Tese de mestrado integrado. Engenharia Informática e Computação. Faculdade de Engenharia. Universidade do Porto

With the amount of programming languages currently available there is a high risk of confusion anddoubtfulness in aspiring programmers of which to choose. It may be motivating for a beginner tochoose “the perfect language” when starting, to avoid learning multiple languages. This thesiscompares three popular languages on three separate aspects, their syntax, usefulness in differentareas, and performance in terms of speed. Syntax wise the results varied with some aspects beingvery similar across all three languages to completely different in others. In terms of usefulness inspecific areas the languages flexibility allowed them to develop applications in most fields, while beingdominant in different areas. The speed comparison resulted in python being the slowest across alltests, with Java and Javascript (running inside Nodejs) competing for first place.

This thesis explores the use of applied machine learning techniques to augment traditional methods of identifying and preventing web-based attacks. Several factors complicate the identification of web-based attacks. The first is the scale of the web. The amount of data on the web and the heterogeneous nature of this data complicate efforts to distinguish between benign sites and attack sites. Second, an attacker may duplicate their attack at multiple, unexpected locations (multiple URLs spread across different domains) with ease. Third, attacks can be hosted nearly anonymously; there is little cost or risk associated with hosting or publishing a web-based attack. In combination, these factors lead one to conclude that, currently, the webs threat landscape is unfavorably tilted towards the attacker. To counter these advantages this thesis describes our novel solutions to web se- curity problems. The common theme running through our work is the demonstration that we can detect attacks missed by other security tools as well as detecting attacks sooner than other security responses. To illustrate this, we describe the development of BayeShield, a browser-based tool capable of successfully identifying phishing at- tacks in the wild. Progressing from specific to a more general approach, we next focus on the detection of obfuscated scripts (one of the most commonly used tools in web-based attacks). Finally, we present TopSpector, a system we've designed to forecast malicious activity prior to it's occurrence. We demonstrate that by mining Top-Level DNS data we can produce a candidate set of domains that contains up to 65% of domains that will be blacklisted. Furthermore, on average TopSpector flags malicious domains 32 days before they are blacklisted, allowing the security community ample time to investigate these domains before they host malicious activity.

<p>Den här rapporten beskriver arbetet med att skapa en dynamisk designdriven webbsida åt Landegrens Legomek AB, ett mindre företag inom tillverkningsindustrin. Företaget hade sedan tidigare en statisk webbsida och ville förnya denna i takt med den ökade vikten av att synas på Internet. Design och layout är anpassad till företages profil och kunder för att ge ett seriös och formellt intryck. Vi har valt att skapa den nya webbsidan med databasservern MySQL och skriptspråket PHP. Även JavaScript är en del i implementeringen. Till den nya webbsidan har vi också skapat en administrativ tjänst som är webb-baserad, denna ger möjlighet att enkelt uppdatera innehållet på webbplatsen. Arbetet har inte endast omfattat den tekniska delen utan även berört andra delar som foto och copywriting. </p><p>Företaget har valt att ha sin hemsida hos ett webbhotell, i det här fallet Telia. Fördelen är främst säkerhet och underhåll av systemet. Nackdelen är de begränsningar som webbhotellet har, bland annat ftp-stödet i PHP som fullständigt saknas vilket har lett till att vi fick implementera andra lösningar. </p> / <p>This report describes how to create a dynamic and design driven web page for Landegrens Legomek AB, a minor company in the manufacturing business. The company had already recognized the need to update its former web page to a more modern design to keep up with the current trends on the Internet. Design and layout were adapted to the company’s profile and its customers, this to give the right impression of the company. The page was created with the database server MySQL together with the script language PHP. JavaScript is also a part of the implementation. We have also created an web interface for updating and managing the web page in an easy way. The work also included other parts beside the technical implementation, such as photography and copywriting. </p><p>The company has chosen to place its website in a web hotel, for this case Telia. The advantage with this solution is the security as well as the managing of the system. The disadvantage is the limits of the web hotel, e.g. the missing ftp support in PHP, which has forced us to choose other solutions.</p>

<p>Through the entry of web 2.0 the technologies behind web development has changed dramatically. Asynchronous JavaScript and XML (AJAX) is the umbrella term for different techniques that make it possible to build rich and interactive user interfaces in today’s web browsers. Service Oriented Architecture (SOA) describes how common services can be bundled and published so they can be consumed by different systems.</p><p>The company SYSteam Evolution AB, which has requested this project, wanted a web application that shows a graphical activity chart in order to easier view ongoing projects. The goal for this project is to develop a demo platform that shows how AJAX and SOA can be used to create flexible and reusable applications. To reach the goals, many different frameworks and technologies need to cooperate and work together.</p><p>This report will describe the different technologies that have been used and explain the different steps in the development job.</p><p>The result of the work has lead to a demo platform that uses many different technologies to show a graphical activity chart. The job requestor and the author are very pleased with the result of the work.</p> / <p>Genom intåget av web 2.0 har teknologierna bakom webbutveckling ändrats drastiskt. Asynchronous JavaScript and XML (AJAX) är samlingsnamnet på ett antal tekniker som gör det möjligt att bygga rika och interaktiva applikationer i dagens webbläsare. Tjänsteorienterad arkitektur, ”Service Oriented Architecture” (SOA) talar om hur gemensamma tjänster paketeras och publiceras så att de kan konsumeras av olika system.</p><p>Uppdragsgivaren till detta examensarbete är företaget SYSteam Evolution AB. Företaget vill ha en webbapplikation som visar en grafisk aktivitetskarta för att enklare kunna överblicka pågående projekt. Målet med arbetet är att ta fram en demoplattform som visar hur AJAX och SOA kan användas för att skapa flexibla och återanvändbara applikationer. För att lyckas med uppdraget måste olika ramverk och teknologier kombineras och fungera tillsammans.</p><p>Denna rapport kommer att förklara de olika teknikerna som använts, samt även förklara de olika stegen i utvecklingsarbetet.</p><p>Resultatet av arbetet har utfallit i en demoplattform som använder många olika teknologier för att visa grafisk aktivitetskarta. Uppdragsgivare och uppdragstagare är mycket nöjda med resultatet av arbetet.</p>

