2010 12th IEEE International Symposium on Web Systems Evolution (WSE)最新文献

The lively dock: Web applications as live thumbnails 活泼的dock:作为活动缩略图的Web应用程序

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623581

J. Miettinen, T. Mikkonen, A. Taivalsaari

引用次数: 2

Web services in a global bank — An enterprise architecture perspective 全球性银行中的Web服务——企业体系结构视角

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623577

Carl F. Worms

引用次数: 3

A cluster grids based platform for digital copyright protection 基于集群网格的数字版权保护平台

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623564

Franco Frattolillo, F. Landolfi

{"title":"A cluster grids based platform for digital copyright protection","authors":"Franco Frattolillo, F. Landolfi","doi":"10.1109/WSE.2010.5623564","DOIUrl":"https://doi.org/10.1109/WSE.2010.5623564","url":null,"abstract":"While the advances in networking technologies actually enable mobility and ubiquity of access to computing resources located at different administrative domains, the progress in multimedia technologies has created large amounts of digital content that can be purchased and distributed on the Internet. Within this setting, the problem of the copyright protection of digital content has become a well-known research topic. This paper presents the architecture of a web software platform able to implement the copyright protection of digital content based on digital watermarking technology. The platform is structured as a service-oriented architecture composed of a federation of coordinated web entities and service providers which play distinct roles and interact within a trusted environment. Furthermore, the proposed architecture enables service providers to use a specific middleware to exploit the computing resources they need to provide their protection services. In fact, the middleware can aggregate computing resources directly available on the Internet as well as those belonging to multidomain, non-routable networks, thus enabling service providers to build internal computing environments arranged as cluster grids.","PeriodicalId":231763,"journal":{"name":"2010 12th IEEE International Symposium on Web Systems Evolution (WSE)","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-11-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128143844","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Matching demand and offer in on-line provision: A longitudinal study of monster.com 在线供给需求与供给匹配:对monster.com的纵向研究

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623576

A. Capiluppi, A. Baravalle

引用次数: 24

Techniques and tools for Rich Internet Applications testing 富互联网应用程序测试的技术和工具

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623569

Domenico Amalfitano, A. R. Fasolino, Porfirio Tramontana

引用次数: 19

Regular expressions on the web web上的正则表达式

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623572

Renáta Hodován, Zoltán Herczeg, Ákos Kiss

引用次数: 4

Investigation and analysis of malware on websites 网站恶意软件的调查与分析

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623567

Takeshi Yagi, N. Tanimoto, Takeo Hariu, M. Itoh

{"title":"Investigation and analysis of malware on websites","authors":"Takeshi Yagi, N. Tanimoto, Takeo Hariu, M. Itoh","doi":"10.1109/WSE.2010.5623567","DOIUrl":"https://doi.org/10.1109/WSE.2010.5623567","url":null,"abstract":"We investigated the distribution of malware on websites by constructing web honeypots carrying vulnerable web applications. With the diffusion of web services caused by the appearance of a new architecture known as cloud computing, a large number of websites have been used by attackers as hopping sites to attack other websites and user terminals. To construct hopping sites, many attackers force victims to download malware by using vulnerabilities in web applications. To protect websites from these attacks, conventional methods, such as using anti-virus software, filter files from attackers using pattern files, which are generated by analyzing conventional malware files collected by security vendors. However, it is difficult to define malware since software files become malicious depending on the situation. In addition, it is difficult to detect malware, which is different from known malware analyzed by security vendors. Recently, variations in malware continue to increase as new types of malware constantly appear. To reveal the actual situation and critical detection ratio of such conventional methods, we investigated the detection ratio of anti-virus software by using malware collected by web honeypots, which collect attacks on websites by using actual vulnerable web applications. Our investigation revealed that anti-virus software fail to detect many malware files, and that traffic patterns to web honeypots are useful for detecting malware files on websites.","PeriodicalId":231763,"journal":{"name":"2010 12th IEEE International Symposium on Web Systems Evolution (WSE)","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-11-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115519501","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Web applications design evolution with UWA 使用UWA的Web应用程序设计演变

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623570

M. Bernardi, Marta Cimitile, Damiano Distante, F. Mazzone

{"title":"Web applications design evolution with UWA","authors":"M. Bernardi, Marta Cimitile, Damiano Distante, F. Mazzone","doi":"10.1109/WSE.2010.5623570","DOIUrl":"https://doi.org/10.1109/WSE.2010.5623570","url":null,"abstract":"This paper presents a semi-automatic approach to Web applications design evolution which leverages the Ubiquitous Web Applications (UWA) design framework, a methodology and a set of models and tools for the user-centered design of multi-channels and context-aware Web applications. The approach is based on a two-step redesign process: first a semi-automatic reverse modeling phase analyzes the html pages of the application front-end to abstract a model of the “as-is” design, according to the UWA formalism; second, a forward design phase starts from the recovered models and the (new) requirements available for the application to identify lacks and opportunities of improvements in the “as-is” design and produce the “to-be” version of it. The reverse modeling phase applies clustering and clone detection techniques and is supported by an Eclipse IDE environment. The forward design phase is supported by a set of UWA modeling tools which are built on top of the Eclipse Graphical Editing Framework (GEF) and of the Eclipse Graphical Modeling Framework (GMF) and that allow developers to evolve the recovered models. The results from a concrete case study to assess the validity of the redesign approach are also presented and discussed.","PeriodicalId":231763,"journal":{"name":"2010 12th IEEE International Symposium on Web Systems Evolution (WSE)","volume":"53 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-11-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121014182","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

A performance engineering method for web applications web应用程序的性能工程方法

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623583

Marin Litoiu

引用次数: 5

Multilingual web sites: Internationalized Domain Name homograph attacks 多语言网站:国际化域名同形词攻击

2010 12th IEEE International Symposium on Web Systems Evolution (WSE) Pub Date : 2010-11-09 DOI: 10.1109/WSE.2010.5623562

Johnny Al Helou, S. Tilley

{"title":"Multilingual web sites: Internationalized Domain Name homograph attacks","authors":"Johnny Al Helou, S. Tilley","doi":"10.1109/WSE.2010.5623562","DOIUrl":"https://doi.org/10.1109/WSE.2010.5623562","url":null,"abstract":"Homograph attacks are a very common type of security vulnerability on the Web. The attack aims to hide the domain name origin by switching some letters in the URL. As the Web evolves beyond the traditional base of English-speaking users, this kind of threat will increase significantly with the use of non-Latin scripts in the entire domain name. The recent introduction of Internationalized Domain Names (IDN) country-code Top Level Domains (ccTLDs) adaptation has made this new homograph attack possible. This paper outlines some of the possible security risks from using non-Latin scripts in the domain name, using examples drawn from Arabic, including the confusion from transforming the non-Latin scripts to ASCII compatible Encoding (ACE). The paper describes some of the existing defenses against IDN homograph attacks, such as white listing of domains and algorithmic analysis of the scripts in the URL. A preliminary design for a new client-side approach to the problem is also outlined. The approach focuses on drawing the user's attention to possible threats when browsing a non-Latin Web site. Some of the techniques being considered include Punycode generation and comparison, highlighting confusing letters (including increasing font sizes for Arabic script), and pre-fetching thumbnail images of Web pages. These solutions will not prevent the attack, but they can provide a visual defense to the user in an unobtrusive and easily adoptable manner.","PeriodicalId":231763,"journal":{"name":"2010 12th IEEE International Symposium on Web Systems Evolution (WSE)","volume":"32 2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-11-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115356379","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 14