• Title/Summary/Keyword: Web Applications Design

Search Result 367, Processing Time 0.033 seconds

A Study of Web Application Security Quality Architecture Management Process referenced ISO/IEC9000 Model (ISO/IEC9000모델을 참조한 웹 애플리케이션 보안품질 관리체계 설계)

  • Kim, Jeom-Goo;Noh, Si-Choon;Lee, Do-Hyeon
    • Convergence Security Journal
    • /
    • v.12 no.3
    • /
    • pp.11-17
    • /
    • 2012
  • According to ISO/IEC 9000, quality to satisfy users' requirements when using the product or service is defined as the characteristics of the synthesized concept. Secure web application coding information systems with the reliability and quality of service is one of the determining factor. Secure coding in order to achieve the quality based on the model is necessary. The reason is that the security is in quality properties in the range of non-functional requirements that necessitates. Secure coding for the design of quality systems based on the quality of the definition of quality attributes, quality requirements, quality attribute scenarios are defined, and must be set. To this end, referring to IEEE 1061 quality model for web application, quality model structure is developed. Secure web application architecture design is composed of coding quality of the model systems, web applications draw interest to stakeholders, decision drivers secure coding architecture, quality attributes, eliciting quality requirements of the security settings, creating web application architecture descriptions and security framework.

Design of a Role-Based Access Control Model for Web-based Applications (웹 기반 응용을 위한 직무 기반 접근 제어 모델의 설계)

  • Lee, Ho
    • Convergence Security Journal
    • /
    • v.2 no.2
    • /
    • pp.59-66
    • /
    • 2002
  • The access controls are the methods which are generally used in such systems as computer operating systems, workflow systems, information security systems and etc.. In the paper, is proposed a role-based access control model which not only has fundamental security functions such as security, integrity and flow control, but also meets the access control requirements of role-based social organizations. The proposed role-based access control model is designed in order to perform its functions in simple and secure way, largely in the environment of web-based applications.

  • PDF

Development of Web-based High Throughput Computing Environment and Its Applications (웹기반 대용량 계산환경 구축 및 응용사례)

  • Jeong, Min-Joong;Kim, Byung-Sang
    • Proceedings of the Computational Structural Engineering Institute Conference
    • /
    • 2007.04a
    • /
    • pp.719-724
    • /
    • 2007
  • Many engineering problems often require the large amount of computing resources for iterative simulations of problems treating many parameters and input files. In order to overcome the situation, this paper proposes an e-Science based computational system. The system exploits the Grid computing technology to establish an integrated web service environment which supports distributed high throughput computational simulations and remote executions. The proposed system provides an easy-to-use parametric study service where a computational service includes real time monitoring. To verify usability of the proposed system, two kinds of applications were introduced. The first application is an Aerospace Integrated Research System (e-AIRS). The e-AIRS adapts the proposed computational system to solve CFD problems. The second one is design and optimization of protein 3-dimensional structures.

  • PDF

Variable-Gain PID Control of Longitudinal Tension in Web Transport System (연속공정 시스템에서의 장력의 가변이득 PID 제어)

  • 신기현
    • Transactions of the Korean Society of Mechanical Engineers
    • /
    • v.19 no.3
    • /
    • pp.724-730
    • /
    • 1995
  • Fixed-gain and variable-gain PID control of tension in the winding section of a simple web transport system were evaluated. An open-loop mathematical model for the web transport system was derived and used for the design of the PID controllers. The winding roll radius is a timevarying parameter in the model. The fixed-gain PID controller designed at a particular instant of time could not meet the desired specifications, whereas the variable-gain PID controller could produce accurate tension control in the winding section. An advantage of the variable-gain control is its simplicity. This approach is easy to implement and shows promise for applications where the time-varying parameters are easily measured.

Development of Embedded Web Server System Using a Real-Time OS (실시간 운영체제를 이용한 내장형 웹서버 시스템 개발)

  • 정명용;문승빈;송상훈
    • 제어로봇시스템학회:학술대회논문집
    • /
    • 2000.10a
    • /
    • pp.223-223
    • /
    • 2000
  • Embedded system area has brought an innovation and has been spread rapidly by the growth of the Internet, wireless telephony and multimedia recently. Many embedded systems are required to be real-time systems in that it needs multi-tasking and priority based scheduling. This paper introduces a real-time system that was developed with web server ability for control and monitoring system employing a real-time operating system. It discusses the design model, structure, and applications of web server system. We used SNDS100 board which has a 32-bit RISC microcontroller of ARM7TDMI core as a hardware platform. MicroC/OS kernel was used as Real-time operating system that supports a preemptive and multitasking functions. We developed a hierarhchical control and monitoring system that not only reduced system and management costs, but also enhanced reusability and portability.

