This project starts off with giving an overview of what sensitive data is, encryption algorithms and other required knowledge for this thesis project.This is because of the aim of this thesis project, that is to find the best way to encrypt data passed through a URL with a focus on protecting sensitive data in web applications. Data sent through the URL of a web application could be sensitive data, and exposure of sensitive data can be devastating for governments, companies, and individuals. The tools and methods that are used for this thesis project are described. An overview is given of the requirements of the web application that was to be created, the development of it, implementation and comparison of encryption algorithms. After that, the results of the encryption algorithms are compared and displayed together with a prototype of the web application and its encryption. The results are then analyzed in two different sections: security of the encryptions and performance tests. With the results given we conclude which one of the encryption algorithms is the most suitable for our web application, and otherwise when encrypting data through the URL of a web application. The results show that AES has a great advantage over 3DES both in security and performance when encrypting sensitive data passed through a URL.Those results are then used to build a secure web application to help and assist a broker during an open showing. The web application is then used together with information from interested buyers so it can be easy for the broker to contact them after the showing.

Idag används fortfarande papper och penna oftast för att genomföra tentamen. Digitaliseringen i vårtsamhälle har öppnat upp för många nya möjligheter, och akademin kan bli bättre på att utnyttja dessa. Digital tentamen är något som kan förenkla både genomförande och administration. Det finns både tekniska möjligheter och svårigheter kring digital tentamen. esTracer är ett webbaserat e-learningsystem som är utvecklat av Entergate AB. Entergate önskar nukunna erbjuda högskolor och universitet en möjlighet för digital salstentamen. För att göra detta skallen applikation för Android och iOS utvecklas som kan användas på surfplattor för att genomföra salstentamen. Applikationen skall integreras med esTracer genom ett Web API. Skapande och administration av tentor, frågor och deltagare skall ske med befintlig funktionalitet i esTracer. Genomförandet av tentamen skall kunna göras i applikationen för Android och iOS på ett säkert sätt, och användarna skall kunna använda sina egna enheter. Resultat skall sedan kunna ses i esTracer av administratör. Rapporten handlar om utvecklingen av applikationen, samt vidareutveckling av esTracer Web API och integreringen mellan applikationen och esTracer. I rapporten redogörs för relevant bakgrund och teorier, de metoder som valdes för att lösa uppgiften, samt resultatet och analysen av detta. Resultatet är en applikation som kan användas på surfplattor för både Android och iOS. Applikationen kan användas för att genomföra tentor på ett säkert sätt och den har integrerats med esTracer genom vidareutveckling av ett Web API. Projektet visar således en teknisk lösning för digital salstentamen. / Today paper and pen is most often used to conduct an exam. The digitalisation in our society has opened up for many new opportunities, and universities can be better at utilizing these. Digital examination is something that can simplify both for the students that are taking the exam, and also for the people that manages administration. There are both technical opportunities and difficulties regarding digital examination. esTracer is a web-based e-learning system that has been developed by Entergate AB. Entergate now wishes to offer colleges and universities an opportunity for digital examination. To do this, an application shall be developed for Android and iOS that can be used on tablets to conduct exams. The application shall be integrated with esTracer through a Web API. Creation and administration of exams, questions and participants shall be done with existing functionality in esTracer. The exam shall be possible to do in the application for Android and iOS in a safe way, and the users should be able to use their own devices. The results from an exam shall be possible to view in esTracer by an administrator. This report is about the development of the application, and also the further development of esTracer Web API, and the integration between the application and esTracer. The report describes relevant background and theories, which methods that was chosen to complete the task, and also the result and the analysis of this. The result is an application that can be used on tablets with Android or iOS. The application can be used to conduct exams in a safe way, and it has been integrated with esTracer through further development of a Web API. The project shows a technical solution for digital examination.

The purpose of this thesis is to create a methodology which helps ASP.NET developers to test their web applications for the presence of the most common vulnerabilities. The theoretical part is focused on the ways of application testing and briefly describes ten of the most common web application vulnerabilities, so-called OWASP Top Ten 2013. The web application testing methodology is included in the practical part. A process of the application testing is the key part of the methodology. The designed methodology is used for the selected web application testing.

Den här rapporten handlar om att ta fram en arkitektur för en publiceringskedja som använder sig av ett headless CMS. Arkitekturen ska bygga på moderna teknologier och metoder som uppfyller de krav som startups ställer idag på sina webbapplikationer: den ska vara snabb, skalbar och säker. Den ska också vara tillräckligt generell för att kunna användas till fler aolika webbplatser. / This report is about creating an architecture för a publication chain that is utilizing a headless CMS. The architecture should be based on modern technologies and methods that fulfills the demands that startups have on their web applications: it should be fast, scalable and secure. It should also be generic enough to be used for different web sites.

