No description available.

Background: Web application security (WAS) testing is crucial for protecting web applications from cyber threats. However, organizations often struggle to select effective WAS testing tools due to the lack of a well-defined set of evaluation criteria. This research aims to address this need by identifying the key metrics for evaluating and comparing WAS testing tools.  Objectives: The primary objectives of this research are to identify the key metrics for comparing WAS testing tools, validate the significance of these metrics through semi-structured interviews, and perform a comparison between WAS testing tools using the validated metrics. This research aims to find a set of validated metrics for evaluating and comparing WAS testing tools.  Methods: The research methodology consisted of three main phases: a literature review to compile a comprehensive set of technical and non-technical metrics commonly used for assessing and comparing WAS testing tools, semi-structured interviews with security experts to validate the significance of the identified metrics, and an experiment to compare three WAS testing tools - ZAP, Burp Suite, and Acunetix - using the OWASP Benchmark project. These three tools were selected based on the author’s recommendations in the literature.  Results: The initial literature review found 37 evaluation metrics for WAS testing tools. Through interviews, experts confirmed some of these were important, but also said some were not very useful. The experts additionally suggested some new metrics that were not in the literature. Incorporating this feedback, the final list was refined down to 35 metrics for evaluating WAS testing tools. An experiment was then conducted to compare three WAS testing tools - ZAP, Burp Suite, and Acunetix with the test subject as the OWASP Benchmark Project and by using the validated set of metrics. The results of this experiment revealed differences in the performance of the tools, with Burp Suite emerging as the best performer.  Conclusions: This research has provided a valid set of metrics for comparing and evaluating WAS testing tools, empowering organizations to make more informed decisions. Security professionals can optimise their WAS testing tool selection by understanding the key metrics and their relative significance, as established through the literature and interviews. Based on the experimental analysis, Burp Suite performed better than other tools. Therefore, for organizations initiating the selection process of the WAS testing tool, Burp Suite stands out as a good choice.

Durch den Wandel von herkömmlichen industriellen Produktionsprozessen hin zur Industrie 4.0 sowie die höhere Dynamik der Märkte werden auch Arbeitsprozesse dynamischer. Dies erzeugt hohe Anforderungen an die Mitarbeiter, die in diesem anspruchsvollen Umfeld arbeiten, und an das Management der beteiligten Workflows und Softwarewerkzeuge. Apps, also Programme mit engem Funktionsumfang, die auf die Lösung einer bestimmten Aufgabe spezialisiert sind, eignen sich als Grundbaustein für interaktive Systeme, die an die neuen Flexibilitätsanforderungen in Produktionsprozessen angepasst sind. In dieser Arbeit wird eine Methode vorgestellt, die es ermöglicht, spezialisierte Apps so zu kombinieren, dass nicht nur bestimmte isolierte Aufgaben, sondern auch komplexe Geschäftsprozesse damit bearbeitet werden können. Diese Methode, App-Orchestrierung genannt, ist ein Beitrag zum Forschungsgebiet der formalen Methoden der Mensch-Computer Interaktion und zur Bewältigung der Dynamisierung von komplexen Arbeitsprozessen im Zuge von Industrie 4.0. Die formale Modellierungssprache AOF-L, die auf BPMN und dem Semantic Web Stack aufbaut, wird entwickelt, und ein Software-Framework zur Modellierung und Ausführung von App-Ensembles mittels der AOF-L wird implementiert. In einer Nutzerstudie wird ein darauf aufbauendes industrielles Wartungsszenario evaluiert. / The transformation of industrial processes towards Industry 4.0 and the increasing dynamics of the markets are strong drivers for more dynamic industrial workflows. This development creates vast challenges to the staff that works in these ever changing environments and to the management of workflows and software tools. Apps — programs with a restricted set of functionality, tailored to a specific problem and its solution — are becoming more and more ubiquitous, especially on mobile devices. They are suitable as a building block for interactive systems ready to cope with the new requirements of flexible production processes. This work presents a method for combining specialized apps so that they can be used to fulfill complex business processes. The App-Orchestration approach is a contribution to the field of formal methods for human-computer interaction and to dealing with the new requirements of complex work environments in Industry 4.0 scenarios. The formal modeling language AOF-L which is based on BPMN and the semantic web stack, is presented. It can be employed to model interactive systems comprised of self-contained apps that are connected in a purposeful manner. Additionally, a software framework to model and execute App-Ensembles is implemented. In a user study an industrial maintenance scenario that was built using the developed method is evaluated.

iTrak is a combined mobile and web application that takes advantage of the GPS to allow travelers to share their experience while travelling. The application gathers GPS data and broadcasts it via a web interface or social networks such as Facebook to update user’s status during a trip. iTrak is also equipped with other features such as writing notes or recording video journals to offer a rich experience and provide an interactive diary, along with a real-time tracking ability, for travelers. / text

No description available.

