This thesis describes Scrum and with a feasibility study tests if Scrum can be applied in a project with two developers at T-systems Sweden. Key issues regarding the development process are pointed out from a baseline project. The influence of the issues in the project is later tested in the new project at the same organization. New issues were identified and studied and corrected. Interviews and literature study are used to gather information of what issues do occur and may occur. The results and analysis lead to a conclusion on what changes that should be done and what strength and weaknesses Scrum has when implemented at T-systems Sweden.

Context: SQL injection attack (SQLIA) poses a serious defense threat to web applications by allowing attackers to gain unhindered access to the underlying databases containing potentially sensitive information. A lot of methods and techniques have been proposed by different researchers and practitioners to mitigate SQL injection problem. However, deploying those methods and techniques without a clear understanding can induce a false sense of security. Classification of such techniques would provide a great assistance to get rid of such false sense of security. Objectives: This paper is focused on classification of such techniques by building taxonomy of SQL injection defense techniques. Methods: Systematic literature review (SLR) is conducted using five reputed and familiar e-databases; IEEE, ACM, Engineering Village (Inspec/Compendex), ISI web of science and Scopus. Results: 61 defense techniques are found and based on these techniques, a taxonomy of SQL injection defense techniques is built. Our taxonomy consists of various dimensions which can be grouped under two higher order terms; detection method and evaluation criteria. Conclusion: The taxonomy provides a basis for comparison among different defense techniques. Organization(s) can use our taxonomy to choose suitable owns depending on their available resources and environments. Moreover, this classification can lead towards a number of future research directions in the field of SQL injection. / 0760880470, 0700183408

With the popularity of online role-playing games, a web-based battle application is designed to help the players to improve their characters for the combat. The developed prototype concentrates on one-player-multi-characters mode. The project consists of three major objectives. The first one focuses on the development of web-based interfaces for user registration and login. This functionality benefits the user with an individual and personalized member account. The second goal is to improve the existing web-application for character creation so the user data input is stored in a database for posterior retrieval. The third objective refers to the development of a web-based battle application that allows players to test created characters in a battle, one character against another one. This project also contributed with a logical database model that overcomes some design issues, such as normalization problems, in the current database model.

One of the tasks of the Swedish Civil Contingencies Agency, MSB (Myndigheten för Samhällsskydd och Beredskap), is to partake in relief efforts in foreign countries. Before these relief efforts, roads are inspected for accessibility to ensure that communications will work. The road inspections are currently being performed by hand with the use of pen and paper, which brings difficulties to distribution of information. During the course of this thesis project, Sweco Position Karlstad has developed a digital road inspection tool for MSB that recieves information from a road inspector and stores this information in a database. This road inspection tool may in the future replace the pen and paper inspections and ease the work of the road inspectors. In this dissertation, a prototype of a web map that displays data from a road inspection is presented. Using a web map to display the results of a road inspection offers several advantages, as it eases distribution of information and allows end users to make selections about what data they want to view.

A coherent software environment simplifies maintenance - and using the same terminology facilitates communication and learning within the IT department.   Having a mixed and complex software environment could put strain on the IT department. Applications and databases needs to be somehow cataloged in case of system failure. While mapping applications to databases using a unified terminology might seem to be a good idea from the start, but when it comes to generating a data model of interconnections based on terminology - confusion will arise. This confusion could lead to misinterpretations, which in turn could lead to incidents.

Elektronikföretaget Mobiltech AB i Karlskrona, Blekinge, var i behov av en ny webbapplikation och visade sitt intresse i att låta oss utveckla en ny mer dynamisk lösning åt dem. Deras mål med systemet var att de själv enkelt via ett webbadministrations gränssnitt skulle kunna redigera alla information på deras företags webbsida. Systemet som helhet omfattas av kategorier, informationssektioner samt en erbjudande panel. Som via en lösning av kod struktur och design, som vi från grunden byggt upp för att passa de behov som finns, bildar en administrerbar sida. Vi utvecklade projektet genom att använda oss av PHP5 och MySQL5. Dessa tekniker är något som vi har använt oss av genomgående under våra år på utbildningen. Vi valde dessa tekniker efter att ha övervägt fördelar och nackdelar samt undersökt andra lösningar som vi känner till. Vi valde även dessa mjukvaror på grund av att vi kände att vi hade mest kunskap och tillit till dem, samtidigt som de skulle fylla våra mål och önskningar på ett smidigt och effektivt sätt. När det gäller den visuella biten valde vi att använda oss av de standarder som finns, XHTML 1.1 Strict och CSS2. För att nå vårat slutmål på detta projekt använde vi oss av de kunskaper vi tidigare skaffat på vår utbildning mot webbteknik, samt genom ett engagerat sökande kring de informations bitar som vi sedan tidigare inte kände att vi riktigt behärskade eller ens fått möjlighet att tillämpa.

