2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06)最新文献

Problems Modeling Web Sites and User Behavior 问题建模网站和用户行为

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.16

S. Rugaber, Nissim Harel, Srihari Govindharaj, Dean F. Jerding

引用次数: 5

Eliminating SQL Injection Attacks - A Transparent Defense Mechanism 消除SQL注入攻击——一个透明的防御机制

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.9

M. Muthuprasanna, Ke Wei, S. Kothari

{"title":"Eliminating SQL Injection Attacks - A Transparent Defense Mechanism","authors":"M. Muthuprasanna, Ke Wei, S. Kothari","doi":"10.1109/WSE.2006.9","DOIUrl":"https://doi.org/10.1109/WSE.2006.9","url":null,"abstract":"The widespread adoption of Web services as an instant means of information dissemination and various other transactions, has essentially made them a key component of today's Internet infrastructure. Web-based systems comprise both of infrastructure components and of application-specific code. Various organizations have started extensively deploying intrusion detection/prevention systems and Firewalls as a means of securing their vital installations. However, very little emphasis is laid on securing the applications that run on these systems, apart from frequent updates and patching. SQL-injection attacks are a class of attacks that many of these systems are highly vulnerable to, and there is no known fool-proof defense against such attacks. In this paper, we propose a technique, which combines static application code analysis with runtime validation to detect the occurrence of such attacks. The deployment of this technique eliminates the need to modify source code of application scripts, additionally allowing seamless integration with currently-deployed systems. We provide various optimizations improving overall efficiency, and also preliminary evaluation of prototype developed","PeriodicalId":174396,"journal":{"name":"2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06)","volume":"37 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-09-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114784322","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 53

WA-UML: Towards a UML extension for modelling Adaptive Web Applications WA-UML:为自适应Web应用程序建模的UML扩展

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.20

Raoudha Ben Djemaa, Ikram Amous, A. B. Hamadou

引用次数: 5

Model Driven Evolution of Network-Centric Applications: Perspectives, Challenges, and Issues 以网络为中心的应用的模型驱动进化:观点、挑战和问题

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.13

K. Kontogiannis

{"title":"Model Driven Evolution of Network-Centric Applications: Perspectives, Challenges, and Issues","authors":"K. Kontogiannis","doi":"10.1109/WSE.2006.13","DOIUrl":"https://doi.org/10.1109/WSE.2006.13","url":null,"abstract":"Model-driven techniques have been proposed and promoted by the Software Engineering community over the past few years as a mechanism for streamlining the design, implementation and evolution of large software applications. The basic idea behind model-driven techniques is that, design artifacts of large software applications can be represented as a collection of models which can be consequently transformed and evolved to generate specific design artifacts and even source code that complies with specific programmatic paradigms and patterns. Even though model-driven frameworks have caught the attention of the software engineering community as a way to increase programmers' productivity and overall system robustness through the disciplined manipulation and transformation of models and ultimately code generation, they have remained so far only in the form of \"guidelines\" or \"standard practices\". In this respect, important questions regarding to what types of models are required for system representation, how transformations are encoded and enacted, how model constraints are denoted and validated, and how source code is generated, is left to software vendors, software architects and software developers to further design and implement. In this keynote presentation we will focus on the challenges, issues, emerging research topics and practical examples pertaining to the use of model-driven techniques for the design, analysis and evolution of network-centric, web-based applications. Some of these challenges in such systems include the use of multi-language paradigms, the problem of maintaining consistency between various models during system evolution, dealing with underlying technology changes, and facilitating end-product customizability.","PeriodicalId":174396,"journal":{"name":"2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06)","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-09-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123635654","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Mining for Co-Changes in the Context of Web Localization Web本地化背景下的协同变化挖掘

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.12

Huzefa H. Kagdi, Jonathan I. Maletic

引用次数: 2

Information-Hiding URLs for EasierWebsite Evolution 信息隐藏url为更容易的网站发展

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.10

C. Song, Vibha Sazawal

{"title":"Information-Hiding URLs for EasierWebsite Evolution","authors":"C. Song, Vibha Sazawal","doi":"10.1109/WSE.2006.10","DOIUrl":"https://doi.org/10.1109/WSE.2006.10","url":null,"abstract":"Many common elements of URLs do not adhere to the principle of information hiding. For example, filename extensions and parameter names can reveal volatile implementation details. As a result, when Website implementations change, links between pages break. Bookmarks and code that generates URLs often break as well. In this paper, we present two tools for information-hiding URLs. An information-hiding URL uses an alias to identify a Web resource and appends parameter values into the hierarchical structure of the URL. The InformationHidingFilter uses a Java Servlet filter to facilitate the use of information-hiding URLs with JSP/Servlet Web applications. Given a request, the filter identifies the JSP or Servlet being requested and identifies parameter values contained in the information-hiding URL. Required values not provided in the URL are automatically substituted with default values specified by the Web developer. Thus, old links remain valid even when the Website changes and new parameters have been added to the page. The InformationHidingChecker helps Web developers adhere to information hiding by helping them identify JSPs or Servlets that lack URL information for the InformationHidingFilter or lack default values for parameters. We also discuss the performance cost of using information-hiding URLs","PeriodicalId":174396,"journal":{"name":"2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-09-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129221611","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

WSDLTest - A Tool for Testing Web Services 测试Web服务的工具

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.24

H. Sneed, Shihong Huang

引用次数: 70

Ontology-based Program Comprehension Tool Supporting Website Architectural Evolution 支持网站架构演变的基于本体的程序理解工具

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.15

Yonggang Zhang, R. Witte, J. Rilling, V. Haarslev

引用次数: 13

Knowing Your Online Readership, Organizing Your Communication 了解你的在线读者，组织你的交流

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.11

Lorenzo Cantoni

{"title":"Knowing Your Online Readership, Organizing Your Communication","authors":"Lorenzo Cantoni","doi":"10.1109/WSE.2006.11","DOIUrl":"https://doi.org/10.1109/WSE.2006.11","url":null,"abstract":"Many times a design choice has a deep impact onto future website management activities, which in their turn mean allocating resources. These choices are to be verified, confirmed or refused not only against design quality and hypotheses, but mostly against actual usages. The actual usages of a website are of the utmost importance to infer and understand interests, goals and styles of users, and are to be interpreted in order to maintain, refine and enhance the website itself. It is neither a one-off nor a one-way path, but a continuous dialogue among different people and stakeholders, requiring endless hypothesizing and testing of hypotheses (e.g.: did they leave that page soon because it wasn't relevant to them, or because they found it so relevant to print it out for further reading? Did they leave the website after accessing that page because their interest was fully satisfied, or because they didn't find anything useful? Is a page seldom accessed because it is not that interesting or because there is a cumbersome navigation? etc.). The answers to those questions force to re-think communication strategies, as well as all other design dimensions. Moreover, an online application yields to many further exchanges, like buying, voting, subscribing, chatting, gambling, reserving, sending emails etc., activities that leave traces offering insights on our readership/users/clients, and need to be interpreted and to feed back into the website maintaining and improving processes.","PeriodicalId":174396,"journal":{"name":"2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06)","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-09-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114628863","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Web Trends and Technology 网络趋势与技术

2006 Eighth IEEE International Symposium on Web Site Evolution (WSE'06) Pub Date : 2006-09-23 DOI: 10.1109/WSE.2006.21

S. Tilley

引用次数: 3