基于马尔可夫的Web应用生存性模型

针对现有生存性模型缺乏实践指导意义及不能刻画Web应用特性的问题,对Web应用的特点进行讨论,尤其是对原子Web应用和组合Web应用的区别及特点进行探讨,重点考虑了如何对组合Web应用中各原子Web应用之间的调用关系进行分析和建模;同时通过将环境引入到生存性的分析中,分别构建了原子Web应用的生存性模型和基于马尔可夫过程模型的组合Web应用生存性模型。根据建立的Web应用生存性模型,提出一个在Web应用处于不利环境中时,部分或全部服务失效情况下的恢复方案。最后通过已建立的模型对一个案例进行了分析,给出了其恢复过程,在恢复过程中保证了较好的生存性。     

Ajax引擎的设计和应用

Web应用在界面易操作性方面的弱点是制约其应用面的重要因素，Ajax技术是为了克服这些缺点而提出的。采用它实现的页面在易操作性上可以做到与桌面应用相同的效果，因此，其应用也逐渐多起来。文章介绍了Ajax的基本原理并通过在一个考试系统中的具体实践给出了Ajax引擎的实现方法，对于一般的Web应用开发具有一定的参考价值。     

Opening web applications for third-party development: a service-oriented solution

Web applications are nowadays prevalent software systems in our everyday’s life. A lot of these applications have been developed for end users only. Thus, they are not designed by considering future extensions that would be developed by third parties. One possible and interesting solution for opening these applications for such kind of extension development is to create and deploy Web services starting from these applications. In this paper, we present a method and a tool for semiautomatically creating Web service implementations from applications having Web interfaces. The proposed method generates operations that are published in Web services for each functionality provided by a Web application. In addition, it generates new operations starting from Web interfaces. Our approach goes further in the creation of services by generating executable orchestrations, as BPEL processes, starting from navigations in the Web interfaces of these applications and by providing BPMN choreography specifications starting from the collaborations between the generated Web services. We implemented and experimented our solution in the migration of three real-world Web applications toward Web service-oriented systems.     

A Flexible Integration Framework for Semantic Web 2.0 Applications

The Semantic Web application framework extends Ruby on Rails to enable rapid development of integrated Semantic Web mash-ups. Web applications are mostly database driven. Developers design a database schema and then construct the application logic (which generates Web pages for user interaction) on top of the schema. These applications are centralized and rely on their own relational database, limiting the possibilities for data integration. Mash-ups (often called Web 2.0 applications) are an emerging Web development paradigm that combines functionality from different Web applications.     

基于接口自动机的Web应用验证

Web应用的快速发展及其一些异于传统程序的特点使Web应用的验证面临了新的挑战。使用接口自动机对Web应用的构件和构件组合进行行为建模,设计了接口自动机到模型检验器Spin程序的转换算法,然后利用Spin检验Web应用的性质,通过一个简单的网上银行示例说明了整个验证过程。     

Services Mashups: The New Generation of Web Applications

Web services are becoming a major technology for deploying automated interactions between distributed and heterogeneous applications, and for connecting business processes. Service mashups indicate a way to create new Web applications by combining existing Web resources utilizing data and Web APIs. They facilitate the design and development of novel and modern Web applications based on easy-to-accomplish end-user service compositions.     

基于动态数据生成缺陷的XSS漏洞挖掘技术

XSS漏洞普遍存在于当前Web应用中,而且危害极其严重。随着Web2．0的到来,Web应用日趋大型化和复杂化,进一步为web漏洞的滋生提供了温床。针对大型web应用中复杂的数据组织结构,文章提出一种基于动态数据生成缺陷的XSS漏洞挖掘方法,能快速、高效地挖掘出大型Web应用中存在的XSS漏洞。同时,利用这一挖掘方法对web应用中存在的HTTPResponseSplitting漏洞、URLRedirection漏洞进行挖掘分析,都取得了非常显著的效果。     

PadSpace: A new framework for the service federation of web resources

End-users need a simple and interactive tool for service composition development. A PadSpace proposes an extension of a typical Linda-like coordination model (tuplespace) to provide mechanisms for the interoperation among Web applications, Web services and end-users’ local functional resources. First, a PadSpace provides an end-user supporting tool for composing Web applications, Web services, and local visual resources based on the meme media architecture without writing any program codes. It enables end-users to directly manipulate visual components, and to create new composite components for the creation of services that use Web applications, Web services, and local functional resources. Second, a PadSpace provides a spreadsheet-based service-coordination tool for end-users to orchestrate multiple Web applications, Web services, and local functional resources. Finally, we show some new applications of service composition and service orchestration.     

