Made available in DSpace on 2015-04-11T14:02:46Z (GMT). No. of bitstreams: 1 thiago.pdf: 2481710 bytes, checksum: b6ca68e9c8339ffcfd02dd0cdae775ae (MD5) Previous issue date: 2013-04-05 / The evolution in web applications development favored the emergence of dynamic pages. This development was made possible through the creation of new technologies like script functions and web browser advanced features that provided the insertion of new features and creation of interactive services, such as Internet banking, social networks, e-commerce, blogs and forums. The use of these new resources and features has gradually improved the interactivity and usability of web applications. Moreover, the inappropriate use of these features resulted in the emergence of several attacks, including, Cross-Site Scripting (XSS) that is highlighted at the top of lists and reports of the greatest threats to web applications in recent years. This works demonstrates the feasibility of using a methodology that is capable to detect XSS attacks by analyzing the information contained in applications. A prototype of the methodology, called ETSSDetector, was developed and compared with similar tools. The results show that by analyzing the input fields, it is possible to generate more effective tests, decreasing the amount of requests made in the application. Furthermore, the ability to fill the fields with only valid information ensures the submission of forms on pages, increasing the detection rate of XSS attacks. / A evolução no desenvolvimento para aplicações web favoreceu o surgimento de páginas dinâmicas. Tal evolução foi possível através da criação de novas tecnologias como funções de script e recursos avançados em navegadores web que proporcionaram a inserção de novas funcionalidades e criação de serviços interativos, tais como Internet banking, redes sociais, e-commerce, blogs e fóruns. A utilização desses recursos e funcionalidades tem melhorado gradativamente a interatividade e usabilidade das aplicações web. Por outro lado, o uso inadequado dessas funcionalidades acarretou no surgimento de diversos ataques, entre eles, o Cross-Site Scripting (XSS). Este ataque tem recebido muito destaque nos últimos anos, por estar no topo de listas e relatórios das maiores ameaças para aplicações web nos últimos anos. Este trabalho demonstra a viabilidade de uso de uma metodologia capaz de detectar ataques XSS em aplicações web através da análise de informações contidas nas aplicações. Um protótipo da metodologia, denominado de ETSSDetector, foi desenvolvido e comparado com outras ferramentas similares. Os resultados obtidos mostram que, através da análise dos campos de entrada, é possível a geração de testes mais efetivos, diminuindo a quantidade de requisições realizadas na aplicação. Além disso, a habilidade de preenchimento dos campos da aplicação apenas com informações válidas garante a submissão dos formulários das páginas, aumentando a taxa de detecção de ataques XSS.

Visual scripting languages are used as alternatives to text programming to make coding easier. Visual programming languages provide a structure and a guidance that does not exist in text programming, which should make them easier to code with. Some users do however find that the structure in visual scripting languages makes it cumbersome to code. To find a design of visual scripting that subvert this and has a better user experience than contemporary designs, a prototype of a visual scripting interface was developed using an iterative design and testing cycle. When a final prototype had been developed, it was tested to see how it compared to text programming. From the tests performed, a few teachings were discovered. If-statements that grow perpendicularly to the rest of the code fit more information on the screen at the same time and can feel more natural and easier to parse for some users. Having a help menu with syntax-help makes it so that users do not have to leave the program, which increases programming speed. The visual coding elements in a visual scripting language need to be coloured such that the most important parts are the most visible; otherwise users have a hard time parsing the code. Showing existing variables that are in scope gives the user a good overview of what variables they can use. Having help menus where elements can be clicked to insert them at the user's text cursor reduces the chance of misspelling variables and gives the user confidence in the correctness of the code. Having visual coding elements that can change depending on context or by using toggles can make coding more intuitive and faster. / <p>Examensarbetet är utfört vid Institutionen för teknik och naturvetenskap (ITN) vid Tekniska fakulteten, Linköpings universitet</p>