  • PDF

A Design of Service Migration Mechanism in HTML5-based Convergence Service (HTML5 기반 융합 서비스의 서비스이동 메커니즘 설계)

  • Choi, Hun-Hoi;Song, Eun-Ji;Kim, Geun-Hyung;Kim, Hwa-Sook;Cho, Ki-Seong
    • Journal of Korea Multimedia Society
    • /
    • v.15 no.4
    • /
    • pp.540-551
    • /
    • 2012
  • Recently, the W3C has developed the HTML5 standard which gives the basis for providing various web applications on the web environments. Because of the advent of the smart devices and the broadband wireless network, users can accesse the web applications on the smart devices at anytime and anywhere. In addition, the demand on the multiscreen services, which enables users to use the appropriate device to their situation, has increased, since users have various smart devices. In this paper, we propose the grouping mechanism of web objects on the HTML5 based web platform, the extraction mechanism of the web object information which is used to create the web object on other devices, and the web object creation mechanism based on the received web object information. In addition, we propose the web service migration architecture between devices on the open web platform and implement the grouping, extraction and creation mechanism of the web objects on the test web document and generic web document with Chrome extension. Finally, we implement the delivery mechanism of the web object information between devices using the node.js and the WebSocket technologies.

An Object-Oriented Analysis and Design Methodology for Security of Web Applications (웹 응용 보안을 위한 객체지향 분석·설계 방법론)

  • Joo, Kyung-Soo;Woo, Jung-Woong
    • Journal of Internet Computing and Services
    • /
    • v.14 no.4
    • /
    • pp.35-42
    • /
    • 2013
  • Nowadays many tasks are performed using the Web. Accordingly, many web-based application systems with various and complicated functions are being requested. In order to develop such web-based application systems efficiently, object-oriented analysis and design methodology is used, and Java EE(Java Platform, Enterprise Edition) technologies are used for its implementation. The security issues have become increasingly important. For such reasons, Java EE provides mechanism related to security but it does not provide interconnections with object-oriented analysis and design methodology for developing web application system. Consequently, since the security method by Java EE mechanism is implemented at the last step only, it is difficult to apply constant security during the whole process of system development from the requirement analysis to implementation. Therefore, this paper suggests an object-oriented analysis and design methodology emphasized in the security for secure web application systems from the requirement analysis to implementation. The object-oriented analysis and design methodology adopts UMLsec, the modeling language with an emphasis on security for the requirement analysis and system analysis & design with regard to security. And for its implementation, RBAC (Role Based Access Control) of servlet from Java EE technologies is used. Also, the object-oriented analysis and design methodology for the secure web application is applied to online banking system in order to prove its effectiveness.

Design and Implementation of a Mail Browser that can control Data-Flow on the Web (Web에서 데이터 흐름제어가 가능한 Mail Browser의 설계 및 구현)

  • Park, Gyu-Seok;Kim, Seong-Hu
    • The Transactions of the Korea Information Processing Society
    • /
    • v.6 no.10
    • /
    • pp.2752-2763
    • /
    • 1999
  • On account of the text based mail system has it's limit to support multimedia applications, GUI based mail system platform was developed to control document flow and automatize information process. The existing mail systems's to transmit data must need additional functions to automate document flow control. The platform of document flow control is deeply related to EDMAS(Electronic document Management System), workflow, Electronic Banking, DMS(Document Management System) automation, so it needs an ability to control proper data and document correctly. To resolve this problems, we are need of browser and engine to design work flow and to control documents flow. In this paper, we develope a mail browser to design document flow by follow user's requirements. This system can generate executive script code for document flow, and we add the function of workflow and process management to automatize the document flow in this system, and then we implement this Data flow engine.

  • PDF

Design of an Architecture Pattern for Ajax-based Web Applications (Ajax기반 웹 응용을 위한 아키텍쳐 패턴 설계)

  • Kim, Hwang-Man;Kim, Yong-Goo
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.36 no.9B
    • /
    • pp.1057-1065
    • /
    • 2011
  • In order to achieve the ease of development and to facilitate the maintenance of codes for complex Ajax (Asynchronous Java Script and XML)-based web clients, this paper proposes a CVC (Communicator-View-Controller) architecture pattern by modifying the well-known MVC (Model-View-Controller) framework. By composing the Communicator of codes for asynchronous data retrieval, which is common to Ajax-based clients, the proposed architecture pattern is able to cut out the graphic design related codes to constitute the View layer. Based on such declarative generalization of complex web-client codes, Ajax-related codes can be easily modularized and efficiently reused in development and maintenance stages, and graphics design can be done separately regardless of the other business logic related codes development, resulting in highly efficient development and maintenance of complex Ajax-based web clients.

Collaborative B2B architecture design using Web services (웹서비스를 이용한 Collaborative B2B 아키텍처 설계)

  • 김태운;김승완;한용호
    • Journal of Intelligence and Information Systems
    • /
    • v.9 no.1
    • /
    • pp.211-225
    • /
    • 2003
  • This paper aims at the design of collaborative architecture for business to business (B2B) applications based on Web service protocol. As different business processes should be interfaced in the B2B environment collaboration is important fur the success of B2B implementation. For the development tools, XML, Web services and ASP.NET were adopted Web services are emerging to provide a systematic and extensible framework for application-to-application interaction. The Web services framework is divided into three areas; communication protocols, service descriptions and Web discovery. Web services such as SOAP, WSDL and UDDI correspond to the three areas respectively. ASP.NET is utilized which corresponds to the component and service set located in the top layer of .NET. For the service of product category and product details, Web service architecture was implemented based upon the SQL server database.

  • PDF