This paper aims to examine what the differences is between the three application types, native, hybrid and web. The main focus will be placed on the web app and investigate whether it could be an alternative to native and hybrid app. To explain what a web app has the capacity to do, a web app is created in wordpress. Web development is moving forward, which is obviously positive. The problem may be, however, for companies that come from a completely different industry and who wish to develop a new web solution for their company. A native app can be a very expensive investment and it is far from all companies that can pay this. This study wants to find out if a web app, could be an alternative to the native app. Furthermore, the report will examine what the possibilities are for a web app and what existing web apps there is today. Furthermore, a simple price comparison between the different app types to be made. / Den här rapporten syftar till att undersöka vad skillnaden är mellan de tre applikationstyperna, native, hybrid och webb. Störst fokus kommer att placeras på webb appen och undersöka om denna skulle kunna vara ett alternativ till native och hybrid appen. För att redogöra vad en webb app har kapacitet att göra kommer en webb app att skapas i wordpress. Webbutvecklingen går framåt vilket självklart är positivt. Problemet som kan bli är dock för företag som kommer från en helt annan bransch och som önskar ta fram en ny webb-lösning för sitt företag. En native app kan vara en väldigt dyr investering och det är långt ifrån alla företag som kan betala detta. Denna undersökning vill reda ut om en webb app kan var ett alternativ till native appen. Vidare kommer rapporten undersöka vad det finns för möjligheter för en webb app och vad det finns för webb appar idag. Dessutom kommer en enklare prisjämförelse mellan de olika apptyperna att göras.

In the past few years, technology has been changing by leaps and bounds, within which a new topic has emerged as Internet of Things. These things serve as sensors/actuators, connected to the Internet and enabled to communicate with each other simultaneously in a P2P distributed manner. The sensors/actuators sense and generate contextual data in their surroundings in order to enable real-time context-aware behavior that make them more personalized and intelligent. This contextual information may be useful for human purposes like environment monitoring, home surveillance, elderly care, safety, security surveillance, etc. Moreover, smart mobile devices with incredible features have become hugely popular, the use of the Internet of Things would be much handier using smartphones to interact with sensors and also to generate information with its decorated sensors. The main aim of this thesis work is to create an extension for an add-in layer of the Internet of Things (SensibleThings Platform) architecture that adds functionalities like querying UCI value within the platform, connecting different mobile devices regardless of programming language, which has been done using the REST protocol. Furthermore, the intention is to build a P2P connection between the Java coded SensibleThings platform to a non-Java platform, i.e. iOS, by creating an Objective-C library to support dissemination of contextual information between the discrete platform in a distributed manner using JSON. Two servers have been created using Apache web server and sockets to connect with the Objective-C library to compare the performance of extension and library. The thesis work also presents the implementation of the extension and an Objective-C library, integrated to create proof-of-concept applications by developing an iOS application and Mac OS desktop application that can easily interact with the SensibleThings platform by requests through the REST protocol and getting the UCI value in JSON message format. Moreover, to know the best possible solution for the SensibleThings platform, a hybrid application has also been developed by using PhoneGap and JQueryMobile within XCode, which is compared with the iOS web app, and an evaluation of mobile applications using extension and library with two servers has also been performed. According to the results between the web server and sockets, the sockets act scalable and more stable than the web server when interacting with the SensibleThings platform; when comparing between the iOS and Mac app for performance, there is not much difference. The results also suggest that a hybrid app would be a better solution for the SensibleThings platform; it could be developed with less effort and be useful for a variety of mobile devices, which might be the best solution for the IoT in the future. Lastly, the conclusions includes possible future work to be supplemented, to make the IoT better in future.

Progressive Web Apps (PWA) is a concept of enhanced web apps which aim to erase the difference between web and native apps. The concept of PWA introduces several benefits, including simpler distribution and development, which makes web apps a viable option for many businesses. The installation process of a PWA is different from native apps and this study aims to understand whether or not it has an impact on the users will to install the PWA. PWA:s are installed directly from the browser, rather than an app marketplace. Said installation process is suspected to be unknown to many which might influence the impact. In this study, several papers on the topic are studied. A PWA is developed from scratch which is used as a platform for a user test, hosting a brief introduction of the topic as well as guiding participants through the installation process. In conjunction with the user test a survey is conducted to collect the impressions from their experience in the user test. The result of the survey shows indications that the suspected lack of knowledge and experience was correct, and that the installation process is not to complicated.Additionally, results show that many probably will not bother to install a PWA, even if it is available. Therefore, I argue that the installation process does have an impact in its current form. Alternatives to the installation process used in this study do exist and are discussed in this paper.

