SOS-WS Host Shield: A sketch-based Service Oriented Shield against web application business layer IDS attacks

2020 ◽  
Vol 153 ◽  
pp. 626-631
Author(s):  
N. Balasubramanian ◽  
A. Askarunisa ◽  
A. Ruba
Author(s):  
Yusuf Lateef Oladimejia

The realisation of Service-Oriented Architecture (SOA) to communicate data between systems running on different platforms lack an organised framework to capture the essential elements required for successful interoperability between web applications and their services. In this work, a SOA for Data Interoperability in Web Applications (SOADIWA) was designed. The architecture of SOADIWA was based on five layers, namely Web Application Layer (WAL), Quality of Service Assurance Certifier Layer (QoSACL), Web Service Layer (WSL), Visualization Input Layer (VIL) and Visualization Output Layer (VOL). In WAL, the Service Requester (SR) initiates a request for data from the Service Provider (SP) through the QoSACL to provide appropriate website via WSL for rendering of services which must be accepted, processed and returned for a particular need in VIL. The requested data is filtered in VIL for data exploration and analysis in VOL using context-sensitive visualization techniques. The purpose of QoSACL is to check and verify the claims made by the SP about its quality of service. This enabled the SR to choose the service that satisfied its needs. The implementation comprised of Java Script, Microsoft Visual Studio 2017 and NuGet packages; while the experiment was simulated on LoadUI pro application. Standard metrics such as Optimal Performance (OP) and Phased Effort Distribution (PED) were developed to test SOADIWA. These results conformed to basic web service interoperability. The work led to the integration of a host of techniques towards the creation of a novel tool that is useful in web domain using SOA approach.


Author(s):  
Sam Chung ◽  
Conrado Crompton ◽  
Yan Bai ◽  
Barbara Endicott-Popovsky ◽  
Seung-Ho Baeg ◽  
...  

This chapter explores using service-oriented computing to reengineer non-secure legacy software applications to create new secure target applications. Two objectives of this chapter are: (1) to analyze the architectural changes required in order to adopt new web technologies and cope with resultant vulnerabilities in source code; and (2) to measure the level of effort required to modernize software by adopting new web technologies and adding security countermeasures. To meet these objectives, a model-driven Scrum for Service-Oriented Software Reengineering (mScrum4SOSR) methodology was chosen and applied to a reengineering project. Scrum is employed to manage the reengineering project, as well as to measure implementation effort related to the modernization process. Further, a re-documentation technique called 5W1H Re-Doc is used to re-document the non-secure software application at a high level of abstraction in order to help project participants comprehend what is needed to identify candidate services for service-oriented reengineering. Case studies with and without security features are created for different types of applications - a desktop graphical user interface, a web application, a web services application, a restful web services application, and an enterprise service bus application.


2009 ◽  
Vol 18 (02) ◽  
pp. 225-260 ◽  
Author(s):  
VALERIA DE CASTRO ◽  
ESPERANZA MARCOS ◽  
ROEL WIERINGA

In recent years, the automation of business processes has become one of the most prominent and promising uses of Web service technology. Consequently several languages have been created for the execution of business processes, making it possible to define new and more complex services or business processes which are implemented for example by means of Web service composition. Nevertheless, these kinds of languages are not suitable for use in the early stages of the development process of information systems. Special methodologies or techniques are therefore necessary to allow systems analysts to understand services from a business point of view, while facilitating the design and development of Web service composition. In this paper, we present a service-oriented approach to information system development that starts by identifying, through business modeling, the services required by the customers of a business, to make it possible to create a Web service composition model. This model will facilitate the transformation to specific languages for business process execution, thereby reducing the development efforts made in service-oriented applications. The method proposed is illustrated by means of a Web application for the management of medical images, which we have taken as a case study.