Software testing plays an important role in the process of verifying software functionality and preventing bugs in production code. By writing automated tests using code instead of conducting manual tests, the amount of tedious work during the development process can be reduced and the software quality can be improved. This thesis presents the results of a conducted case study on how automated testing can be used when implementing new functionality in a Ruby on Rails web application. Different frameworks for automated software testing are used as well as test-driven development methodology, with the purpose of getting a broad perspective on the subject. This thesis studies common issues with testing web applications, and discuss drawbacks and advantages of different testing approaches. It also looks into quality factors that are applicable for tests, and analyze how these can be measured.

The Node.js based web application Entize Planning needs to evolve and become distributable, and the logical transformation is into a SaaS cloud service that can compete in a pressured economic climate concerning resources. The aim is to provide an insight into the challenges in mitigating a web service to the cloud. By utilising the edge concerning low-cost and rapid development associated with Open Source use, a NoSQL supported and Node.js with related technologies, cloud service prototype development process and environment is proposed. Keeping guidelines such as: security, maintenance, complexity, scalability and mobility; emphasised, in order to carefully utilise existing architecture will result in an flexible solution that preserves aforementioned attributes, making the project as a whole a success towards its endusers. Key remarks that surfaced was the distinct separation between Entize Planning - the product - and the delivery mechanism - the cloud service plattform - and also the explicit need to investigate any utilisation of preexisting cloud architecture pertaining limitations in their delivery, before adoptation.

Many health care providers aim to become more patient-centered, and developing mobile health applications for patients might help achieve this. In the light of this, this thesis explores if the progressive web application (PWA) concept is suitable for mobile health applications. It is investigated by developing a PWA intended to be used to gather health care patients’ self assessments. The work follows the double diamond design process with: a discover phase containing a literature study, interviews with experts, and partaking in a workshop; a define phase where system requirements are specified; a develop phase with lo- and mid-fi prototypes as well as usability tests with six test users; and a deliver phase where the application is implemented using Polymer 2.0 and web components. To furthermore assess the patients satisfaction of a PWA, an evaluation phase is conducted where eleven test users tries it during five consecutive evenings and answers a survey at the end. The general opinions were that they thought it worked good and was easy to use, indicating that a PWA can be suitable for this purpose. Following this and discussions of findings, we suggest guidelines for how to design and implement a PWA for similar projects. However, the developed PWA was due to shortage of time not completely finished and the test users support for PWA features were rather limited, so future investigation is recommended to determine if PWAs are suitability in this context.

This master thesis is a follow-up to my bachelor thesis which deals with analysis and design of web application for a company Wedding in Prague Inc. Area of interest for this master thesis is a review of analysis and design of application and its implementation. The main aim of the thesis is to create an online wedding application for this company that organizes and plans weddings. The applications purpose is to provide an optimal informatics support for priority processes of the company. To achieve the aim, it was necessary to review analysis of the application including a review of requirements. And because of the scale of these requirements it was necessary to prioritize these requirements. After that I did a review of original design and then I implemented and tested priority functionality of the application. This topic was chosen because the company needed informatics support of existing processes and needed to provide its customers with wedding pages. These wedding pages will be used for wedding administration and providing wedding participants with information about oncoming wedding. Because no suitable application was found on market it was necessary to develop this application. Firstly, the thesis includes a definition of a destination event management and a description of companys processes. After that there is a review of requirements, use case diagrams and a design of user interface. The next chapter focuses on a review of an application design. This includes class diagram, component diagram and a database design. Chapter after that includes implementation of application using framework ASP.NET and it also includes testing cases for this application. The last chapter includes a user manual which describes the functionality of the applications. Contribution of this thesis is to implement and to test a web application which includes a priority functionality (60% of all functionality). This enables easy administration of all organized weddings. Also, it will help expand reputation of the company.