This thesis presents the design, creation, and testing of a web-based tool for generating interactive web-based problem set assignments. In prior research (Stetka, 2001) it was shown that students enjoyed interactive problems. In this research, multiple programming languages were used to provide a web-based, fully interactive, problem solving environment for the students.Sample problem sets were written by the author and a few chemical engineering students. These web pages were then used as a basis to test the effectiveness of the web-based interactive problem sets for two engineering courses. Initial findings are presented illustrating the students results along with results of student feedback surveys. Additionally, an analysis of the feedback from the two levels of users, students and instructors are reported and some suggestions for further development are given.

JavaScript has permeated into every aspect of the web experience in today's world, making it highly crucial to process it as quickly as possible. With the proliferation of HTML5 and its associated mobile web applications, the world is slowly but surely moving into an age where majority of the webpages will involve complex computations and manipulations within the JavaScript engine. Recent techniques like Just-in-Time (JIT) compilation have become commonplace in popular browsers like Chrome and Firefox, and there is an ongoing effort to further optimize them in the context of mobile systems. In order to fully take advantage of JavaScript-heavy webpages, it is important to first characterize the interaction of these webpages (both existing pages and modern HTML5 pages) with the different components of the JavaScript engine, viz. the interpreter, the method JIT, the optimizing compiler and the garbage collector. In this thesis, the aforementioned characterization work was leveraged to identify the limits of JavaScript optimizations. Subsequently, a particular optimization, i.e. Register Allocation heuristics was explored in detail on different types of JavaScript programs. This was primarily because the majority of the time (an average of 52.81%) spent in the optimizing compiler is for the register allocation stage alone. By varying the heuristics for register assignment, interval priority and spill selection, a clear idea is obtained about how it impacts certain types of programs more than others. This thesis also gives a preliminary insight into JavaScript applications and benchmarks, showing that these applications tend to be register-intensive, with large live intervals and sparse uses, and sensitive to array and string manipulations. A statically-selected optimal register allocation scheme outperforms the default register allocation scheme resulting in 9.1% performance improvement and 11.23% reduction in execution time on a representative mobile system. / text

The Arizona Oil and Gas Commission in conjunction with the Arizona Geological Survey have collected a large amount of data for the oil and gas wells in the State of Arizona. The data covers over 1,000 wells that were drilled from the 1940s to present. This data includes copies of permits, location information, scanned copies of well logs and digitized versions of the well logs in .las file format. These files have been difficult to distribute efficiently because of an unfriendly web user interface. The purpose of this project is to give the Arizona Geological Survey a way to distribute the oil and gas well data through an effective web application. The web application will leverage existing web services at the Arizona Geological Survey. To create this map I used the Esri JavaScript API. In this application the users can select multiple wells by clicking and dragging over the well heads they want. This will then display the metadata in a grid along with hyperlinks to the available files for those wells. This data will be primarily used by companies involved with carbon sequestration or others seeking information for geological exploration.

Rich Internet Applications (RIAs) are a new generation of web applications that break away from the concepts on which traditional web applications are based. RIAs are more interactive and responsive than traditional web applications since RIAs allow client-side scripting (such as JavaScript) and asynchronous communication with the server (using AJAX). Although these are improvements in terms of user-friendliness, there is a big impact on our ability to automatically explore (crawl) these applications. Traditional crawling algorithms are not sufficient for crawling RIAs. We should be able to crawl RIAs in order to be able to search their content and build their models for various purposes such as reverse-engineering, detecting security vulnerabilities, assessing usability, and applying model-based testing techniques. One important problem is designing efficient crawling strategies for RIAs. It seems possible to design crawling strategies more efficient than the standard crawling strategies, the Breadth-First and the Depth-First. In this thesis, we explore the possibilities of designing efficient crawling strategies. We use a general approach that we called Model-based Crawling and present two crawling strategies that are designed using this approach. We show by experimental results that model-based crawling strategies are more efficient than the standard strategies.

JavaScript is used on the web together with HTML and CSS, in many cases using frameworks for JavaScript such as jQuery and Backbone.js. This project is comparing the speed and memory allocation of the programming language JavaScript and its two most used frameworks as well as the language on its own. Since JavaScript is not very fast and it has some missing features or features that differ from browser to browser and frameworks solve this problem but at the cost of speed and memory allocation, the aim is to find out how well JavaScript and the two frameworks jQuery and Backbone.js are doing this on Google Chrome Canary. The results varied (mostly) between the implementations and show that the to-do application is a good enough example to use when comparing the results of heap allocation and CPU time of methods. The results where compared with their mean values and using ANOVA. JavaScript was the fastest, but it might not be enough for a developer to completely stop using frameworks. With JavaScript a developer can choose to create a custom framework, or use an existing one based on the results of this project.