Securing Open Banking with Model-View-Controller Architecture and OWASP

In 2015, the European Union passed the PSD2 regulation, with the aim of transferring ownership of bank accounts to the private person. As a result, Open Banking has become an emerging concept, which provides third-party financial service providers open access to bank APIs, including consumer banking, transaction, and other financial data. However, such openness may also incur many security issues, especially when the data can be exposed by an API to a third party. Focused on this challenge, the primary goal of this work is to develop one innovative web solution to the market. We advocate that the solution should be able to trigger transactions based on goals and actions, allowing users to save up money while encouraging positive habits. In particular, we propose a solution with an architectural model that ensures clear separation of concern and easy integration with Nordea’s (the largest bank in the Nordics) Open Banking APIs (sandbox version), and a technological stack with the microframework Flask, the cloud application platform Heroku, and persistent data storage layer using Postgres. We analyze and map the web application’s security threats and determine whether or not the technological frame can provide suitable security level, based on the OWASP Top 10 threats and threat modelling methodology. The results indicate that many of these security measures are either handled automatically by the components offered by the technical stack or are easily preventable through included packages of the Flask Framework. Our findings can support future developers and industries working with web applications for Open Banking towards improving security by choosing the right frameworks and considering the most important vulnerabilities.

SISTEM MONITORING PERKULIAHAN MENGGUNAKAN POLA DESAIN MVC DI POLITEKNIK NEGERI MADIUN

Dengan berubahnya status menjadi Politeknik Negeri Madiun (PNM), maka PNM menjadi tambahan referensi bagi para lulusan SMA/SMK sederajad untuk melanjutkan pendidikan tingginya. PNM sebagai satu-satunya perguruan tinggi negeri yang ada di karasidenan Madiun pada Tahun Akademik 2014/2015 telah memiliki 1.031 mahasiswa dan 120 dosen yang akan terus meningkat seiring meningkatnya sarana dan prasarana perkuliahan. Selain sarana dan prasarana yang terus meningkat, kebijakan-kebijakan baru telah lahir dan memerlukan sebuah instrumen yang dapat mendukung jalannya kebijakan tersebut guna menciptakan kegiatan belajar mengajar yang kondusif di PNM. Salah satu intrumen yang dibutuhkan adalah sebuah sistem yang dapat memonitor jadwal perkuliahan di PNM secara real time yang terintegrasi dengan aplikasi-aplikasi lainnya yang sudah ada. Dengan kondisi seperti itu maka pada penelitian terapan ini akan dikembangkan sebuah sistem informasi monitoring perkuliahan di PNM yang mengadopsi pola desain MVC (Model-View-Controller). Pola desain MVC menerapkan prinsip pembagian fokus (Separation of Concern) yang membagi-bagikan kode ke dalam beberapa bagian. Masing-masing bagian kode ini memiliki tanggung jawab masing-masing, dimana akan mudah untuk dikembangkan dan diintegrasikan dengan aplikasi lainnya yang berbeda platform. Sistem yang dibangun disimpan di server PNM sehingga dapat dipantau oleh civitas akademika PNM secara real time dan online serta divisualisasikan pada televisi layar lebar yang dipasang di area gedung perkuliahan. Para dosen dapat berinteraksi dengan sistem ini terkait agenda matakuliah yang diampunya menggunakan gadget yang dimilikinya. Sistem tersebut juga berhasil diintegrasikan dengan aplikasi Single Sign On (SSO) PNM yang berbeda platform sehingga pengelolaannya menjadi terintegrasi oleh satu akun otentifikasi

The Effect of Overlapping Area on Ping-Pong Handover in LTE Networks

Aspect Oriented Programming (AOP) is a technique used to enhance the separation of concern in software design and implementation. To implement AOP developers most commonly use AspectJ, an extension of the Java language. In order to represent the separation of concerns a new design technique is needed for modeling of aspects. Aspect Oriented Design language (ASDL) is a design notation could build on the existing design language UML. It is capable of supporting many aspects-oriented languages. This research aims to investigate where developers can use aspect-oriented programming in the software development process. This includes how to identify Aspects in the design stage, then how they can be applied in the implementation process in software development. This will lead to improve modularity and reusability of the software. The paper will be a position paper abut Aspect Oriented Software Design, also will investigate several case studies of the design and implementation of a software application that shows how we can identify the Aspect in the process.

IMPROVING THE DESIGN AND IMPLEMENTATION OF SOFTWARE SYSTEMS USES ASPECT ORIENTED PROGRAMMING

Aspect Oriented Programming (AOP) is a technique used to enhance the separation of concern in software design and implementation. To implement AOP developers most commonly use AspectJ, an extension of the Java language. In order to represent the separation of concerns a new design technique is needed for modeling of aspects. Aspect Oriented Design language (ASDL) is a design notation could build on the existing design language UML. It is capable of supporting many aspects-oriented languages. This research aims to investigate where developers can use aspect-oriented programming in the software development process. This includes how to identify Aspects in the design stage, then how they can be applied in the implementation process in software development. This will lead to improve modularity and reusability of the software. The paper will be a position paper abut Aspect Oriented Software Design, also will investigate several case studies of the design and implementation of a software application that shows how we can identify the Aspect in the process.

DEVELOPING DISTRIBUTED SERVICES USING AN ASPECT ORIENTED MODEL DRIVEN FRAMEWORK

To manage the development of cooperative information systems that support the dynamics and mobility of modern businesses, separation of concern mechanisms and abstractions are needed. Model driven development (MDD) approaches utilize abstraction and transformation to handle complexity. In MDD, specifying transformations between models at various levels of abstraction can be a complex task. Specifying transformations for pervasive system services that are tangled with other system services is particularly difficult because the elements to be transformed are distributed across a model. This paper presents an aspect oriented model driven framework (AOMDF) that facilitates separation of pervasive services and supports their transformation across different levels of abstraction. The framework facilitates composition of pervasive services with enterprise services at various levels of abstraction. The framework is illustrated using an example in which a platform independent model of a banking service is transformed to a platform specific model.

Software Metrics, Information and Entropy

This chapter describes the foundation and properties of object-oriented software measures. Many software measures for object-oriented applications have been developed and tested in the development environment. However, the process of defining new measures is still alive. The reason for such development lies in difficulties associated with understanding and maintaining object-oriented applications. It is still difficult to relate the measures to the phenomena we want to improve. Do our measurements indicate problems in reliability, maintenance, or too much complexity of some portions of the application? In order to reduce the complexity of software, new development methodologies and tools are being introduced. An example of the new approach to development is separation of concern. The tools, such as Aspect/J (Kiezales et al., 1997) or Hyper/J (Ossher & Tarr, 1998), facilitate the development process. There does not seem to be a sound metrics suite to measure complexity and efficiency of applications developed and coded with Aspect/J or Hyper/J. In this chapter, we attempt to review the current research into object-oriented software metrics and suggest theoretical framework for complexity estimation and ranking of compositional units in object-oriented applications developed with Hyper/J.