• 제목/요약/키워드: web technology

검색결과 4,246건 처리시간 0.029초

WebSHArk 1.0: A Benchmark Collection for Malicious Web Shell Detection

  • Kim, Jinsuk;Yoo, Dong-Hoon;Jang, Heejin;Jeong, Kimoon
    • Journal of Information Processing Systems
    • /
    • 제11권2호
    • /
    • pp.229-238
    • /
    • 2015
  • Web shells are programs that are written for a specific purpose in Web scripting languages, such as PHP, ASP, ASP.NET, JSP, PERL-CGI, etc. Web shells provide a means to communicate with the server's operating system via the interpreter of the web scripting languages. Hence, web shells can execute OS specific commands over HTTP. Usually, web attacks by malicious users are made by uploading one of these web shells to compromise the target web servers. Though there have been several approaches to detect such malicious web shells, no standard dataset has been built to compare various web shell detection techniques. In this paper, we present a collection of web shell files, WebSHArk 1.0, as a standard dataset for current and future studies in malicious web shell detection. To provide baseline results for future studies and for the improvement of current tools, we also present some benchmark results by scanning the WebSHArk dataset directory with three web shell scanning tools that are publicly available on the Internet. The WebSHArk 1.0 dataset is only available upon request via email to one of the authors, due to security and legal issues.

Deep Web and MapReduce

  • Tao, Yufei
    • Journal of Computing Science and Engineering
    • /
    • 제7권3호
    • /
    • pp.147-158
    • /
    • 2013
  • This invited paper introduces results on Web science and technology obtained during work with the Korea Advanced Institute of Science and Technology. In the first part, we discuss algorithms for exploring the deep Web, which refers to the collection of Web pages that cannot be reached by conventional Web crawlers. In the second part, we discuss sorting algorithms on the MapReduce system, which has become a dominant paradigm for massive parallel computing.

모던 웹 브라우저 기반 애플리케이션 성능 분석 방법 연구 (Research for Web Application Performance Analysis Method Based on Modern Web Browser)

  • 박진태;김현국;문일영
    • 한국항행학회논문지
    • /
    • 제22권5호
    • /
    • pp.467-471
    • /
    • 2018
  • 4차 산업혁명을 거치면서 사용자들이 활용할 수 있는 데이터의 양이 급증했다. 그리고 이는 웹 기술을 활용한 ECMA script, WebAssembly, web of things 등 다양한 융합 기술들이 등장하는 발판이 되었다. 웹을 통해 공유되는 데이터의 양이 증가함에 따라 웹은 현대인의 삶에서 가장 영향력 있는 매체로 부상했다. 따라서 웹 개발자들은 웹을 통해 데이터를 빠르게 전달하기 위해 노력했다. 그래서 다양한 웹 애플리케이션 분석 도구들이 등장하였고, 웹 애플리케이션의 문제 분석을 통해 속도 문제의 해결책을 찾고자했다. 하지만 웹 애플리케이션 성능 분석을 위한 도구의 성능은 크게 발전하지 못하였다. 대부분의 현존 분석 툴들은 직접적인 설치를 요구하며, 분석을 진행하기 위해서는 웹에 대한 전문 지식을 요구하고, WebAssembly와 같은 웹 신기술을 반영하지 못하고 있다. 따라서 본 논문에서는 기존 웹 애플리케이션 분석 툴의 문제점을 개선할 수 있는 새로운 리포팅 솔루션의 설계를 제안하고자 한다.

