• Title/Summary/Keyword: Web application analysis

Search Result 608, Processing Time 0.032 seconds

HTTP Request - SQL Query Mapping Scheme for Malicious SQL Query Detection in Multitier Web Applications (Multitier 웹 어플리케이션 환경에서 악의적인 SQL Query 탐지를 위한 HTTP Request - SQL Query 매핑 기법)

  • Seo, Yeongung;Park, Seungyoung
    • Journal of KIISE
    • /
    • v.44 no.1
    • /
    • pp.1-12
    • /
    • 2017
  • The continuously growing internet service requirements has resulted in a multitier system structure consisting of web server and database (DB) server. In this multitier structure, the existing intrusion detection system (IDS) detects known attacks by matching misused traffic patterns or signatures. However, malicious change to the contents at DB server through hypertext transfer protocol (HTTP) requests at the DB server cannot be detected by the IDS at the DB server's end, since the DB server processes structured query language (SQL) without knowing the associated HTTP, while the web server cannot identify the response associated with the attacker's SQL query. To detect these types of attacks, the malicious user is tracked using knowledge on interaction between HTTP request and SQL query. However, this is a practical challenge because system's source code analysis and its application logic needs to be understood completely. In this study, we proposed a scheme to find the HTTP request associated with a given SQL query using only system log files. We first generated an HTTP request-SQL query map from system log files alone. Subsequently, the HTTP request associated with a given SQL query was identified among a set of HTTP requests using this map. Computer simulations indicated that the proposed scheme finds the HTTP request associated with a given SQL query with 94% accuracy.

Finite Element Analysis with STEP in Distributive and Collaborative Environment (분산 협업 환경에서의 유한요소 해석에 관한 연구)

  • Cho, Seong-Wook;Kwon, Ki-Eak
    • Korean Journal of Computational Design and Engineering
    • /
    • v.11 no.5
    • /
    • pp.384-392
    • /
    • 2006
  • In this research, the feasibility of distributed finite element analysis system with STEP and CORBA has been investigated. The enabling technologies such as CORBA and Java play key roles in the development of integrated and geographically distributed application software. In addition to the distribution of analysis modules, numerical solution process itself is again divided into parallel processes using multi-frontal method for computational efficiency. In contrast to the specially designed parallel process for specific hardware, CORBA-based parallel process is well suited for heterogeneous platforms over the network. The idea of Web-based distributed analysis system may be applied to the engineering ASP for design and analysis in the product development processes. We believe that the proposed approach for the analysis can be extended to the entire product development process for sharing and utilizing common product data in the distributed engineering environment, thus eventually provide basis for virtual enterprise.

Analysis System of Web Contents (웹 사이트 콘텐츠 분석 시스템)

  • Paek, Seonuck;Sung, Min-Young;Ahn, Sung-Hye
    • Proceedings of the Korea Contents Association Conference
    • /
    • 2009.05a
    • /
    • pp.880-883
    • /
    • 2009
  • As the amount of web contents in the Internet increases, it becomes hard to find out statistics that users want. In this paper we propose an analysis system based on the statistics of words, which can be used to prospect trends in a specific area. We applied this system to job recruiting site and we can find out trend and statistics about what part of technology is needed in job market and the result of this paper can be used for an application such as restructuring curriculum of a department in universities. It can also be used to predict trend in other areas.

  • PDF

Lateral-torsional buckling of prismatic and tapered thin-walled open beams: assessing the influence of pre-buckling deflections

