Web Vulnerability Study of Online Pharmacy Sites

Consumers are increasingly using online pharmacies, but these sites may not provide an adequate level of security with the consumers’ personal data. There is a gap in this research addressing the problems of security vulnerabilities in this industry. The objective is to identify the level of web application security vulnerabilities in online pharmacies and the common types of flaws, thus expanding on prior studies. Technical, managerial and legal recommendations on how to mitigate security issues are presented. The proposed four-step method first consists of choosing an online testing tool. The next steps involve choosing a list of 60 online pharmacy sites to test, and then running the software analysis to compile a list of flaws. Finally, an in-depth analysis is performed on the types of web application vulnerabilities. The majority of sites had serious vulnerabilities, with the majority of flaws being cross-site scripting or old versions of software that have not been updated. A method is proposed for the securing of web pharmacy sites, using a multi-phased approach of technical and managerial techniques together with a thorough understanding of national legal requirements for securing systems

Digitometric Services for Open Archives Environments

We describe “digitometric” services and tools that add value to open-access eprint archives using the Open Archives Initiative (OAI) Protocol for Metadata Harvesting. Celestial is an OAI cache and gateway tool. Citebase Search enhances OAI-harvested metadata with linked references harvested from the full-text to provide a web service for citation navigation and research impact analysis. Digitometrics builds on data harvested using OAI to provide advanced visualisation and hypertext navigation for the research community. Together these services provide a modular, distributed architecture for building a “semantic web” for the research literature

Web Enabling a Bibliographic Database of Indian Biomedical Journals: IndMED

A Dissertation for the partial fulfillment of M.S. (Software Systems) Degree from BIRLA INSTITUTE OF TECHNOLOGY AND SCIENCE, PILANI (RAJASTHAN); 2001.The project aims to provide access through web to a bibliographic database called IndMED. The database is a product of Indian Medlars Centre (IMC, a division of National Informatics Centre) and has data relating to references to articles published in India’s learned biomedical journals. The scope of this project is limited to providing a web-based user interface for database searching and developing the CGI for Web-Database Connectivity. The project was planned to ensure its scheduled completion. A survey of relevant research and technologies pertaining to Web Interface, Web-Database Connectivity and DBMS have been made and briefly described in the dissertation. Interview, Questionnaire and Observation of similar systems were utilized to determine the requirements of the proposed system. Specification of the proposed system was then based on the requirements. After the requirements and the specification of the proposed system was finalized an Analysis Model consisting of Data Flow Diagrams (DFDs) and Entity-Relationship Diagram (ERD) was developed. Design of the system was then developed for the sub-systems – Web-Interface, Web-database Connectivity and DBMS - so the requirements and specifications are met. The Web-Interface mainly consists of html pages i.e. Simple Search Form, Minimal Search Form and Advanced Search Form and the dynamically generated by CGI the Search Result Screen. The Web-Database Connectivity sub-system consists of PERL Scripts dealing with Processing of data submitted from html forms, Variables assignment, Error Trap, Formulation of query string which can passed on to the DBMS sub-system and Html Patching of the output of the database in response to the query. The implementation of the system includes: the screens along with html code written for various search forms and generated by the CGI for the Web-Interface, Perl Scripts (IMSS.PL; IMAS.PL; IMRS.PL) for the CGI and the Database Structure, Fields included in Inverted File Index of the Database and Display Formats for the DBMS sub-system. The system thus developed was tested to meet the tests prescribed by the system specification. The final product has been integrated into the Home-page of IMC at the URL http://indmed.nic.in . A user help document for searching is also included. The system developed has scope for future research and refinement in regard to relevancy ranking, federated searching, links to full text articles and other material relevant to the user query available on the Internet along with the results from IndMED

Generic Web Server in Embedded Control Systems

The goal for this master thesis was to investigate the possibility of using an existing web server and modify it so it can be used in ABB controllers. The work has resulted in two different versions of a web server. The basic functionality is the same for both versions. The web servers are able to present a number of controller-related information. For example: hardware, which control programs that are executing in the controller, information about the firmware, and also system information like heap memory usage. It can also be used for changing different parameters. The two versions use different techniques for presenting the information. They are also implemented in different ways. The first version has a more user-friendly interface but requires more memory, 71 kb. The second version requires less memory, 48 kb, but does not have the same user-friendly interface