Web 2.0 기술 적용 사이트 분석을 통한 도서관 정보시스템의 활용방안에 관한 연구 (A Study on the Practical Application Plans of a Library Information System through Web 2.0 Site Analysis)

  • 박미성
    • 한국도서관정보학회지
    • /
    • 제39권1호
    • /
    • pp.139-168
    • /
    • 2008
  • Web 2.0기술이 출현함에 따라 도서관 이용자들이 이미 웹상에서 다양한 기능들을 경험하고 있고, 이러한 경험들을 도서관 정보시스템에 요구하고 있다. 이에, 본 연구에서는 Web 2.0개념과 기술 및 Library 2.0, Catalog 2.0(OPAC 2.0) 개념들을 문헌고찰을 통해 이해를 높인다. 그리고 Web 2.0 기술이 적용된 대표 사이트들과 국내외 도서관 사이트를 분석하여 Web 2.0 기술 중 활용도가 높은 기술들을 분석한다. 마지막으로 분석된 내용을 토대로 향후 도서관의 정보시스템이 이용자 중심의 시스템으로 발전하는데 필요한 목록, 검색, 부가서비스 영역에서의 활용방안과 이러한 기술들이 적용됨으로 나타날 수 있는 부작용에 대해서도 함께 제시하였다.

  • PDF

An Implementation and Performance Evaluation of Fast Web Crawler with Python

  • Kim, Cheong Ghil
    • 반도체디스플레이기술학회지
    • /
    • 제18권3호
    • /
    • pp.140-143
    • /
    • 2019
  • The Internet has been expanded constantly and greatly such that we are having vast number of web pages with dynamic changes. Especially, the fast development of wireless communication technology and the wide spread of various smart devices enable information being created at speed and changed anywhere, anytime. In this situation, web crawling, also known as web scraping, which is an organized, automated computer system for systematically navigating web pages residing on the web and for automatically searching and indexing information, has been inevitably used broadly in many fields today. This paper aims to implement a prototype web crawler with Python and to improve the execution speed using threads on multicore CPU. The results of the implementation confirmed the operation with crawling reference web sites and the performance improvement by evaluating the execution speed on the different thread configurations on multicore CPU.

머천다이징 교과과정에서 인터넷을 기반으로한 학습테크롤로지에 대한 대학생들의 시각에 관한 연구 (A Study of Student Perspectives on Web-Based Learning Technology in Merchandising Courses)

  • 이규혜
    • 한국의류학회지
    • /
    • 제30권12호
    • /
    • pp.1788-1799
    • /
    • 2006
  • 본 연구에서는 머천다이징 프로그램에서 인터넷을 기반으로한 학습시스템(e학습시스템)인 WebCT를 의류학과내의 머천다이징 교과과정에서 운영하였을때 학생들이 경험한 여러가지 시각에 대하여 알아보았다. 연구는 온라인 병행강의 혹은 온라인 강의가 시도된 바 없는 한 미국대학에서 WebCT를 처음 도입한 후 2년의 기간 동안 학생들이 시스템에 대하여 느끼는 편의성과 유용성 그리고 선호도와 만족도가 어떻게 바뀌어나가는지 통시적으로 알아보았으며 이러한 경향이 수강학생들의 학점에 미치는 영향을 알아 보았다 2년 동안 매학기 평균 1.5개 정도의 WebCT운영강의에 노출된 학생들이 매 학기말마다 WebCT의 편의성, 유용성 그리고 선호도와 만족도를 묻는 설문에 응하였으며 각 학생들의 최종성적이 함께 데이터화 되어 분석되었다. 분석결과 인터넷이나 컴퓨터사용여부는 더이상 e학습시스템의 걸림돌이 되지 않는 것으로 나타났으며 학생들은 시스템을 무시하거나 과도하게 사용하지 않고 전반적으로 매우 효율적으로 사용하고 있었다. 학생들은 4년간의 대학생활 중 일찍 WebCT에 노출될수록, 한꺼번에 여러과목의 WebCT과목을 들을수록, WebCT수업을 경험할수록 그리고 여학생일수록 WebCT가 유용하다고 지각하고 있었으며 선호도와 만족도가 높은 것으로 나탔다. 한편 WebCT에 대한 선호도와 만족도는 한학기 동안 수강 후 학생들의 성적에 유의한 영향을 주는 것으로 분석되었다.

