The goal of this master's thesis is an introducing with tools for easy coding and debugging of PHP applications and to implement such tool on the basis of analysis of common requirements and specific requirements of IS VUT designers. The project includes an introduction with important ideas and terms referring to tool, analysis and specifications of requirements and design and implementation of final tool.

The internet is a source of information and it connects the world through a single platform. Many businesses have taken advantage of this to share information, to communicate with customers, and to create new business opportunities. However, this does not come without drawbacks as there exists an elevated risk to become targeted in attacks. The thesis implemented a dynamic taint tracker, named WebTaint, to detect and prevent confidentiality and integrity vulnerabilities in Java-based web applications. We evaluated to what extent WebTaint can combat integrity vulnerabilities. The possible advantages and disadvantages of using the application is introduced as well as an explication whether the application was capable of being integrated into production services. The results show that WebTaint helps to combat SQL Injection and Cross-Site Scripting attacks. However, there are drawbacks in the form of additional time and memory overhead. The implemented solution is therefore not suitable for time or memory sensitive domains. WebTaint could be recommended for use in test environments where security experts utilize the taint tracker to find TaintExceptions through manual and automatic attacks. / Internet är en informationskälla och förbinder världen genom en enda plattform. Många företag har utnyttjat detta för att dela information, kommunicera med kunder och skapa nya affärsmöjligheter. Detta kommer emellertid inte utan nackdelar, eftersom det finns en förhöjd risk att bli måltavlor i attacker. I avhandlingen implementerades en dynamic taint tracker, namngett WebTaint, med uppgift att förhindra sekretess och integritetsproblem i Java-baserade webbapplikationer. Vi utvärderade i vilken utsträckning WebTaint kan bekämpa integritets sårbarheter. De möjliga fördelarna och nackdelarna med användning av applikationen introduceras såväl som en förklaring ifall applikationen är möjlig att integrera i produktionstjänster. Resultaten visar att WebTaint hjälper till att bekämpa SQL Injection och Cross-Site Scripting-attacker. Det finns dock nackdelar i form av extra åtgång av tid och minne. Den implementerade lösningen är därför inte lämplig för tids- eller minneskänsliga domäner. Ett användningsfall för WebTaint är i testmiljöer där säkerhetsexperter använder taint trackern för att hitta TaintExceptions genom manuella och automatiska attacker.

This paper documents the design and creation of an App Library for HydroShare water resources data and software discovery and sharing system. This App Library was developed to simplify the discovery process for using environmental web applications and to lower hosting requirements for such a repository. To accomplish this goal, I created the HydroShare App Library as a standalone web application using the React JavaScript framework. The App Library application uses the existing HydroShare resource connectors to allow the registration of all web applications within the App Library without having external software requirements. This allows the HydroShare App Library to be a centralized location for web app developers to register their tools and models using their preferred software while allowing water resources managers, engineers, scientists, and decision-makers to find these tools in a single location. The developed HydroShare App Library allows the discovery of all web applications that are included in the HydroShare ecosystem and not just CUAHSI-owned web apps. This is done by using a dynamic table with React that automatically updates the user interface without having to reload entire pages. This approach allows this web app to reduce processing for the App Library by only rendering web app entries that are relevant to the current user. This allows the App Library to grow and continue to be effective as more web applications are registered in HydroShare and are discoverable within the App Library.

Developing interactive web application systems requires a large amount of effort on designing database, system logic and user interface. These tasks are expensive and error-prone. Web application systems are accessed and used by many different sets of people with different backgrounds and numerous demands. Meeting these demands requires frequent updating for Web application systems which results in a very high cost process. Thus, many attempts have been made to automate, to some degree, the construction of Web user interfaces. Three main directions have been cited for this purpose. The first direction suggested of generating user interfaces from the application¿s data model. This path was able to generate the static layout of user interfaces with dynamic behaviour specified programmatically. The second tendency suggested deployment of the domain model to generate both, the layout of a user interface and its dynamic behaviour. Web applications built based on this approach are most useful for domain-specific interfaces with a relatively fixed user dialogue. The last direction adopted the notion of deploying database metadata to developing dynamic user interfaces. Although the notion was quite valuable, its deployment did not present a generic solution for generating a variety of types of dynamic Web user interface targeting several platforms and electronic devices. This thesis has inherited the latter direction and presented significant improvements on the current deployment of this tendency. This thesis aims to contribute towards the development of an abstract framework to generate abstract and dynamic Web user interfaces not targeted to any particular domain or platform. To achieve this target, the thesis proposed and evaluates a general notion for implementing a prototype system that uses an internal model (i.e. database metadata) in conjunction with XML technology. Database metadata is richer than any external model and provides the information needed to build dynamic user interfaces. In addition, XML technology became the mainstream of presenting and storing data in an abstract structure. It is widely adopted in Web development society because of its ability to be transformed into many different formats with a little bit of effort. This thesis finds that only Java can provide us with a generalised database metadata based framework. Other programming languages apply some restrictions on accessing and extracting database metadata from numerous database management systems. Consequently, JavaServlets and relational database were used to implement the proposed framework. In addition, Java Data Base Connectivity was used to bridge the two mentioned technologies. The implementation of our proposed approach shows that it is possible and very straightforward to produce different automatic and dynamic Web entry forms that not targeted at any platform. In addition, this approach can be applied to a particular domain without affecting the main notion or framework architecture. The implemented approach demonstrates a number of advantages over the other approaches based on external or internal models.