  • Andrade, A.;Camotim, D.
    • Steel and Composite Structures
    • /
    • v.4 no.4
    • /
    • pp.281-301
    • /
    • 2004
  • The paper begins by presenting a unified variational approach to the lateral-torsional buckling (LTB) analysis of doubly symmetric prismatic and tapered thin-walled beams with open cross-sections, which accounts for the influence of the pre-buckling deflections. This approach (i) extends the kinematical assumptions usually adopted for prismatic beams, (ii) consistently uses shell membrane theory in general coordinates and (iii) adopts Trefftz's criterion to perform the bifurcation analysis. The proposed formulation is then applied to investigate the influence of the pre-buckling deflections on the LTB behaviour of prismatic and web-tapered I-section simply supported beams and cantilevers. After establishing an interesting analytical result, valid for prismatic members with shear centre loading, several elastic critical moments/loads are presented, discussed and, when possible, also compared with values reported in the literature. These numerical results, which are obtained by means of the Rayleigh-Ritz method, (i) highlight the qualitative differences existing between the LTB behaviours of simply supported beams and cantilevers and (ii) illustrate how the influence of the pre-buckling deflections on LTB is affected by a number of factors, namely ($ii_1$) the minor-to-major inertia ratio, ($ii_2$) the beam length, ($ii_3$) the location of the load point of application and ($ii_4$) the bending moment diagram shape.

A Development of the Unified Object-Oriented Analysis and Design Methodology for Security-Critical Web Applications Based on Object-Relational Database - Forcusing on Oracle11g - (웹 응용 시스템 개발을 위한 보안을 고려한 통합 분석·설계 방법론 개발 - Oracle11g를 중심으로 -)

  • Joo, Kyung-Soo;Woo, Jung-Woong
    • Journal of the Korea Society of Computer and Information
    • /
    • v.17 no.12
    • /
    • pp.169-177
    • /
    • 2012
  • In the development process of application systems, the most important works are analysis and design. Most of the application systems are implemented on database system. So, database design is important. Also, IT System are confronted with more and more attacks by an increase interconnections between IT systems. Therefore security-related processes belong to a very important process. Security is a complex non-functional requirement that can interaction of many parts in the system. But Security is considered in the final stages of development. Therefore, Their increases the potential for the final product to contain vulnerabilities. Accordingly, Early in development related to security analysis and design process is very important. J2EE gives a solution based on RBAC((Role Based Access Control) for security and object-relational database also has RBAC for security. But there is not a object-oriented analysis and design methodology using RBAC of J2EE and object-relational database for security. In this paper, the unified object-oriented analysis and design methodology is developed for security-critical web application systems based on J2EE and object-relational database. We used UMLsec and RBAC of object-relational database and J2EE for this methodology.

Multi-threaded Web Crawling Design using Queues (큐를 이용한 다중스레드 방식의 웹 크롤링 설계)

  • Kim, Hyo-Jong;Lee, Jun-Yun;Shin, Seung-Soo
    • Journal of Convergence for Information Technology
    • /
    • v.7 no.2
    • /
    • pp.43-51
    • /
    • 2017
  • Background/Objectives : The purpose of this study is to propose a multi-threaded web crawl using queues that can solve the problem of time delay of single processing method, cost increase of parallel processing method, and waste of manpower by utilizing multiple bots connected by wide area network Design and implement. Methods/Statistical analysis : This study designs and analyzes applications that run on independent systems based on multi-threaded system configuration using queues. Findings : We propose a multi-threaded web crawler design using queues. In addition, the throughput of web documents can be analyzed by dividing by client and thread according to the formula, and the efficiency and the number of optimal clients can be confirmed by checking efficiency of each thread. The proposed system is based on distributed processing. Clients in each independent environment provide fast and reliable web documents using queues and threads. Application/Improvements : There is a need for a system that quickly and efficiently navigates and collects various web sites by applying queues and multiple threads to a general purpose web crawler, rather than a web crawler design that targets a particular site.