시맨틱 웹 기술혁신의 채택과 확산: 질적연구접근법 (The Adoption and Diffusion of Semantic Web Technology Innovation: Qualitative Research Approach)

  • 주재훈
    • Asia pacific journal of information systems
    • /
    • 제19권1호
    • /
    • pp.33-62
    • /
    • 2009
  • Internet computing is a disruptive IT innovation. Semantic Web can be considered as an IT innovation because the Semantic Web technology possesses the potential to reduce information overload and enable semantic integration, using capabilities such as semantics and machine-processability. How should organizations adopt the Semantic Web? What factors affect the adoption and diffusion of Semantic Web innovation? Most studies on adoption and diffusion of innovation use empirical analysis as a quantitative research methodology in the post-implementation stage. There is criticism that the positivist requiring theoretical rigor can sacrifice relevance to practice. Rapid advances in technology require studies relevant to practice. In particular, it is realistically impossible to conduct quantitative approach for factors affecting adoption of the Semantic Web because the Semantic Web is in its infancy. However, in an early stage of introduction of the Semantic Web, it is necessary to give a model and some guidelines and for adoption and diffusion of the technology innovation to practitioners and researchers. Thus, the purpose of this study is to present a model of adoption and diffusion of the Semantic Web and to offer propositions as guidelines for successful adoption through a qualitative research method including multiple case studies and in-depth interviews. The researcher conducted interviews with 15 people based on face-to face and 2 interviews by telephone and e-mail to collect data to saturate the categories. Nine interviews including 2 telephone interviews were from nine user organizations adopting the technology innovation and the others were from three supply organizations. Semi-structured interviews were used to collect data. The interviews were recorded on digital voice recorder memory and subsequently transcribed verbatim. 196 pages of transcripts were obtained from about 12 hours interviews. Triangulation of evidence was achieved by examining each organization website and various documents, such as brochures and white papers. The researcher read the transcripts several times and underlined core words, phrases, or sentences. Then, data analysis used the procedure of open coding, in which the researcher forms initial categories of information about the phenomenon being studied by segmenting information. QSR NVivo version 8.0 was used to categorize sentences including similar concepts. 47 categories derived from interview data were grouped into 21 categories from which six factors were named. Five factors affecting adoption of the Semantic Web were identified. The first factor is demand pull including requirements for improving search and integration services of the existing systems and for creating new services. Second, environmental conduciveness, reference models, uncertainty, technology maturity, potential business value, government sponsorship programs, promising prospects for technology demand, complexity and trialability affect the adoption of the Semantic Web from the perspective of technology push. Third, absorptive capacity is an important role of the adoption. Fourth, suppler's competence includes communication with and training for users, and absorptive capacity of supply organization. Fifth, over-expectance which results in the gap between user's expectation level and perceived benefits has a negative impact on the adoption of the Semantic Web. Finally, the factor including critical mass of ontology, budget. visible effects is identified as a determinant affecting routinization and infusion. The researcher suggested a model of adoption and diffusion of the Semantic Web, representing relationships between six factors and adoption/diffusion as dependent variables. Six propositions are derived from the adoption/diffusion model to offer some guidelines to practitioners and a research model to further studies. Proposition 1 : Demand pull has an influence on the adoption of the Semantic Web. Proposition 1-1 : The stronger the degree of requirements for improving existing services, the more successfully the Semantic Web is adopted. Proposition 1-2 : The stronger the degree of requirements for new services, the more successfully the Semantic Web is adopted. Proposition 2 : Technology push has an influence on the adoption of the Semantic Web. Proposition 2-1 : From the perceptive of user organizations, the technology push forces such as environmental conduciveness, reference models, potential business value, and government sponsorship programs have a positive impact on the adoption of the Semantic Web while uncertainty and lower technology maturity have a negative impact on its adoption. Proposition 2-2 : From the perceptive of suppliers, the technology push forces such as environmental conduciveness, reference models, potential business value, government sponsorship programs, and promising prospects for technology demand have a positive impact on the adoption of the Semantic Web while uncertainty, lower technology maturity, complexity and lower trialability have a negative impact on its adoption. Proposition 3 : The absorptive capacities such as organizational formal support systems, officer's or manager's competency analyzing technology characteristics, their passion or willingness, and top management support are positively associated with successful adoption of the Semantic Web innovation from the perceptive of user organizations. Proposition 4 : Supplier's competence has a positive impact on the absorptive capacities of user organizations and technology push forces. Proposition 5 : The greater the gap of expectation between users and suppliers, the later the Semantic Web is adopted. Proposition 6 : The post-adoption activities such as budget allocation, reaching critical mass, and sharing ontology to offer sustainable services are positively associated with successful routinization and infusion of the Semantic Web innovation from the perceptive of user organizations.