The modern web has evolved into a highly capable software platform, which enables near-native performance, while offering installation-free cross-platform applications with a uniform user base and rapid update deployment. SVG, WebGL, and HTML5 Canvas, along with various higher-level JavaScript frameworks allow web applications to drive both 2D and 3D visualization. These technologies allow developing novel visualization applications, which can be applied in the communication domain to geospatially map service quality, and to provide tools research and education in wireless communication. We present two such web applications GeoSpy and CORNET3D. GeoSpy provides 2D and 3D visualization of geospatial data on the web. The application is primarily focused on leveraging 3D portrayals to increase the number of broadband Quality of Service (QoS) metrics, which can be attached to a single point on a map. Additionally, GeoSpy has proven to be a flexible visualization platform by giving the user a high level of customization over HTTP API data. This allows GeoSpy to venture beyond broadband mapping, and provide 3D portrayals of any well-formatted geospatial JSON API. Research of Software Defined Radio (SDR) and Dynamic Spectrum Access (DSA) can be used to significantly improve the wireless QoS. CORNET3D provides a 3D view of the Virginia Tech CORNET SDR testbed with information on which nodes and radios are operational. The application can also display 2D and 3D plots of the spectrum, which is sensed by the radios in real time. The data is sent to the client over a WebSocket connection to enable low latency, compared to conventional HTTP. CORNET3D can teach students about strategies for optimal use of spectrum resources through a game---"by providing them with real-time scoring based on their choices for radio transmission parameters. CORNET3D has demonstrated that the not only can web applications provide rich portrayals of real-time sensor data, but can also serve as a 3D "serious game" platform. / Master of Science

Computer security attacks take place due to the presence of vulnerabilities and bugs in software applications. Bugs and vulnerabilities are the result of weak software architecture and lack of standard software development practices. Despite the fact that software companies are investing millions of dollars in the research and development of software designs security risks are still at large. In some cases software applications are found to carry vulnerabilities for many years before being identified. A recent such example is the popular Heart Bleed Bug in the Open SSL/TSL. In today’s world, where new software application are continuously being developed for a varied community of users; it’s highly unlikely to have software applications running without flaws. Attackers on computer system securities exploit these vulnerabilities and bugs and cause threat to privacy without leaving any trace. The most critical vulnerabilities are those which are related to the integrity of the software applications. Because integrity is directly linked to the credibility of software application and data it contains. Here I am giving solution of maintaining web applications integrity running on RADIUM by using daikon. Daikon generates invariants, these invariants are used to maintain the integrity of the web application and also check the correct behavior of web application at run time on RADIUM architecture in case of any attack or malware. I used data invariants and program flow invariants in my solution to maintain the integrity of web-application against such attack or malware. I check the behavior of my proposed invariants at run-time using Lib-VMI/Volatility memory introspection tool. This is a novel approach and proof of concept toward maintaining web application integrity on RADIUM.

L'aide à la décision se fonde sur l'observation d'un environnement évolutif dont on scrute les évènements. Ces évènements peuvent être de différentes natures, dont les connexions qui peuvent se créer au sein d'un réseau d'acteurs. L'observation des bases documentaires ne semble plus suffisante pour nourrir l'aide à la décision. En effet, les nouveaux outils de communication et de collaboration, dont l'usage se répand rapidement au sein des organisations, sont sources de nouvelles formes d'informations peu ou mal utilisées par les systèmes actuels d'aide à la décision des organisations. L'objectif de la thèse est de concevoir une plate-forme (modélisation et développement) pour les organisations permettant à leurs membres de bénéficier de médias sociaux et à leurs décideurs de bénéficier d'outils d'aide à la décision prenant en compte tous les types de ressources circulant sur cette plate-forme. / Decision support is partly based on the observation of a dynamic and mutating environment (Situation Awareness). The events of such environments can be of different types, including new relations created within a network of actors. We think classical documentary databases are no longer sufficient to serve situation awarness. The quick spread and adoption of new communication and collaboration tools in organizations, bring new kind of information, like the social network of the organization, which are currently not or badly taken in account by organizational decision support systems. The aim of this thesis is to design a platform, which provides to organizations both the social media to help their members to collaborate and the decision tools, which take into account all types of information exchanged in the platform.