In this study, data on vibration measurements from Forsmark - Vattenfall AB's database has been studied, the goal has been to see how it can be reworked so that it becomes easier to interpret and more transparent for more people in maintenance.The idea has been to use all the data available to create graphs or graphs over a longer period to look for trends in systems that are similar to each other. Which is because there is redundancy in the systems and blocks 1 &amp; 2 are sibling blocks with identical components, so it is possible to compare them.Furthermore, it is intended to implement the results from this work in balanced scorecards that are already used at Forsmark at present. This is done to obtain data on how the maintenance is going and how many machines need to be maintained compared to previous periods.The work has consisted of retrieving data files from Forsmark's database and via an Excel script that reworks all data so that graphs can be created of the various measurements performed regularly by the Maintenance Group NMM 1-3 (Mechanical Maintenance) at Forsmark.The results of the work have been verified through the special software that NMM 1–3 uses but in which other groups have no experience. In this special software all graphs and data are already available, something that is not as easy, however, is the ability to compare different machines at the same time, something that this thesis work tries to create.As others in maintenance do not have experience in the specialized software, Excel is used instead, as it is a program all groups have access to and good knowledge in. What emerges from the work is that the amount of data is very large but the possibility to get to the goal is good, the data files need some reworking to be easily used for graph creation and some things are unfortunately not included in the data files but must be downloaded from the special software NMM 1- 3 have. / I denna studie har data över vibrationsmätningar från Forsmark – Vattenfall AB:s databas studerats, målet har varit att se hur den ska kunna omarbetas så att den blir lättare att tolka och mer överskådlig för flera inom underhåll.Idén har varit att använda all den data som finns tillgänglig för att skapa graf eller grafer över längre tid för att leta efter trender inom system som är snarlika varandra, vilket finns eftersom det finns redundans i systemen och block 1 &amp; 2 är syskonblock, så det går att jämföra mellan dem.Vidare är det tänkt att implementera resultatet från detta arbete i balanserade styrkort (Scorecard) som redan används på Forsmark i dagsläget, detta görs för att få in data över hur underhållet går och hur många maskiner som behöver underhållas jämfört med tidigare perioder.Arbetet har gått ut på att hämta datafiler från Forsmarks databas och via ett Excel script som omarbetar all data så att grafer kan skapas över de olika mätningar som utförs regelbundet av Underhållsgruppen NMM 1–3 (Mekaniskt underhåll) på Forsmark.Arbetets resultat har verifierats genom den speciella programvara som NMM 1–3 använder men som övriga grupper inte har erfarenhet av. Där finns alla grafer och all data redan att tillgå, något som inte finns lika enkelt är dock möjligheten att jämföra olika maskiner samtidigt, något som detta arbete försöker skapa.Då övriga inom underhåll inte har erfarenhet inom den programvaran så används Excel i stället, då det är ett program alla har tillgång till och god kunskap inom. Det som framkommer av arbetet är att mängden data är väldigt stor men möjligheten att komma till målet är goda, datafilerna behöver viss omarbetning för att enkelt kunna användas för graf skapande och vissa saker finns tyvärr inte med i datafilerna utan måste hämtas från specialprogramvaran NMM 1–3 har.

Aufgrund von steigenden Energiekosten und einer sukzessive steigenden öffentlichen sowie politischen Forderung nach Umweltbewusstsein und Nachhaltigkeit, ist die Effizienzsteigerung von Gesamtsystemen einer der treibenden Kräfte für innovative, technologische Neuheiten geworden. Besonders bei der Entwicklung von verbrennungsmotorisch angetriebenen Fahrzeugen wurden z.B. durch die Hybridisierung von Antriebssträngen, die die Rekuperation von kinetischer Energie ermöglichen, Technologien zur Energieeinsparung etabliert. Da bei Verbrennungsmotoren ein hoher Anteil der im Kraftstoff gespeicherten Energie technologiebedingt als Abwärme im Abgas verloren geht, bietet die Wärmerekuperation ein weiteres hohes Potential für weitere Einsparungen. Diese ist z.B. mit Hilfe von thermoelektrischen Generatoren (TEG) möglich, die einen Wärmestrom direkt in elektrische Energie umwandeln. Zur effizienten TEG-Systemgestaltung ist ein hoher Temperaturgradient über dem thermoelektrisch aktivem Material notwendig, der wiederum zu kritischen thermomechanischen Spannungen im Bauteil führen kann. Diese werden zum einen durch die unterschiedlichen Temperaturausdehnungskoeffizienten der verschiedenen Materialien und zum anderen durch die mechanische Anbindung auf der heißen und kalten Seite des TEG verursacht. Somit liegt ein Zielkonflikt zwischen dem thermoelektrischen Systemwirkungsgrad und der mechanischen Festigkeit des Bauteils vor. In dieser Arbeit wird mit Hilfe einer mehrkriteriellen Parameteroptimierung eines vollparametrisierten FE-Modells des TEG in ANSYS WORKBENCH eine Methode vorgestellt, den thermoelektrischen Wirkungsgrad bei gleichzeitiger Reduktion der thermomechanischen Spannungen zu optimieren. Zur Optimierung kommt dabei ein genetischer Algorithmus der MATLAB GLOBAL OPTIMIZATION TOOLBOX zum Einsatz. Der Modellaufbau wird in ANSYS WORKBENCH mit der Makro-Programmiersprache JSCRIPT realisiert. Als Ziel- und Bewertungsfunktionen wird die mechanische Belastung jedes Bauteils im TEG ausgewertet und dessen elektrische Leistungsdichte berechnet. Die Ergebnisse zeigen, dass mit Hilfe der vorgestellten Methodik eine paretooptimale Lösung gefunden werden kann, die den gestellten Anforderungen entspricht.