2011 ◽  
Vol 13 (5) ◽  
pp. 15-21 ◽  
Author(s):  
Haluk Demirkan ◽  
Robert R. Harmon ◽  
Michael Goul

Author(s):  
Humberto Cortés ◽  
Antonio Navarro

With the advent of multitier and service-oriented architectures, the presentation tier is more detached from the rest of the web application than ever. Moreover, complex web applications can have thousands of linked web pages built using different technologies. As a result, the description of navigation maps has become more complex in recent years. This paper presents NMMp, a UML extension that: (i) provides an abstract vision of the navigation structure of the presentation tier of web applications, independently of architectural details or programming languages; (ii) can be automatically transformed into UML-WAE class diagrams, which can be easily integrated with the design of the other tiers of the web application; (iii) encourages the use of architectural and multitier design patterns; and (iv) has been developed according to OMG standards, thus facilitating its use with general purpose UML CASE tools in industry.


Author(s):  
Maria Gribanova-Podkina

The purpose of the study is to demonstrate the diversity of solutions on the issue of connecting to a database, including a description of the developed connection controller class, as well as various ways to create connection pools on a web server and application servers. The article discusses the practical issues of using JDBC technology when building a Java web application. In the examples, the presentation and business layer of the application are developed using JSP-pages and servlets, the database operates on the MySQL platform. The described methods for creating and configuring a connection pool are shown on the example of the ApacheTomcat web server and the GlassFish application server. The question of optimizing database connections in Java applications remains open, despite the diversity of solutions. The study examines and proposes methods for constructing classes of connectors, various methods for creating pool connections, and describes the results of solving problems arising from the implementation of the described techniques. A detailed classification of ways to connect to the database is given.


Author(s):  
Jayashree K ◽  
Chithambaramani Ramalingam

Enterprise Service Bus is an infrastructure to facilitate Service Oriented Architecture (SOA). SOA has gained a lot of attention over the most recent years and has become the de-facto standard for web application and software component integration. Web services are the prominent model for interoperable applications across heterogeneous systems and electronic business which use SOA and it has been used in various applications. The web services available on the web is increasing day by day, hence web service discovery is becoming a difficult and time consuming task. To discover services, clustering web services is an efficient approach. It is also necessary to compose several web services in order to achieve the user's goal. The chapter presents the background of web services and the various data mining techniques used for clustering web services. The chapter presents the various web services clustering method and the related work that discusses the various techniques to cluster the web services will also be addressed.


Water ◽  
2021 ◽  
Vol 13 (13) ◽  
pp. 1850
Author(s):  
Giovanni Romero Bustamante ◽  
Everett James Nelson ◽  
Daniel P. Ames ◽  
Gustavious P. Williams ◽  
Norman L. Jones ◽  
...  

We present the design and development of an open-source web application called Water Data Explorer (WDE), designed to retrieve water resources observation and model data from data catalogs that follow the WaterOneFlow and WaterML Service-Oriented Architecture standards. WDE is a fully customizable web application built using the Tethys Platform development environment. As it is open source, it can be deployed on the web servers of international government agencies, non-governmental organizations, research teams, and others. Water Data Explorer provides uniform access to international data catalogs, such as the Consortium of Universities for the Advancement of Hydrologic Science (CUAHSI) Hydrologic Information System (HIS) and the World Meteorological Organization (WMO) Hydrological Observing System (WHOS), as well as to local data catalogs that support the WaterOneFlow and WaterML standards. WDE supports data discovery, visualization, downloading, and basic data interpolation. It can be customized for different regions by modifying the user interface (i.e., localization), as well as by including pre-defined data catalogs and data sources. Access to WDE functionality is provided by a new open-source Python package called “Pywaterml” which provides programmable access to WDE methods to discover, visualize, download, and interpolate data. We present two case studies that access the CUAHSI HIS and WHOS catalogs and demonstrate regional customization, data discovery from WaterOneFlow web services, data visualization of time series observations, and data downloading.


Author(s):  
Mladen Đurić

Geoportal is an indispensable part of the national spatial data infrastructure and a central point of access to spatial data. The paper presents the development of a geoportal based on the principles of service-oriented architecture. Open source frameworks and libraries were used to create geoportal. The aim of the paper is to present a partially different approach to the development of geoportals, based on the modern principles of web application development. The case study was conducted for the cadastral municipality of Brod, the municipality of Brod, Republika Srpska, Bosnia and Herzegovina.


Sign in / Sign up

Export Citation Format

Share Document