A expansão e a popularização da World Wide Web têm incentivado o desenvolvimento de aplicações Web. É crescente a exigência por aplicações Web cada vez mais complexas, cujo desenvolvimento deve ser feito com qualidade e rapidez. Para orientar o ciclo de vida dessas aplicações, diversos métodos de desenvolvimento Web têm sido criados, além de ferramentas de apoio a sua utilização. O emprego de padrões de software no desenvolvimento de aplicações pode aumentar a produtividade e a qualidade. Com o objetivo de minimizar erros e facilitar a utilização, ferramentas de apoio à utilização de padrões têm sido desenvolvidas. No entanto, há uma carência por ambientes e ferramentas que apóiem o emprego de padrões durante as etapas do desenvolvimento de aplicações. Algumas das principais atividades para a garantia da qualidade de software são as de VV&T (Verificação, Validação e Teste). Algumas iniciativas de associação de teste a padrões têm sido estudadas com o intuito de minimizar o tempo despendido em VV&T. Neste trabalho é apresentado o ambiente Peônia com o intuito de apoiar o emprego de padrões de software durante as etapas de um processo de desenvolvimento. Para isso, os padrões de software podem ser previamente associados a essas etapas para que possam ser sugeridos durante a execução de um projeto. Além disso, o ambiente Peônia oferece a possibilidade de associar requisitos de teste a padrôes de software, para auxiliar nas atividades de VV&T. Também é proposto um Método Para Desenvolvimento Utilizando Padrões de Software, formalizando a técnica empregada no ambiente Peônia durante a execução de projetos, onde é incentivada a utilização de padrões de software na criação de artefatos e execução de fases e atividades. O método proposto estimula usuários a empregar padrões de software durante as etapas do processo de desenvolvimento, independentemente de utilizar, ou não, o ambiente Peônia / The expansion and popularization of the World Wide Web have encouraged the development of Web applications. There is an increasing demand for more complex Web applications, whose development must be done with quality and urgency. Several Web development methods have been created to guide the life-cycle of these applications, as well as tools supporting their use. The use of patterns in the development of software applications can enhance productivity and quality. In order to minimize errors and facilitate use, tools supporting the use of patterns have been developed. But there is a lack of environments and tools supporting the use of patterns during all stages of applications development. Some of the main activities to ensuring the quality of software are VV&T (Verification, Validation and Testing). Some initiatives associating test to patterns have been studied in order to minimize the time spent in VV&T. This work presents the Peony environment in order to support the use of software patterns during the development process stages. Therefore, the software patterns can be previously associated with these stages so they can be suggested during project execution. Moreover, the Peony environment offers the possibility to associate test requirements to software patterns, helping VV&T activities. It is also proposed a Method for Development Using Software Patterns, which formalises the technique employed in Peony environment during projects execution, encouraging the use of software patterns in the artifact creation, as well as during phases and activities execution. The proposed method encourages users to employ software patterns during the development process stages, regardless using, or not, the Peony environment