Food waste has become a serious matter which negatively impacts the environment worldwide. This raises the issue of managing food waste more efficiently, which in many cases can be aided with technology, and there has been previous research suggesting possible solutions. On a household level, food waste could be better managed by providing individuals with visual representations or summaries of how much they waste, and hopefully motivating them to waste less. However, typicalcharts used for visualizing data often fail to motivate users. Abstract visualizations might have a better chance at doing so. The focus of this master thesis is to design and develop a responsive web application which helps users keep track of their food purchases. Using the application, users can create product lists and perform two actions on products: consuming and wasting. The app prototype aims to increase an individual’s motivation towards wasting less food by providing a virtual “tree” visualization with similar features to a real tree such as branches and leaves. However, instead of growing depending on its’ environment like a real tree would, this virtual “tree” representation would grow based on the user’s actions: subject to how much food is consumed or wasted, the virtual tree will grow further or gradually start withering. A user study was conducted which involved a questionnaire surveying the general attitudes and practices of the participants regarding their household food waste, which was sent to participants both before and after using the resulting prototype.This enabled for relevant comparisons to be made between the user attitudes before and after trying the prototype. Furthermore, at the end of study, two user groups could be identified: most active participants and less active participants. This classification was made based on the activity logs gathered from the application database, where “most active” refers to participants that used the application regularly during the evaluation period and “less active” means the participants with very little or no activity recorded in the database. A final questionnaire was developed in two variants for collecting user feedback, tailored for the two groups identified: most active participants and less active participants. These surveys were shared with a group of participants who had agreed on using the resulting prototype for a period of at least two weeks. The results of the user study suggested that users were positive to the concept of the prototype and most users showed a keen interest in future improvements of the application. It is hoped that this work makes a relevant contribution to the areas of household food waste management, digital inventories, and web technologies, specifically web applications.

