234 research outputs found

    ImageSubXSS: an image substitute technique to prevent Cross-Site Scripting attacks

    Get PDF
    Cross-Site Scripting (XSS) is one of serious web application attack. Web applications are involved in every activity of human life. JavaScript plays a major role in these web applications. In XSS attacks hacker inject malicious JavaScript into a trusted web application, execution of that malicious script may steal sensitive information from the user. Previous solutions to prevent XSS attacks require a lot of effort to integrate into existing web applications, some solutions works at client-side and some solutions works based on filter list which needs to be updated regularly. In this paper, we propose an Image Substitute technique (ImageSubXSS) to prevent Cross-Site Scripting attacks which works at the server-side. The proposed solution is implemented and evaluated on a number of XSS attacks. With a single line, developers can integrate ImageSubXSS into their applications and the proposed solution is able to prevent XSS attacks effectively

    Towards semantic mathematical editing *

    Get PDF
    Currently, there exists a big gap between formal computer-understandable mathematics and informal mathematics, as written by humans. When looking more closely, there are two important subproblems: making documents written by humans at least syntactically understandable for computers, and the formal verification of the actual mathematics in the documents. In this paper, we will focus on the first problem. For the time being, most authors use T E X, L A T E X, or one of its graphical frontends in order to write documents with many mathematical formulas. In the past decade, we have developed an alternative wysiwyg system GNU T E X MACS , which is not based on T E X. All these systems are only adequate for visual typesetting and do not carry much semantics. Stated in the MathML jargon, they concentrate on presentation markup, not content markup. In recent versions of T E X MACS , we have started to integrate facilities for the semantic editing of formulas. In this paper, we will describe these facilities and expand on the underlying motivation and design choices. To go short, we continue to allow the user to enter formulas in a visually oriented way. In the background, we continuously run a packrat parser, which attempts to convert (potentially incomplete) formulas into content markup. As long as all formulas remain sufficiently correct, the editor can then both operate on a visual or semantic level, independently of the low-level representation being used. An important related topic, which will also be discussed at length, is the automatic correction of syntax errors in existing mathematical documents. In particular, the syntax corrector that we have implemented enables us to upgrade existing documents and test our parsing grammar on various books and papers from different sources. We will provide a detailed analysis of these experiments

    ABScribe: Rapid Exploration of Multiple Writing Variations in Human-AI Co-Writing Tasks using Large Language Models

    Full text link
    Exploring alternative ideas by rewriting text is integral to the writing process. State-of-the-art large language models (LLMs) can simplify writing variation generation. However, current interfaces pose challenges for simultaneous consideration of multiple variations: creating new versions without overwriting text can be difficult, and pasting them sequentially can clutter documents, increasing workload and disrupting writers' flow. To tackle this, we present ABScribe, an interface that supports rapid, yet visually structured, exploration of writing variations in human-AI co-writing tasks. With ABScribe, users can swiftly produce multiple variations using LLM prompts, which are auto-converted into reusable buttons. Variations are stored adjacently within text segments for rapid in-place comparisons using mouse-over interactions on a context toolbar. Our user study with 12 writers shows that ABScribe significantly reduces task workload (d = 1.20, p < 0.001), enhances user perceptions of the revision process (d = 2.41, p < 0.001) compared to a popular baseline workflow, and provides insights into how writers explore variations using LLMs

    openHTML: Assessing Barriers and Designing Tools for Learning Web Development

    Get PDF
    In this dissertation, I argue that society increasingly recognizes the value of widespread computational literacy and that one of the most common ways that people are exposed to creative computing today is through web development. Prior research has investigated how beginners learn a wide range of programming languages in a variety of domains, from computer science majors taking introductory programming courses to end-user developers maintaining spreadsheets. Yet, surprisingly little is known about the experiences people have learning web development. What barriers do beginners face when authoring their first web pages? What mistakes do they commonly make when writing HTML and CSS? What are the computational skills and concepts with which they engage? How can tools and practices be designed to support these activities? Through a series of studies, interleaved with the iterative design of an experimental web editor for novices called openHTML, this dissertation aims to fill this gap in the literature and address these questions. In drawing connections between my findings and the existing computing education literature, my goal is to attain a deeper understanding of the skills and concepts at play when beginners learn web development, and to broaden notions about how people can develop computational literacy. This dissertation makes the following contributions: * An account of the barriers students face in an introductory web development course, contextualizing difficulties with learning to read and write code within the broad activity of web development. * The implementation of a web editor called openHTML, which has been designed to support learners by mitigating non-coding aspects of web development so that they can attend to learning HTML and CSS. * A detailed taxonomy of errors people make when writing HTML and CSS to construct simple web pages, derived from an intention-based analysis. * A fine-grained analysis of HTML and CSS syntax errors students make in the initial weeks of a web development course, how they resolve them, and the role validation plays in these outcomes. * Evidence for basic web development as a rich activity involving numerous skills and concepts that can support foundational computational literacy.Ph.D., Information Studies -- Drexel University, 201