A literatura relata que a produção de aplicações Web apresenta problemas de baixa qualidade nas aplicações desenvolvidas, não-cumprimento de prazo e orçamento, desenvolvimento ad hoc, caótico e desestruturado. Acrescente-se que diferentes disciplinas e áreas do conhecimento, com abordagens e metodologias próprias, estão envolvidas com esse tipo de produção. Verifica-se que aplicações Web são desenvolvidas por profissionais de Software, Design, Comunicação e Mídia, entre outros. Uma área do conhecimento denominada Engenharia Web foi criada para enfocar estas questões, entretanto, ainda não está consolidada. O presente trabalho tem como objetivo apresentar diretrizes para a definição do processo de produção de aplicações Web, a partir de uma abordagem sistêmica deste, na qual as diferentes disciplinas, papéis e atividades são correlacionados na fase de concepção do projeto. Utiliza-se como método de pesquisa a revisão bibliográfica e, a partir desta, estudos de caso e pesquisa-ação para a formação de um modelo teórico. Este abstrai os aspectos fundamentais das principais disciplinas envolvidas na produção de aplicações Web e permite a instanciação de um processo adequado às particularidades de diferentes projetos. O trabalho identifica um espaço de projeto formado pelas dimensões Forma, Função, Informação e Tecnologia, relacionadas, por sua vez, às principais disciplinas envolvidas na produção de aplicações Web: Design, Engenharia de Software, Comunicação e Mídia. Conclui-se que, em função do(s) padrão(ões) de projeto utilizado(s), existe um enfoque mais adequado para o processo de produção, orientado sobre uma ou mais dimensões do espaço de projeto, bem como um papel centralizador, focado em uma disciplina, que permite o projeto evoluir mais rapidamente a um nível esperado de qualidade. / The literature relates that Web applications production presents problems like: low quality; ad-hoc, chaotic and unstructured process; budget and time overlap. Moreover, different disciplines and knowledge areas, with particular approaches and methodologies, contribute with this kind of production. It is verified that Web applications are developed by professionals of Software, Design Communication & Media, and others. A particular knowledge area called Web Engineering was developed to focus these questions; however, it is not consolidated yet. This work has as objective to present guidelines to the definition of the Web applications production process, directed by a systemic approach to this process, on that the different disciplines, roles and activities are correlated, in the conception phase. The research method utilizes bibliographic review and than, cases studies and action-research to create a theoretical model. This model abstracts the fundamental aspects of the involved disciplines in the Web applications production and enables a process instantiation, adequate to the particularities of different projects. The work identifies a design space formed by the dimensions Form, Function, Information and Technology, related to the main disciplines involved in Web applications production: Design (styling), Software Engineering and Communication & Media. It concludes that, guided by design patterns utilized, a best fit production process approach can be found, oriented on one or more dimensions of the design space, as well as a centralizer role, focused in a discipline. This approach allows to the project a quick evolution to the expected quality level.

Existem várias linguagens e plataformas que permitem a programação baseada no modelo de atores, uma solução elegante para a programação concorrente proposta há algumas décadas. Segundo esse modelo, implementa-se o programa na forma de uma série de agentes que são executados em paralelo e se comunicam entre si somente por meio da troca de mensagens, sem a necessidade de memória compartilhada ou estruturas tradicionais de sincronização como semáforos e mutexes. Uma das áreas nas quais esse modelo seria particularmente adequado é a programação de aplicações web, isto é, aplicações cujas lógicas de negócios e de dados residem num servidor e que são acessadas pelo usuário por intermédio de um navegador. Porém, existem muitos obstáculos ao desenvolvimento de aplicações desse tipo, entre eles a falta de linguagens e ferramentas que permitam integrar tanto o servidor quanto o cliente (navegador) no modelo de atores, as dificuldades de conversões de dados que se fazem necessárias quando o servidor e o cliente são desenvolvidos em linguagens diferentes, e a necessidade de contornar as dificuldades inerentes aos detalhes do protocolo de comunicação (HTTP). O PAWEB é uma proposta de uma plataforma para o desenvolvimento e execução de aplicações web que fornece a infraestrutura necessária para que tanto o lado cliente quanto o lado servidor do aplicativo hospedado possam ser escritos numa mesma linguagem (Python), e possam criar e gerenciar atores que trocam mensagens entre si,tanto local quanto remotamente, de maneira transparente e sem a necessidade de implementar conversões de dados ou outros detalhes de baixo nível. / There are several programming languages and platforms that allow the development of systems based on the actor model, an elegant solution for concurrent programming proposed a few decades ago. According to this model, the program is implemented in the form of several agents that run concurrently and only communicate amongst themselves through the exchange of messages, without the need for shared memory or traditional synchronization structures such as semaphores and mutexes. One of the areas where this model would be particularly appropriate would be the development of web applications, that is, applications whose business and database logic reside on the server and are accessed by the user by means of a web browser. However, there are several obstacles to the development of this type of application, amongst them the lack of languages and tools that allow for the integration of both the server and the client (browser) into the actor model, data conversion difficulties arising from using different programming languages on the server and the client, and the need to circumvent the inherent difficulties posed by the details of the communications protocol (HTTP). PAWEB is a proposal for an application development and execution platform that supplies the infrastructure needed so that both the server and client sides of the hosted application can be written in the same language (Python) and so that they may create and manage actors that exchange messages with one another, both locally and remotely, in a transparent manner and without the need to implement data conversions or other low-level mechanisms.