The purpose of this project is to create a design and subsequently the web application for a database management which uses the system catalogue of the Microsoft SQL database system. The introduction deals with the principle of the relational databases and includes the list of the most widespread database systems. The next chapter of the theoretical part describes the syntax of the SQL query language, and the next chapter deals with the properties of the system catalogue which were utilized. Finally, the last of the theoretical chapters is centred on the .NET platform and its technologies – particularly the ASP.NET and the ADO.NET technologies. The former is used for creating dynamical web pages, and the latter is an object library used for the data access. The practical part of this work comprises the web application scheme on which is the final web application based. The most emphasized issues in this part are the security and the supposed program design of the web application. The final part of the work contains a description of the finished web application, especially the configuration and the functions which the application provides to a user. And finally, the whole project is briefly evaluated in the conclusion.

The Master’s thesis deals with design, realization and implementation of web application for ordering lunch. Theoretical basis for creating web applications, methods used for the proposal and technologies used in the realization and implementation are described in the first part. The second part of the thesis presents an analysis of the current state. The last part contains the actual design, realization and implementation of the web application for ordering lunches.

Presented thesis aims to develop web-based application for AVG Technologies. The application is supposed to bring in every suspicious information from a file, which has been gained from customer's registers, and make customer support more effective and efficient. Designing the application was tightly binded with obtaining an overview of computer threats and attacks. The thesis describes and explains malware and its basic types such as virus, worm, trojan horse, etc. History and features of ASP.NET, PHP, Virus Total web service and Internet Information Service are described as well. The result of the thesis, the application itself, is deployed in real enviroment and ready to be updated with new information sources.

A good health condition is important to maintain. It is a root cause to many other positive aspects in life. Productivity in a working industry can be improved if employees have a good health condition. Because of this, some companies are interested in keeping their employees as healthy as possible. The IT-consulting company CGI uses an in-house developed application, called CGIMoving, to offer exercise campaigns for its employees to encourage a healthy lifestyle. CGIMoving is a web system for logging physical exercise activities, where employees can voluntarily participate and log their workout activity and earn rewards. The CGI members who are responsible for the project have made a backlog with features that they wish to be implemented. The goal of the project was to improve CGIMoving by implementing a set of chosen backlog features. Product improvement was done according to an agile Scrum methodology. Tools and techniques used were the ASP.NET web-development framework and the Model-View-Controller design pattern with Visual Studio as the development environment. This report documents the development of six improvements to the CGIMoving system. These improvements are documented in the implemented order: (1) create predefined activities for a campaign, implementation of reminders for (2) inactivity and (3) unclaimed rewards, (4) edit user registered activities, (5) edit information about users and (6) create events. The improvements resulted in an upgraded version of the product. / <p>Digitalt presentation via Zoom</p>

This paper explores the development and implementation of an in-browser map with the purpose of visualizing large sets of geographic data. The map is implemented into a pre-existing search engine of geographic data. Two mapping frameworks are compared in terms of performance, ease-of-use, and functionality. These frameworks are Leaflet and Google Maps. This paper also explores which issues may arise when implementing these mapping frameworks within a pre-existing ASP.NET project. These aspects were evaluated through performance tests, documentation reading, and compiling experiences gained through implementing the map within the search engine. The experiments show that both Leaflet and Google Maps are viable frameworks to use when developing in-browser maps, but also that they have their pros and cons. Google Maps sports a generally higher level of performance, and a larger set of paid available services. Leaflet is a free, open-source alternative with a large plugin repository, but relies on third-party services for features such as geocoding.

APIs can have different architectures and standards, one of which is REST. REST stands for representational state transfer and is a commonly used architecture when implementing and creating APIs for the web. Choosing a web framework for a REST API implementation is not as trivial as one might think; there are many metrics to consider, one of which is performance. In this study, we compared the most used back-end web frameworks in 2021, ASP.NET Core, Express.js, and Flask, to see which performs best in throughput, response time, and computer resource usage. Finding the best-performing framework will help future developers choose which framework to use in terms of performance. Selecting a good framework from the beginning is essential to prevent the need to change framework in the future. To benchmark the different APIs, we did an experiment where we used JMeter, an open-source software for testing the performance of websites and APIs. By varying the number of virtual users and throughput, we were able to find the limit of each framework and their respective resource usage during different loads. We have concluded that ASP.NET Core had the best performance when it comes to response time and throughput. Furthermore, ASP.NET Core had the most efficient memory utilization throughout the entire experiment, and during loads higher than 4500 throughputs per second, it was also the most CPU efficient. Below 4500 throughput per second, Express.js was the most CPU-efficient framework but still had more memory usage than ASP.NET Core. According to our metrics, the performance of Flask was far behind Express.js and ASP.NET Core and should therefore not be considered a high-performance framework.