Server-centric Web frameworks

Vosloo, Iwan; Kourie, Derrick G.

doi:10.1145/1348246.1348247

Cited by 20 publications

(12 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Modern Web applications are often built atop one or more frameworks, such as Struts, Spring and JSF [29,35]. Frameworks typically invoke application code using reflective constructs, based on information provided in external configuration files, which complicates static analysis of Web applications.…”

Section: Extensions: Library and Framework Modelingmentioning

confidence: 99%

Andromeda: Accurate and Scalable Security Analysis of Web Applications

Tripp

Pistoia

Cousot

et al. 2013

Lecture Notes in Computer Science

106

View full text Add to dashboard Cite

Abstract. Security auditing of industry-scale software systems mandates automation. Static taint analysis enables deep and exhaustive tracking of suspicious data flows for detection of potential leakage and integrity violations, such as cross-site scripting (XSS), SQL injection (SQLi) and log forging. Research in this area has taken two directions: program slicing and type systems. Both of these approaches suffer from a high rate of false findings, which limits the usability of analysis tools based on these techniques. Attempts to reduce the number of false findings have resulted in analyses that are either (i) unsound, suffering from the dual problem of false negatives, or (ii) too expensive due to their high precision, thereby failing to scale to real-world applications.In this paper, we investigate a novel approach for enabling precise yet scalable static taint analysis. The key observation informing our approach is that taint analysis is a demand-driven problem, which enables lazy computation of vulnerable information flows, instead of eagerly computing a complete data-flow solution, which is the reason for the traditional dichotomy between scalability and precision. We have implemented our approach in ANDROMEDA, an analysis tool that computes data-flow propagations on demand, in an efficient and accurate manner, and additionally features incremental analysis capabilities. ANDROMEDA is currently in use in a commercial product. It supports applications written in Java, .NET and JavaScript. Our extensive evaluation of ANDROMEDA on a suite of 16 production-level benchmarks shows ANDROMEDA to achieve high accuracy and compare favorably to a state-of-the-art tool that trades soundness for precision.

show abstract

Section: Extensions: Library and Framework Modelingmentioning

confidence: 99%

Andromeda: Accurate and Scalable Security Analysis of Web Applications

Tripp

Pistoia

Cousot

et al. 2013

Lecture Notes in Computer Science

106

View full text Add to dashboard Cite

show abstract

“…In selecting the candidate frameworks, we also considered support for the MVC architecture, popularity among the web development community, job marketability for those with particular framework skills, clearly written support documentation, as well as the steepness of the learning curve. At the time of this writing, the top six PHP-based frameworks [7] (listed in order of popularity) were the Zend Framework, the Yii Framework, CodeIgniter, CakePHP, Symfony, and PHP Rapid Application Development Objectoriented (PRADO) and are shown in Figure 2. All of these frameworks support the MVC architecture.…”

Section: Choosing a Php Frameworkmentioning

confidence: 99%

Analyzing PHP frameworks for use in a project-based software engineering course

Lancor

Katha

2013

Proceeding of the 44th ACM Technical Symposium on Computer Science Education

View full text Add to dashboard Cite

Given the popularity of PHP frameworks used in developing webbased applications, a comparative study is conducted to determine which framework is best suited for incorporation into the curriculum of an undergraduate software engineering course that uses project-based learning. The top six PHP frameworks (Zend, Yii, CakePHP, CodeIgniter, PRADO, and Symphony) were initially considered and then narrowed down to two (CakePHP and CodeIgniter) based on their alignment with common functionality in previous class projects, framework complexity for those new to frameworks (learning curve), and developer friendliness (availability of documentation and online resources). An in-depth comparative study is conducted by developing a functionally-equivalent web application using each of the two frameworks as well as plain PHP (no framework). This work was motivated by the difficulties that were encountered in an evolving, content-rich software engineering course and discusses the educational changes that were made to align student learning with sound software engineering principles and current software development practices used in the computing industry.

show abstract

“…Ruby on Rails is a framework for the development of Web 2.0 applications that allows the rapid development of new features, minimizing their time-to-deployment [16] [18]. Symian-Web uses the JavaScript InfoVis Toolkit (http://thejit.org/) to realize the graph-and tree-based IT support organization representations implemented by the VR interface.…”

Section: Architecture and Implementationmentioning

confidence: 99%

A cloud-based solution for the performance improvement of IT support organizations

Bartolini

Stefanelli

Targa

et al. 2012

2012 IEEE Network Operations and Management Symposium

View full text Add to dashboard Cite

IT support organizations are in charge of restoring normal operations after IT service disruptions, among other tasks. Such organizations can be complex systems, with a large network of interacting support groups subject to complex management policies. The performance assessment and optimization of IT support organizations is an extremely challenging task that requires considering organization-specific structure, behavior, and business-level objectives. This paper presents Symian-Web, a decision support tool that enables IT managers to both assess and improve IT support organization performance by using what-if scenario analysis. Symian-Web features advanced information visualization concepts and metaphors, allowing for precise and timely assessment of IT support organization performance, and facilitating their redesign. Symian-Web is realized as a cloud computing-based Web application, thus enabling the tool to take advantage of the ondemand computational capabilities provided by the cloud.

show abstract

Server-centric Web frameworks

Cited by 20 publications

References 19 publications

Andromeda: Accurate and Scalable Security Analysis of Web Applications

Andromeda: Accurate and Scalable Security Analysis of Web Applications

Analyzing PHP frameworks for use in a project-based software engineering course

A cloud-based solution for the performance improvement of IT support organizations

Contact Info

Product

Resources

About