Made available in DSpace on 2015-04-11T14:03:18Z (GMT). No. of bitstreams: 1 Angelo Eduardo Nunan.pdf: 2892243 bytes, checksum: 5653024cae1270242c7b4f8228cf0d2c (MD5) Previous issue date: 2012-05-14 / CAPES - Coordenação de Aperfeiçoamento de Pessoal de Nível Superior / Web applications are currently an important environment for access to services available on the Internet. However, the security assurance of these resources has become an elementary task. The structure of dynamic websites composed by a set of objects such as HTML tags, script functions, hyperlinks and advanced features in web browsers may provide numerous resources and interactive services, for instance e-commerce, Internet banking, social networking, blogs, forums, among others. On the other hand, these features helped to increase the potential security risks and attacks, which are the results of malicious codes injection. In this context, Cross-Site Scripting (XSS) is highlighted at the top of the lists of the greatest threats to web applications in recent years. This work presents a method based on supervised machine learning techniques to detect XSS in web pages. A set of features extracted from URL contents and web document are employed in order to discriminate XSS patterns and to successfully classify both malicious and non-malicious pages / As aplicações web atualmente representam um importante ambiente de acesso aos serviços oferecidos na Internet. Garantir a segurança desses recursos se tornou uma tarefa elementar. A estrutura de sites dinâmicos constituída por um conjunto de objetos, tais como tags de HTML, funções de script, hiperlinks e recursos avançados em navegadores web levou a inúmeras funcionalidades e à interatividade de serviços, tais como e-commerce, Internet banking, redes sociais, blogs, fóruns, entre outros. No entanto, esses recursos têm aumentado potencialmente os riscos de segurança e os ataques resultantes da injeção de códigos maliciosos, onde o Cross-Site Scripting aparece em destaque, no topo das listas das maiores ameaças para aplicações web nos últimos anos. Este trabalho apresenta um método baseado em técnicas de aprendizagem de máquina supervisionada para detectar XSS em páginas web, a partir de um conjunto de características extraídas da URL e do documento web, capazes de discriminar padrões de ataques XSS e distinguir páginas web maliciosas das páginas web normais ou benignas

Aufgrund von steigenden Energiekosten und einer sukzessive steigenden öffentlichen sowie politischen Forderung nach Umweltbewusstsein und Nachhaltigkeit, ist die Effizienzsteigerung von Gesamtsystemen einer der treibenden Kräfte für innovative, technologische Neuheiten geworden. Besonders bei der Entwicklung von verbrennungsmotorisch angetriebenen Fahrzeugen wurden z.B. durch die Hybridisierung von Antriebssträngen, die die Rekuperation von kinetischer Energie ermöglichen, Technologien zur Energieeinsparung etabliert. Da bei Verbrennungsmotoren ein hoher Anteil der im Kraftstoff gespeicherten Energie technologiebedingt als Abwärme im Abgas verloren geht, bietet die Wärmerekuperation ein weiteres hohes Potential für weitere Einsparungen. Diese ist z.B. mit Hilfe von thermoelektrischen Generatoren (TEG) möglich, die einen Wärmestrom direkt in elektrische Energie umwandeln. Zur effizienten TEG-Systemgestaltung ist ein hoher Temperaturgradient über dem thermoelektrisch aktivem Material notwendig, der wiederum zu kritischen thermomechanischen Spannungen im Bauteil führen kann. Diese werden zum einen durch die unterschiedlichen Temperaturausdehnungskoeffizienten der verschiedenen Materialien und zum anderen durch die mechanische Anbindung auf der heißen und kalten Seite des TEG verursacht. Somit liegt ein Zielkonflikt zwischen dem thermoelektrischen Systemwirkungsgrad und der mechanischen Festigkeit des Bauteils vor. In dieser Arbeit wird mit Hilfe einer mehrkriteriellen Parameteroptimierung eines vollparametrisierten FE-Modells des TEG in ANSYS WORKBENCH eine Methode vorgestellt, den thermoelektrischen Wirkungsgrad bei gleichzeitiger Reduktion der thermomechanischen Spannungen zu optimieren. Zur Optimierung kommt dabei ein genetischer Algorithmus der MATLAB GLOBAL OPTIMIZATION TOOLBOX zum Einsatz. Der Modellaufbau wird in ANSYS WORKBENCH mit der Makro-Programmiersprache JSCRIPT realisiert. Als Ziel- und Bewertungsfunktionen wird die mechanische Belastung jedes Bauteils im TEG ausgewertet und dessen elektrische Leistungsdichte berechnet. Die Ergebnisse zeigen, dass mit Hilfe der vorgestellten Methodik eine paretooptimale Lösung gefunden werden kann, die den gestellten Anforderungen entspricht.