Two decades of Web application testing—A survey of recent advances

Since its inception of just over two decades ago, the World Wide Web has become a truly ubiquitous and transformative force in our life, with millions of Web applications serving billions of Web pages daily. Through a number of evolutions, Web applications have become interactive, dynamic and asynchronous. The Web׳s ubiquity and our reliance on it have made it imperative to ensure the quality, security and correctness of Web applications. Testing is a widely used technique for validating Web applications. It is also a long-standing, active and diverse research area. In this paper, we present a broad survey of recent Web testing advances and discuss their goals, targets, techniques employed, inputs/outputs and stopping criteria.     

Engineering Rich Internet Application User Interfaces over Legacy Web Models

A steadily growing trend in Web applications is the development of user interfaces through rich Internet applications. Among other capabilities, RIAs offer high interactivity and native multimedia support, giving them a major advantage over standard HTML To update existing HTML Web applications, the authors propose the RUX-Model, which facilitates the user interface adaptation of existing Web 1.0 applications to Web 2.0. Their proposal focuses on new RIA capacities that exploit the data and business logic already provided in legacy Web models.     

基于UMMs的Web软件统计测试方法研究

随着网络使用的普及以及信息技术的不断进步,如何保证Web软件的可靠性显得越来越重要.统计测试和可靠性分析能有效地确保Web软件的质量.利用从Web日志中提取的访问信息和错误信息,提出一种基于统一的马尔可夫模型(IMMs)的Web软件统计测试方法,该方法将访问信息用于构建UMMs,相关的错误信息用于评价Web软件的可靠性和Web统计测试的有效性.最后将该方法用于分析某Web软件,以实验证明该方法的可行性和有效性.     

.NETWeb应用的MVC设计

Microsoft的.NET和Sun的J2EE是目前建立和开发各种Web应用的两大主流平台。MVC设计模式则是当今设计各种交互式应用的事实标准。MVC设计模式在J2EEWeb应用中已有成熟的设计方案,而在.NETWeb应用中却没有。针对.NETWeb应用给出了一种可行的MVC设计方案,讨论了该方案中MVC模块划分和三层架构中层的划分之间的关系,给出了每一模块的具体设计,为在.NET环境下开发结构良好、易于维护、易于伸缩的Web应用提供了可行方案。     

面向对象的Web工程

分析了Web应用的特点和目前所面临的一些问题，基于面向对象的概念，提出了多层次、多视图的Web应用开发模型，以对象作为建模的基本实体．提供了Web应用的高层描述，支持Web服务的任意粒度的抽象、封装、重用以及Web导航特性的分析，提出了基于XML的面向对象Web建模语言OOWML并实现了编译工具，能够自动生成Web应用的目标语言，与已有的方法相比．本文提出的模型为Web应用的工程化开发提供了更有效的支持。     

Understanding Ajax applications by connecting client and server-side execution traces

Ajax-enabled Web applications are a new breed of highly interactive, highly dynamic Web applications. Although Ajax allows developers to create rich Web applications, Ajax applications can be difficult to comprehend and thus to maintain. For this reason, we have created FireDetective, a tool that uses dynamic analysis at both the client (browser) and server-side to facilitate the understanding of Ajax applications. We evaluate FireDetective using (1) a pretest-posttest user study and (2) a field user study. Preliminary evidence shows that the FireDetective tool is an effective aid for Web developers striving to understand Ajax applications.     

