods were applied to survey data, significant attrition trends were revealed, both visually and empirically, that can inspire researchers to investigate the factors associated with survey dropout, address whether survey completion is associated with health outcomes, and compare attrition patterns between groups. The framework can be used to extract information beyond simple responses, can be useful during survey development, and can help determine the external validity of survey results

    A Review on Multilevel wrApper Verification System with maintenance Model Enhancement

    Full text link
    The online data sources have prompted to an expanded utilization of wrappers for extract data from Web sources. We present a unique idea, to explain the expressed problems and formally demonstrate its accuracy. Conventional research techniques have concentrated on snappy and effective era of wrappers; the advancement of devices for wrapper support has gotten less consideration and no arrangement to self upkeep. This empowers us to learn wrappers in a totally unsupervised way from consequently and inexpensively preparing information, e.g., utilizing word references and standard expressions. This turns into a research issue since Web sources frequently change progressively in ways that keep the wrappers from removing data accurately. We will probably help programming engineers develop wrapping operators that translate questions written in abnormal state organized language. Work introduces a proficient idea for auxiliary data about information from positive cases alone. Framework utilizes this data for wrapper upkeep applications: utilizing wrapper check and enlistment component planning a support show. The wrapper verification framework identifies when a wrapper is not extricating right information, for the most part on the grounds that the Web source has changed its organization. Sites are constantly advancing, upgrading and basic changes happen with no cautioning, which for the most part results in wrappers working mistakenly. Tragically, wrappers may flop in the undertaking of separating information from a Web page, if its structure changes, once in a while even marginally, in this way requiring the abusing of new procedures to be naturally held to adjust the wrapper to the new structure of the page, in the event of disappointment

    Designing web-based adaptive learning environment : distils as an example

    Get PDF
    In this study, two components are developed for the Web-based adaptive learning: an online Intelligent Tutoring Tool (ITT) and an Adaptive Lecture Guidance (ALG). The ITT provides students timely problem-solving help in a dynamic Web environment. The ALG prevents students from being disoriented when a new domain is presented using Web technology. A prototype, Distributed Intelligent Learning System (DISTILS), has been implemented in a general chemistry laboratory domain. In DISTILS, students interact with the ITT through a Web browser. When a student selects a problem, the problem is formatted and displayed in the user interface for the student to solve. On the other side, the ITT begins to solve the problem simultaneously. The student can then request help from the ITT through the interface. The ITT interacts with the student, verifying those solution activities in an ascending order of the student knowledge status. In DISTILS, a Web page is associated with a HTML Learning Model (HLM) to describe its knowledge content. The ALG extracts the HLM, collects the status of students\u27 knowledge in HLM, and presents a knowledge map illustrating where the student is, how much proficiency he/she already has and where he/she is encouraged to explore. In this way, the ALG helps students to navigate the Web-based course material, protecting them from being disoriented and giving them guidance in need. Both the ITT and ALG components are developed under a generic Common Object Request Broker Architecture (CORBA)-driven framework. Under this framework, knowledge objects model domain expertise, a student modeler assesses student\u27s knowledge progress, an instruction engine includes two tutoring components, such as the ITT and the ALG, and the CORBA-compatible middleware serves as the communication infrastructure. The advantage of such a framework is that it promotes the development of modular and reusable intelligent educational objects. In DISTILS, a collection of knowledge objects were developed under CORBA to model general chemistry laboratory domain expertise. It was shown that these objects can be easily assembled in a plug-and-play manner to produce several exercises for different laboratory experiments. Given the platform independence of CORBA, tutoring objects developed under such a framework have the potential to be easily reused in different applications. Preliminary results showed that DISTILS effectively enhanced learning in Web environment. Three high school students and twenty-two NJIT students participated in the evaluation of DISTILS. In the final quiz of seven questions, the average correct answers of the students who studied in a Web environment with DISTILS (DISTILS Group) was 5.3, and the average correct answers of those who studied in the same Web environment without DISTILS (NoDISTILS Group) was 2.75. A t-test conducted on this small sample showed that the DISTILS group students significantly scored better than the NoDISTILS group students

    An Integrated Analysis Strategy and Mobile Agent Framework for Recommendation System in EC over Internet

    Get PDF
    [[abstract]]Internet has become a popular medium for information exchange and knowledge delivery. Many people get the useful information that they wanted from the Internet and network. Several traditional social activities have changed and evaluated to Internet, like distance learning and tele-medical system. Traditional buying and selling activities also follow the trend. Almost all things will be sold in the Internet and user will buy the product from the Internet too. However with the advent of the World Wide Web, online merchant must know what users wanted or user’s interests and let users to buy something in their site. So recommendation process became an important strategy for the merchants. In this paper we analyze users’ behavior and their interests, and then we recommend something to these users. The analysis mechanism is based on the correlations among customer, product items, and product features. In this paper we propose an algorithm to classify users into groups and recommend product items based on these classified groups. And the system will help merchants to make suitable business decision and push personal information to customers. In the other hand we also propose a generic mobile agent framework for electronic commerce applications and collaborative agent computing architecture for the recommendation system based on the framework.[[notice]]補正完