Design and Implementation of Paper Map for Traditional Korean Medicine (한의학 연구동향 분석을 위한 페이퍼 맵 분석 시스템의 설계 및 구현)

  • Yea, Sang-Jun;Jang, Hyun-Chul;Kim, Chul;Kim, Jin-Hyun;Kim, Sang-Kyun;Song, Mi-Young
    • The Journal of Korean Medicine
    • /
    • v.31 no.5
    • /
    • pp.103-111
    • /
    • 2010
  • Objectives: Because of the characteristics of traditional Korean medicine, there are few overseas patents and SCI papers. Researchers are struggling to analyze the research trend using existing patent analysis system and paper analysis system. We aim to build up a web-based paper map analysis system for Traditional Korean Medicine to improve the situation. Methods: We studied the following three sub topics. First, we surveyed the research trend analysis method for traditional Korean medicine. Second, we designed a paper map analysis model and made the algorithm for it. Finally, the development of the paper map analysis system was conducted. Results: We developed a web-based paper map analysis system which has the three main functions being analysis chart, topology map and contour map. For the rich internet application, we used the flex development tool and java integrated development environment. Conclusion: We will provide our paper map analysis system in the OASIS through the minor changes to provide easy use. We hope that this system will be a useful tool to analyze the research trends for traditional Korean medicine.

Simplified Collapse Analysis of Ship Transverse Structures (선체 횡구조물의 단순화된 최종 강도 해석)

  • P.D.C.,Yang
    • Bulletin of the Society of Naval Architects of Korea
    • /
    • v.26 no.4
    • /
    • pp.57-66
    • /
    • 1989
  • In this paper, a theory for the static analysis of large plastic deformations of 3-dimensional frames, aiming at application to the collapse analysis of ship structures, is presented. In the frame analysis formulation, effects of shear deformations are included. A plastic hinge is inserted into the field of a beam end, and post. failure deformation of the plastic hinge is characterized by finite rotations and extensions. In order to model deep web frames of ship's structures into a framed structures, collapse of thin-walled plate girders is investigated. The proposed analysis method is applied to several ship structural models in the references.

  • PDF

Analysis of the Online Review Based on the Theme Using the Hierarchical Attention Network (Hierarchical Attention Network를 활용한 주제에 따른 온라인 고객 리뷰 분석 모델)

  • Jang, In Ho;Park, Ki Yeon;Lee, Zoon Ky
    • Journal of Information Technology Services
    • /
    • v.17 no.2
    • /
    • pp.165-177
    • /
    • 2018
  • Recently, online commerces are becoming more common due to factors such as mobile technology development and smart device dissemination, and online review has a big influence on potential buyer's purchase decision. This study presents a set of analytical methodologies for understanding the meaning of customer reviews of products in online transaction. Using techniques currently developed in deep learning are implemented Hierarchical Attention Network for analyze meaning in online reviews. By using these techniques, we could solve time consuming pre-data analysis time problem and multiple topic problems. To this end, this study analyzes customer reviews of laptops sold in domestic online shopping malls. Our result successfully demonstrates over 90% classification accuracy. Therefore, this study classified the unstructured text data in the semantic analysis and confirmed the practical application possibility of the review analysis process.

A study on Development of Remote Vehicle Fault Diagnostic System (원격 자동차 고장 진단 시스템 개발에 대한 연구)

  • Nkenyereye, Lionel;Jang, Jong-Wook
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2015.10a
    • /
    • pp.224-227
    • /
    • 2015
  • Data transmission via the car driver's tethered smart phone may have a volume-dependent billing in case car driver' phone transmits data in real-time to the remote data center. The on-board diagnosis data generated are temporary stored locally to mobile remote diagnosis application on the car driver's phone, and then transmit to the data center later when car driver connects to the Internet. To increase the easiest of using the remote vehicle application without blocking other tasks to be executing on the cloud, node.js stands as a suitable candidate for handling tasks of data storage on the cloud via mobile network. We demonstrate the effectiveness of the proposed architecture by simulating a preliminary case study of an android application responsible of real time analysis by using a vehicle-to- smart phones applications interface approach that considers the smart phones to act as a remote user which passes driver inputs and delivers output from external applications. In this paper, we propose a study on development of Remote Vehicle fault diagnostic system features web server architecture based event loop approach using node.js platform, and wireless communication to handle vehicle diagnostics data to a data center.

  • PDF