We present a practical protection mechanism against SQL injection attacks. Such attacks target databases that are accessible through a web front-end, and take advantage of flaws in the input validation logic of Web components such as CGI scripts. We apply the concept of instruction-set randomization to SQL, creating instances of the language that are unpredictable to the attacker. Queries injected by the attacker will be caught and terminated by the database parser. We show how to use this technique with the MySQL database using an intermediary proxy that translates the random SQL to its standard language. Our mechanism imposes negligible performance overhead to query processing and can be easily retrofitted to existing systems.
Read the rest of this entry »

• 0 Comments

This book shows you how to write programs for the MRG Messaging component of the Red Hat Enterprise MRG distributed computing platforming using the Apache Qpid API. It also gives basic information on downloading and installing MRG Messaging. For more complete information on how to download and install MRG Messaging see the MRG Messaging Installation Guide.
Read the rest of this entry »

• 0 Comments

In the late 1990’s many ERP companies caught the web browser wave, undertaking projects to leverage the Internet and browser technology and even to convert their software to “lite-client” or web “portal” architectures. Unfortunately for some, .NET came on the scene too soon after this major overhaul. When .NET appeared, some were too technically exhausted, or inflexible, or still basking in the glow of their new “Internet-based architectures” to recognize and embrace .NET. Other ERP software companies were and continue to be simply too busy struggling to stay solvent during the devastating one-two-three punch of Y2K, the recession of 2000, and 9/11. They lack the resources to consider the complete restructuring of their products that .NET warrants.
Read the rest of this entry »

• 0 Comments

The client version of TCP Accelerator is an application that can be installed on a BGAN user’s computer to significantly enhance performance when sending TCP traffic over BGAN. The client version of TCP Accelerator is available for download free of charge. This chapter gives a brief overview of TCP Accelerator, and how it operates on the BGAN terminal and connected devices.
Read the rest of this entry »

• 0 Comments

The rise of the software-as-a-service paradigm has led to the development of a new breed of sophisticated, interactive applications often called Web 2.0. While web applications have become larger and more complex, web application developers today have little visibility into the end-to-end behavior of their systems.
Read the rest of this entry »

• 0 Comments

Modern Geographical Information Systems (GIS) [1] provide a service-oriented architecture for interacting with geographical data sets and related maps. Web-based GIS systems are architected around the same principles as more general Web service systems based on SOAP [2], WSDL [3], and REST. Mirroring the World Wide Web Consortium and OASIS Web service standards-making bodies, the Open Geospatial Consortium [5] defines open standards for messages, XML data formats, and access protocols that are specific to the GIS community. In addition to OGC-based services, there are many companies (such as ESRI and AutoDesk) that provide proprietary, commercial solutions. Services from these various providers are not normally interoperable.
Read the rest of this entry »

• 0 Comments

This introduction serves as a high-level overview of the different test approaches and tools, including Java Explorer, Java Framework, .NET Explorer, and .NET Framework that are offered by SilkPerformer SOA (Service Oriented Architecture) Edition.

SilkPerformer SOA Edition license is required to enable access to component testing functionality. Users may or may not additionally have a full SilkPerformer license. Please see the SilkPerformer Components information site for more details.
Read the rest of this entry »

• 0 Comments

HP Email Archiving software for Microsoft Exchange is client software that integrates with HP Integrated Archive Platform (IAP) to help you mitigate the business risk associated with legal discovery, corporate governance, and regulatory compliance requirements, reduce the cost of email storage, and boost messaging server performance and availability. HP Email Archiving software for Microsoft Exchange integrates with Microsoft Outlook and OWA to provide a seamless, nearly transparent user interface where archived messages can still be accessed through users’ standard Outlook interface.
Read the rest of this entry »

• 0 Comments