Submitted by Luciana Ferreira (lucgeral@gmail.com) on 2017-06-12T15:19:44Z No. of bitstreams: 2 Dissertação - Vinicius de Medeiros Alves - 2014.pdf: 3082084 bytes, checksum: da4838d5fe24841429f43de84204d98a (MD5) license_rdf: 0 bytes, checksum: d41d8cd98f00b204e9800998ecf8427e (MD5) / Approved for entry into archive by Luciana Ferreira (lucgeral@gmail.com) on 2017-06-12T15:21:40Z (GMT) No. of bitstreams: 2 Dissertação - Vinicius de Medeiros Alves - 2014.pdf: 3082084 bytes, checksum: da4838d5fe24841429f43de84204d98a (MD5) license_rdf: 0 bytes, checksum: d41d8cd98f00b204e9800998ecf8427e (MD5) / Made available in DSpace on 2017-06-12T15:21:40Z (GMT). No. of bitstreams: 2 Dissertação - Vinicius de Medeiros Alves - 2014.pdf: 3082084 bytes, checksum: da4838d5fe24841429f43de84204d98a (MD5) license_rdf: 0 bytes, checksum: d41d8cd98f00b204e9800998ecf8427e (MD5) Previous issue date: 2017-05-12 / Coordenação de Aperfeiçoamento de Pessoal de Nível Superior - CAPES / Introduction: Skin sensitization is a major environmental and human health hazard. Although many chemicals have been evaluated in humans, there have been no efforts to model these data to date. Skin sensitization is commonly evaluated using structural alerts. However, there has been a growing concern that alerts disproportionally flag too many chemicals as toxic, which questions their reliability as toxicity markers. The main goal of this thesis was to develop and apply new cheminformatics methods to predict skin sensitization of chemical compounds that lack experimental data. Methodology: It has been compiled, curated, analyzed, and compared the available human data and the murine (performed in mice) animal model data, named LLNA (local lymph node assay). Using these data, it was developed reliable computational models and applied them for virtual screening of chemical libraries to identify putative skin sensitizers. It was developed a freely accessible web-based application for the identification of potential skin sensitizers. In addition, it was demonstrated that contrary to the common perception of QSAR models as “black boxes” they can be used to identify statistically significant chemical substructures (QSAR-based alerts) that influence toxicity. Results and discussion: The overall concordance between murine LLNA and human skin sensitization responses for a set of 135 unique chemicals was low (R = 28-43%), although several chemical classes had high concordance. We have succeeded to develop predictive QSAR models of all available human data with the external correct classification rate of 71%. A consensus model integrating concordant QSAR predictions and LLNA results afforded a higher correct classification rate of 82% but at the expense of the reduced external dataset coverage (52 %). We used the developed QSAR models for virtual screening of CosIng database and identified 1,061 putative skin sensitizers; for seventeen of these compounds, we found published evidence of their skin sensitization effects. The developed Pred-Skin web app (http://www.labmol.com.br/predskin/) is based on binary QSAR models of human (109 compounds) and LLNA (515 compounds) data with good external correct classification rate (70-81% and 72-84%, respectively). It is also included a multiclass potency model based on LLNA data (accuracy ranging between 73-76%). Conclusions: Models reported herein provide more accurate alternative to LLNA testing for human skin sensitization assessment across diverse chemical data. In addition, they can also be used to guide the structural optimization of toxic compounds to reduce their skin sensitization potential. The Pred-Skin web app is a fast, reliable, and user-friendly tool for early assessment of chemically-induced skin sensitization. A new approach that synergistically integrates structural alerts and rigorously validated QSAR models for a more transparent and accurate safety assessment of new chemicals was also proposed. / Introdução: A sensibilização cutânea é um importante parâmetro de avaliação de toxicidade humana e ambiental. Embora muitos compostos tenham sido avaliados em seres humanos, não foi reportado até o momento modelos de QSAR (do inglês, quantitative structure-activity relationships) gerados com esses dados. Comumente, a sensibilização cutânea é avaliada computacionalmente usando-se alertas estruturais. No entanto, tem havido uma preocupação crescente de que alertas sinalizam a maioria dos compostos como tóxicos, o que questiona sua confiabilidade como marcadores de toxicidade. O objetivo geral do presente trabalho foi desenvolver e aplicar novos métodos de quimioinformática para predizer a sensibilização cutânea de compostos químicos que carecem de dados experimentais. Metodologia: Foram compilados, preparados, analisados e comparados os dados de sensibilização cutânea de pele humana e do modelo animal murino (realizado em camundongos), denominado LLNA (local lymph node assay). Modelos de QSAR foram desenvolvidos utilizando esses dados e aplicados para a triagem de quimiotecas virtuais para identificar potenciais sensibilizadores. Foi desenvolvido um aplicativo gratuito para a identificação de potenciais sensibilizadores cutâneos. Além disso, foi demonstrado que modelos de QSAR podem ser usados para identificar subestruturas químicas estatisticamente significativas (alertas estruturais baseados em QSAR) que influenciam a toxicidade. Resultados e discussão: A concordância global (R) entre respostas de sensibilização cutânea humana e murina para um conjunto de 135 substâncias químicas únicas foi baixa (R = 28-43%), embora várias classes químicas apresentassem alta concordância. Foi possível desenvolver modelos de QSAR preditivos com taxa de classificação correta externa de 71%. Um modelo de consenso que integrava predições concordantes de QSAR e dados de LLNA proporcionaram uma acurácia 82%. Utilizou-se os modelos de QSAR desenvolvidos para a triagem virtual da base de dados CosIng e foram identificados 1061 potenciais sensibilizadores cutâneos. Para dezessete desses compostos, encontrou-se evidências publicadas de seus efeitos de sensibilização cutânea em seres humanos. O aplicativo desenvolvido, Pred-Skin (http://www.labmol.com.br/predskin/), baseia-se em modelos de QSAR classificatórios de dados humanos (109 compostos) e murinos (515 compostos) com boa taxa de classificação correta externa (70-81% e 72-84%, respectivamente). Esse aplicativo também possui um modelo de multiclassificatório desenvolvido com dados de LLNA (precisão que varia entre 73-76%). Conclusões: Os modelos de QSAR desenvolvidos forneceram uma alternativa mais precisa do que o modelo animal para avaliação da sensibilização cutânea humana. Além disso, a interpretação dos modelos de QSAR permitem orientar a otimização estrutural de compostos tóxicos para reduzir o potencial de toxicidade. O aplicativo Pred-Skin é uma ferramenta rápida, confiável e de fácil utilização para a avaliação da sensibilização cutânea de compostos químicos. Foi também proposta uma nova abordagem que integra sinergicamente alertas estruturais e modelos de QSAR rigorosamente validados para uma avaliação de toxicidade mais transparente e precisa de novos produtos químicos.