浅析Web应用系统的安全及防护策略

随着网络技术的发展,Web应用服务的快速普及,各种基于Internet的Web应用系统的攻击事件频发。本文试着分析Web应用系统主要安全问题及威胁Web安全的主要原因,提出Web应用系统的防护策略。     

ActiveRDF: Embedding Semantic Web data into object-oriented languages

Semantic Web applications share a large portion of development effort with database-driven Web applications. Existing approaches for development of these database-driven applications cannot be directly applied to Semantic Web data due to differences in the underlying data model. We develop a mapping approach that embeds Semantic Web data into object-oriented languages and thereby enables reuse of existing Web application frameworks.We analyse the relation between the Semantic Web and the Web, and survey the typical data access patterns in Semantic Web applications. We discuss the mismatch between object-oriented programming languages and Semantic Web data, for example in the semantics of class membership, inheritance relations, and object conformance to schemas.We present ActiveRDF, an object-oriented API for managing RDF data that offers full manipulation and querying of RDF data, does not rely on a schema and fully conforms to RDF(S) semantics. ActiveRDF can be used with different RDF data stores: adapters have been implemented to generic SPARQL endpoints, Sesame, Jena, Redland and YARS and new adapters can be added easily. We demonstrate the usage of ActiveRDF and its integration with the popular Ruby on Rails framework which enables rapid development of Semantic Web applications.     

The design and implementation of the Gecko NFS Web proxy

The World Wide Web uses a naming scheme (URLs), transfer protocol (HTTP), and cache algorithms that are different from traditional network file systems. This makes it impossible for unmodified Unix applications to access the Web; as a result, the Web is only accessible to special Web‐enabled applications. Gecko bridges the gap between Web‐enabled applications and conventional applications, allowing any unmodified Unix application to access the Web. We developed two prototypes of the Gecko system at the University of Arizona and incorporated the many lessons learned from the first into the second. Minimizing the amount of state was a key goal of the Gecko redesign and the second prototype uses a unique compression technique to reduce server state. Experiments performed on the prototype show that Gecko not only makes the Web accessible to unmodified applications, but does so at a performance that meets or exceeds that of HTTP. Copyright © 2001 John Wiley & Sons, Ltd.     

J2EE平台上的HTML电子表格工具的设计

随着Internet的发展,Web应用也得到了快速发展和广泛普及.同时这也给Web应用开发提出了新的要求.与传统应用程序开发相比,Web应用开发具有如下特点：开发周期短,开发成本高,实现技术复杂.为了适应Web应用开发的新特点,开发人员需要一种可以快速开发Web应用的工具.本文介绍了一种J2EE平台上动态HT-ML表格的设计和实现.开发者可以使用该工具定义一个和数据库相联系的动态HTML表格.这个工具可以根据用户的定义自动生成相应的Servlet代码.     

Aspect-oriented Programming for Dynamic Web Service Selection,Integration and Management

In service-oriented computing, applications are often created by integrating third-party Web Services. Current integration approaches, however, require client applications to hardcode references to specific Web Services, thereby affecting adaptability and robustness. Moreover, support for client-side management is rarely provided. To enable the development of more flexible and robust applications, we propose to insert a new layer between the client applications and the Web Services: the Web Services Management Layer (WSML). This layer decouples Web Services from client applications and enables hot-swapping between semantically equivalent Web Services based on availability. This mechanism allows for dynamic switching between Web Services based on selection policies that encapsulate changing business requirements. In addition, with WSML, client-side management concerns (e.g., caching, billing and logging) can be decoupled from the applications. In this paper, we identify a list of requirements for WSML to realize dynamic integration and client-side service management, and provide support for service criteria to govern the selection, integration and composition of Web Services. We also show that dynamic Aspect-Oriented Programming (AOP) is well suited to implement the core functionality of WSML.     

Toward a New Generation of Semantic Web Applications

Although research on integrating semantics with the Web started almost as soon as the Web was in place, a concrete Semantic Web that is, a large-scale collection of distributed semantic metadata emerged only over the past four to five years. The Semantic Web's embryonic nature is reflected in its existing applications. Most of these applications tend to produce and consume their own data, much like traditional knowledge- based applications, rather than actually exploiting the Semantic Web as a large-scale information source. These first-generation semantic Web applications typically use a single ontology that supports integration of resources selected at design time.