A web-based teleoperative mobile robotic system : Master of Engineering in Information Engineering at Massey University, Albany, Auckland, New Zealand

With the rapid development of internet technology, it becomes real that human beings can access, modify and control a remote hardware device via internet connection. Such remote operations can replace the human to be present at a dangerous or unreachable place or can make as many as possible users to access the hardware in different places at a low cost. The thesis research was aimed at developing a web based mobile robot control framework for education purpose. It should be composed of a mobile robot. Http server, dynamic user interface and video server. With it users can view and control the real robot via a normal web browser and can choose to run either simulation or the real robot. This is done by setting up operational parameters via a friendly GUI (graphic user interface). Users also can upload and compile their own C code to control the robot and get back the running results. The main objectives of this thesis research are hardware upgrading for Nomadic Super Scout mobile robot and web based php programming. For the first objective, the onboard PC was replaced by a laptop that is remotely placed and connected to the robot control system via Bluetooth wireless. The Nserver for robot simulation was set up in the Linux operating environment. For the second objective, the software programming was focused on building a web control platform which should be user friendly. An Apache server was developed where PHP program was used for the user interface. The main advantage of using PHP is that it does not need to install or download any software or script to get access to the remote robot via a normal web browser on any operation like windows or Linux. The web-based mobile robot system was tested using two different cases. One case demonstrated how the user specifies a set of motion parameters of the robot that is programmed to perform a wall-following behaviour. The other demonstrated how the user uploads a collision avoidance program to run the robot that is placed among obstacles. Both case studies were performed in real environments and the results proved the success of the developed web-based robotic system

Programming Internet Telephony Services

Internet telephony enables a wealth of new service possibilities. Traditional telephony services, such as call forwarding, transfer, and 800 number services, can be enhanced by interaction with email, web, and directory services. Additional media types, like video and interactive chat, can be added as well. One of the challenges in providing these services is how to effectively program them. Programming these services requires decisions regarding where the code executes, how it interfaces with the protocols that deliver the services, and what level of control the code has. In this paper, we consider this problem in detail. We develop requirements for programming Internet telephony services, and we show that at least two solutions are required --- one geared for service creation by trusted users (such as administrators), and one geared for service creation by untrusted users (such as consumers). We review existing techniques for service programmability in the Internet and in the telephone network,and extract the best components of both. The result is a Common Gateway Interface (CGI) that allows trusted users to develop services, and the Call Processing Language (CPL) that allows untrusted users to develop services

An Experimental Digital Library Platform - A Demonstrator Prototype for the DigLib Project at SICS

Within the framework of the Digital Library project at SICS, this thesis describes the implementation of a demonstrator prototype of a digital library (DigLib); an experimental platform integrating several functions in one common interface. It includes descriptions of the structure and formats of the digital library collection, the tailoring of the search engine Dienst, the construction of a keyword extraction tool, and the design and development of the interface. The platform was realised through sicsDAIS, an agent interaction and presentation system, and is to be used for testing and evaluating various tools for information seeking. The platform supports various user interaction strategies by providing: search in bibliographic records (Dienst); an index of keywords (the Keyword Extraction Function (KEF)); and browsing through the hierarchical structure of the collection. KEF was developed for this thesis work, and extracts and presents keywords from Swedish documents. Although based on a comparatively simple algorithm, KEF contributes by supplying a long-felt want in the area of Information Retrieval. Evaluations of the tasks and the interface still remain to be done, but the digital library is very much up and running. By implementing the platform through sicsDAIS, DigLib can deploy additional tools and search engines without interfering with already running modules. If wanted, agents providing other services than SICS can supply, can be plugged in

Wired LAN Door Access Controller With Web-based Interface

This project‟s main objective is to develop prototype of a door access system which is able to communicate through Ethernet so that it allows the administrator to access and modify board settings through a remote PC connected to that network. The project uses Microchip development board as a platform and the firmware was modified and customized to fit the purpose of the project