    Enterprise 2.0: Collaboration and Knowledge Emergence as a Business Web Strategy Enabler

    Get PDF
    The Web is becoming in many respects a powerful tool for supporting business strategy as companies are quickly becoming more and more reliant on new Web-based technologies to capitalize on new business opportunities. However, this introduces additional managerial problems and risks that have to be taken into consideration, if they are not to be left behind. In this chapter we explore the Web’s present and future potential in relation to information sharing, knowledge management, innovation management, and the automation of cross-organizational business transactions. The suggested approach will provide entrepreneurs, managers, and IT leaders with guidance on how to adopt the latest Web 2.0-based technologies in their everyday work with a view to setting up a business Web strategy. Specifically, Enterprise 2.0 is presented as a key enabler for businesses to expand their ecosystems and partnerships. Enterprise 2.0 also acts as a catalyst for improving innovation processes and knowledge work

    Adaptive Layout for Interactive Documents

    Get PDF
    This thesis presents a novel approach to create automated layouts for rich illustrative material that could adapt according to the screen size and contextual requirements. The adaption not only considers global layout but also deals with the content and layout adaptation of individual illustrations in the layout. An unique solution has been developed that integrates constraint-based and force-directed techniques to create adaptive grid-based and non-grid layouts. A set of annotation layouts are developed which adapt the annotated illustrations to match the contextual requirements over time

    Two heads are better than one: Australian tobacco control experts' and mental health change champions' consensus on addressing the problem of high smoking rates among people with mental illness

    Get PDF
    Open Access. Journal compilation Copyright AHHA 2016Abstract Objective. The aims of the present study were to explore the beliefs of Australian experts in tobacco control and change champions working in mental health and tobacco cessation, and to identify measures for addressing the problem of high smoking rates for people with mental illness. Methods. Qualitative interviews were undertaken to explore participants' views, and the Delphi technique was used to achieve consensus on ways in which the problem would be best addressed. Results. This consensus centred on the need for leadership within the mental health system. The problem was reconceptualised from being solely the responsibility of the mental health sector into an issue that requires the combined resources of a partnership and shared leadership between government and non-government services, public health leaders, policy makers and people with mental illness and their families. Conclusions. Collaboration would raise the priority of the issue, reduce the debilitating effect of stigma and discrimination within the mental health sector and would place smoking reduction firmly on the political and public agenda. A recovery-orientated focus would increase the skill base and be inclusive of workers, families and carers of people with mental illness who face smoking issues on a daily basis. Reconceptualising this as an issue that would benefit from cooperation and partnerships would disrupt the notion that the problem is solely the responsibility of the mental health sector

    For everything: Tim Berners-Lee, winner of the 2016 Turing award for having invented… the Web

    Get PDF
    National audienceWhat could be a common point among getting information about a concert, transferring money from one’s bank account, publishing a genomics database, communicating with one’s children on the other side of the planet, and accessing information about one’s car ? The fact that they can all be done through the Web. It is indeed difficult to think of a human activity that hasn’t been impacted by the Web, and as I write this article in April 2017, the current estimate is that the Web has more than 3 billion direct users throughout the world. In the same month, the British computer scientist Sir Timothy John Berners-Lee was awarded the 2016 Turing prize for having invented the World Wide Web, the first Web browser, and the protocols and algorithms that enabled the passage to the scale of the Web. Sir Tim, as he is called, is a professor at MIT and at Oxford University. This prize is just the latest of a long list of distinctions that he has received. But the Turing prize is considered the Nobel prize of computer science, and this award has been widely expected for his invention of the Web, an invention which has transformed our society since its creation in 1989. This is thus a good occasion to revisit, in this article, the history of his invention, and at the same time try to highlight many of the influences and currents that interacted to bring it about. This will also be an occasion, for us, to deconstruct certain notions and to reintegrate others, in an effort to tie together the numerous influences that weaved the web

    Layout, design and new technology: a documentation and analysis of the impact of new technologies on the design and layout of The Star.

    Get PDF
    ABSTRACT A documentation and analysis of the impact of new technologies on the design and layout of The Star, particularly desktop publishing hardware and software, digital photography and the Internet. A broad outline of the production and editorial technology employed prior to the introduction of fourth wave in 1995 is provided to contextualise the research. A systematic visual analysis of selected pages from the 1920s to present as well as interviews with key members of staff from The Star, who have experienced the evolution of the paper first-hand, provide the primary source of information for the study. To prevent the paper from becoming too anecdotal, the organisational approach to the study of the media and theory of visual culture provide the theoretical framework. The research concludes that new technology itself has not drastically affected the design and layout of The Star over the past decade, but rather stimulated change within the organisational environment, which gradually did affected the visual appearance of the paper
    • …
    corecore