在目前3D虛擬環境中，虛擬人物的動作多半是以動作抓取等離線方式錄製後，再以罐裝動作的方式呈現。該動作經過編碼後會以固定的格式進行傳送，然後由客戶端撥放該動畫內容。通常而言，固定的格式規範會限制電腦動畫表現與延展的能力。這篇論文我們提出了一套以XML為基礎的動畫語言，稱為eXtensible Animation Markup Language(XAML)來解決這樣的問題。這套語言設計的目的是為了讓開發者能夠彈性地選擇不同層次的指定方式來產生虛擬演員的動畫；同時使用者可以藉由已經定義好的動畫合成新的動畫內容，或是更改已定義動畫的部分內容來產生一套新的動畫。除此之外，XAML為客製化腳本語言提供延展擴充的機制，開發者可以透過plug-in、內嵌XAML引擎或轉換腳本等方式達到擴充XAML的目的。我們同時使用JAVA實作了一套能夠解譯XAML的動畫引擎，使用者不但可以利用XAML腳本命令產生相對應的3D動畫顯示，也可以透過該動畫引擎所提供的函式庫對場景中的3D物件進行控制。另外，我們也設計了一個具語音對話功能的多人虛擬環境系統，以驗證XAML語言的可行性及有效性。 / Character animations on most virtual environment systems are canned motions created off-line through motion capture techniques. The motions are then en-coded and transmitted with a fixed format and played at the client side. The rigid specification format for computer animation and multimedia presentation in general has greatly affected the development of 3D contents. In this thesis, we propose an XML-based scripting language, called eXtensible Animation Markup Language (XAML). The language is designed to describe character animations at various command levels and to compose a new animation from existing ani-mation clips. Furthermore, one can use plug-in, embeding or translation to in-corporate other customized scripting languages or new functions into XAML. We have implemented an animation engine in Java that can interpret the script-ing language and render 3D animations based on the user’s interactive XAML commands or the provided application programming interface. In addition, we have designed a speech-enabled multi-user virtual environment system based on XAML to verify the feasibility and effectiveness of such a language.

Syftet med föreliggande studie var att undersöka om och i sådana fall vilka faktorer som unga heterosexuella kvinnor upplevde som begränsande för sin sexualitet. Med hjälp av semistrukturerade intervjuer undersöktes i denna kvalitativa studie hur dessa deltagare upplevde sin sexualitet utifrån tre huvudområden; sociala strukturer, normer samt psykisk hälsa. Teorin “sexual scripting theory” applicerades på de tre huvudområdena, då paralleller drogs mellan dessa och teorins tre huvudbegrepp “cultural scripts”, “interpersonal scripts” och “intrapsychic scripts”. Resultatet av denna studie visade att patriarkala strukturer, samhällsideal, jämförelser med andra, förväntningar och föreställningar om kvinnans utseende samt beteende var hämmande för deltagarnas sexualitet. Resultatet visade även att det fanns tydliga samband mellan sexualiteten och den psykiska hälsan. Negativa sexuella erfarenheter upplevdes påverka deltagarnas psykiska hälsa och blev hämmande för framtida sexuella upplevelser. Många begränsande faktorer identifierades utifrån resultatet i denna studie och en inblick i deltagarnas förhållande till sin sexualitet utforskades.

In the present experiment, a remote control tactile prompting device (RCT) was utilized to prompt a child with autism to recruit teacher models and play suggestions. A multiple baseline and reversal was used to assess the effects of the RCT across three play contexts. The results showed increases in the number of requests for models and suggestions as well as increases in the duration of interactive play between the child and therapist, the number of contextual statements emitted by the child, and the topography and contexts of the play behaviors emitted by the child. Findings are discussed in terms of the effectiveness and generality of the RCT and the issue of teaching a child to recruit versus teaching a child activity-specific behaviors.

Modeling of solar irradiance for lunar base locations Abstract An incident radiation is an essential factor for a discovery of a place suitable for building a lunar base. This thesis presents a new approach for modeling of solar irradiance in an arbitrary lunar location at selected time. Shadowing by surrounding terrain is calculated by spatial intersection between lines of illumination and digital terrain model. Model also takes variable distance between Moon and Sun and areal representation of the Sun into account. In this thesis a new geometrical procedure for calculation of reflected irradiance is designed. The resulting model is implemented within ArcGIS software as an executable script, which utilizes the freely available data from Lunar Reconnaissance Orbiter as an input. Key words: Moon, solar irradiance, geoinformatic modelling, scripting