웹 서비스 보안기술에 관한 연구 (A Study on Web Service Security)

  • 김배현;권문택
    • 융합보안논문지
    • /
    • 제4권2호
    • /
    • pp.61-70
    • /
    • 2004
  • 웹 서비스로의 진화는 기존에 존재하고 있는 다양한 시스템들을 통합하여 운영해줌으로써 기업의 비즈니스 환경에 변화를 가져올 뿐 아니라 다양한 분야에서 활용될 것이다. 하지만 아직 웹 서비스 표준이 완전히 정립되지 않았고, 업체 간 상호운영성 및 보안 문제 등 웹 서비스가 실제적으로 운영되기 위해서 해결 되어할 문제가 아직 많다. 특히 웹 서비스 보안 문제를 해결하지 않는다면 웹 서비스 기술은 더 이상 활성화되지 않을 것이다. 그러므로 웹 서비스의 특성에 적합한 보안기술 개발이 요구된다. 본 논문은 웹 서비스가 실제적으로 운영되기 위한 몇 가지 문제점들 가운데 보안에 관련된 문제점을 해결하기 위한 웹 서비스 보안 기술의 개발 방향과 발전 방향을 분석하여 제시한다.

  • PDF

웹서비스를 이용한 서비스 기반 디바이스 연동 기술 (The Technology of Device-to-Device Integration using Web Services)

  • 이원석;이강찬;전종홍;이승윤
    • 한국IT서비스학회지
    • /
    • 제4권2호
    • /
    • pp.71-78
    • /
    • 2005
  • The beginning of Web Services was understood as efficient technology for application integration in the internet, thus it was used to integrating the distributed enterprise applications or the e-business applications between partners. But, recently the usage trend of Web Services is largely spreaded out wireless network applications beyond the internet applications. The main reasons are that Web Services is the international standard of W3C, and Web Services is based on XML that is independent of the specific internal implementations such as platform, programming languages, communications networks etc. Currently Major company of Web Services such as MS, IBM, etc. focus on the research about technology for integrating various devices. In this paper, we define and explain technical issues for adapting web services to ubiquitous Environment.

웹 애플리케이션 성능 분석을 위한 REST API 기반의 서버 구축 (REST API based Server Construction for Web Application Performance Analysis)

  • 김현국;박진태;최문혁;문일영
    • 한국항행학회논문지
    • /
    • 제22권5호
    • /
    • pp.456-461
    • /
    • 2018
  • 4차 산업혁명을 통해 웹이 다양한 기술들과 융합되기 전에는 웹 애플리케이션의 성능을 평가하는 요소가 단순히 웹 애플리케이션이 로딩 되는 속도뿐이었다. 따라서 기존에 시중에 나와 있는 웹 애플리케이션 성능분석 툴의 경우 대부분 웹 애플리케이션이 웹 브라우저에서 동작 하는 속도에 초점을 맞추고 있다. 하지만 웹은 이제 단순 웹 브라우저 뿐만 아니라 다양한 서비스들과 융합되어 활용되고 있으며, 단순 속도 이외에도 웹 애플리케이션을 평가하기 위해 평가해야할 요소들이 등장했다. 따라서 본 논문에서는 앞서 언급한 속도뿐만 아니라 프로그레시브 웹 앱, 접근성, 모범 사례, 검색 엔진 최적화를 고려한 웹 애플리케이션 성능 분석을 진행하기 위한 서버를 설계하고, REST API 형태로 서비스를 구축하여 사용자의 기기나 환경에 영향을 받지 않고 웹 애플리케이션 성능 서비스를 제공할 수 있는 서버를 설계 및 구현하고자 한다.