    PENGEMBANGAN WEB SERVICE APLIKASI UJIAN ESSAY ONLINE PADA PRODI PENDIDIKAN TEKNIK INFORMATIKA DAN KOMPUTER UNIVERSITAS NEGERI JAKARTA

    Get PDF
    Pelaksanaan ujian pada beberapa mata kuliah di Pendidikan Teknik Informatika dan Komputer (PTIK) Universitas Negeri Jakarta dilaksanakan secara online. adapun instrumen pelaksanaannya menggunakan aplikasi dari pihak ketiga yang bervariasi dan sesuai dengan pilihan tiap dosen. Banyaknya variasi dari aplikasi yang digunakan memungkinkan data pelaksanaan ujian ataupun data hasil ujian pada setiap ujian tidak terintegrasi secara maksimal. Oleh karena itu dibutuhkan sebuah solusi berupa aplikasi ujian essay yang dikembangkan sesuai dengan kebutuhan ujian pada Prodi PTIK dan dapat diintegrasikan dengan sistem lain seperti Sistem Informasi Akademik (SIAKAD). Tujuan dari penelitian ini adalah untuk menghasilkan web service yang dapat digunakan untuk mengembangkan aplikasi ujian essay yang memiliki sifat adaptif terhadap perubahan kebutuhan di masa mendatang. Pengembangan dilakukan dengan menggunakan konsep RESTful API, metode Spiral, framework ExpressJS dan menghasilkan 229 endpoint. Pengujian web service dilakukan terhadap seluruh endpoint dengan menggunakan metode unit testing dan bantuan tools Postman. Berdasarkan hasil pengujian dapat disimpulkan bahwa seluruh endpoint telah berfungsi dengan baik dan layak digunakan sebagai sisi back-end pada aplikasi ujian essay online. * Examinations for several courses at the Informatics and Computer Engineering Education (PTIK) State University of Jakarta are carried out online. as for the implementation instrument using applications from third parties that vary and are according to the choice of each lecturer. The many variations of the applications used, allow the test implementation data or test result data for each exam not to be optimally integrated. Therefore, a solution is needed in the form of an essay exam application that is developed according to the needs of exams occured in PTIK Study Program and can be integrated with other systems such as the Academic Information System (SIAKAD). The purpose of this research is to produce a web service that can be used to develop essay exam applications that are adaptive to changing needs in the future. The development is carried out using the RESTful API concept, the Spiral method, the ExpressJS framework and produces 229 endpoints. Web service testing is carried out on all endpoints using the unit testing method and the help of Postman tools. Based on the test results, it can be concluded that all endpoints have been functioning properly and are suitable for use as the back-end side of the online essay exam application

    Analyse the risks of ad hoc programming in web development and develop a metrics of appropriate tools

    Get PDF
    Today the World Wide Web has become one of the most powerful tools for business promotion and social networking. As the use of websites and web applications to promote the businesses has increased drastically over the past few years, the complexity of managing them and protecting them from security threats has become a complicated task for the organizations. On the other hand, most of the web projects are at risk and less secure due to lack of quality programming. Although there are plenty of frameworks available for free in the market to improve the quality of programming, most of the programmers use ad hoc programming rather than using frameworks which could save their time and repeated work. The research identifies the different frameworks in PHP and .NET programming, and evaluates their benefits and drawbacks in the web application development. The research aims to help web development companies to minimize the risks involved in developing large web projects and develop a metrics of appropriate frameworks to be used for the specific projects. The study examined the way web applications were developed in different software companies and the advantages of using frameworks while developing them. The findings of the results show that it was not only the experience of developers that motivated them to use frameworks. The major conclusions and recommendations drawn from this research were that the main reasons behind web developers avoiding frameworks are that they are difficult to learn and implement. Also, the motivations factors for programmers towards using frameworks were self-efficiency, habit of learning new things and awareness about the benefits of frameworks. The research recommended companies to use appropriate frameworks to protect their projects against security threats like SQL injection and RSS injectio

    Developing a Framework for Creating mHealth Surveys

    Get PDF
    Various issues in the design of surveys for mobile health (mHealth) research projects yet exist. As mHealth solutions become more popular, new issues are brought into consideration. Researchers need to collect some critical information from participants in these mHealth studies. These mHealth studies require a specialized framework to create surveys, track progress and analyze user data. In these procedures, mHealth’s needs differ from other studies. Therefore, there has to be a new framework that satisfies needs of mHealth research studies. Although there are studies for creating efficient, robust and user-friendly surveys, there is no solution or study, which is specialized in mHealth area and solves specific problems of mHealth research studies. mHealth research studies sometimes require real-time access to user data. Reward systems may play a key role in their study. Most importantly, storing user information securely plays a key role in these studies. There is no such solution or study, which covers all these areas. In this thesis, we present guidelines for developing a framework for creating mHealth surveys. In doing this, we hope that we propose a solution for problems of creating and using of surveys in mHealth studies
    • …
    corecore