Web sites today face many threats to the confidentiality and integrity of the data used and the functionality provided by the application. This problem is compounded by the fact that Web developers are simply lack of either adequate knowledge and skills in writing secure Web application codes (Huang et al., 2005) or sufficient testing methodologies for the audit and control of Web development (Mansouir and Houri, 2006). Works in the design and implementation of security measures for Web applications are greatly in need.
Read the rest of this entry »

• 0 Comments

Information and communication technologies continue to pervade our lives in various aspects which include health, education, entertainment and ecommerce. People need to be able to trust computer systems as the dependence on them increases. The Trustworthy Computing vision (CRA, 2003) refers to computer systems that are intuitive, controllable, reliable and predictable and that ensure availability and security. Secure cod- ing is not trivial and poor code security management may leave the developed web application vulnerable to attack or turn the application into a launch pad for serious attacks.
Read the rest of this entry »

• 0 Comments

Foxit PDF IFilter is an application designed to help users to index a large amount of PDF documents and then quickly find text within these documents. The PDF documents can not only be files, but also email attachments or database records.

Foxit PDF IFilter supports PDF 1.7 specification and can be used in many Microsoft search engines, such as Windows Indexing Service, MSN Desktop Search, Internet Information Server, SharePoint Portal Server, Windows SharePoint Services (WSS), Site Server, Exchange Server, SQL Server and all other products based on Microsoft Search technology. With Foxit PDF IFilter, all these search engines can find PDF files with ease.
Read the rest of this entry »

• 0 Comments

Traditionally, Microsoft’s core business has been focused on the Windows platform and the Office suite. Windows and Office, by all means, continue to be the heart of Microsoft. The latest versions of the flagship products, Windows Vista and the Office 2007 System, made available to the public at the end of January 2007, have fueled the vast majority of the company’s most recent fiscal second quarter record financial results of $16.37 billion in revenue, and $6.48 billion in operating income. With Office SP1 out of the way at the end of 2007, Microsoft is currently building Windows Vista Service Pack 1, Windows XP Service Pack 3 and Windows 7 client platforms, as well as putting the finishing touches on Windows Server 2008.
Read the rest of this entry »

• 0 Comments

Many developers have learned to use PHP over the years because it’s a good solution for creat- ing Web pages and the price is right. The PHP acronym is like many other new acronyms for the Internet—the acronym is recursive (refers back to itself). PHP stands for PHP Hypertext Processor. This general-purpose HTML scripting language works much like ASP (see Chapter 6) or other page description languages you might have used. Essentially, you mix HTML with scripting information. When the PHP process sees HTML, it sends the text directly to the user. It processes any scripting information, and passes the resulting HTML to the user as well.
Read the rest of this entry »

• 0 Comments

This How To shows you how to create and configure a custom least-privileged service account to run an ASP.NET Web application. By default, an ASP.NET application on Microsoft Windows Server 2003 and IIS 6.0 runs using the built-in Network Service account. In production environments, you usually run your application using a custom service account. By using a custom service account, you can audit and authorize your application separately from others, and your application is protected from any changes made to the privileges or permissions associated with the Network Service account. To use a custom service account, you must configure the account by running the Aspnet_regiis.exe utility with the -ga switch, and then configure your application to run in a custom application pool that uses the custom account’s identity.
Read the rest of this entry »

• 0 Comments

This IBM® Redpaper gives a example of procedures to restore the Microsoft® SQL 2000 and 2005 using SnapManager®.There are options discussed that depend on the type of disaster, the type of data recovery, and the type of system on which the disaster applies.
Read the rest of this entry »

• 0 Comments

Whether you want to build an AJAX-based web application, or a Windows game, the Academic Resource Kit is a great place to start. A Microsoft Romania initiative aimed at driving technology access and adoption, ARK is designed as a comprehensive collection of tools and resources addressing both the development and design aspects of building software solutions. I had the chance to chat with Microsoft Romania’s Todi Pruteanu about the ARK initiative, and the interview below will provide you with a great insight into the Academic Resource Kit.
Read the rest of this entry »

• 0 Comments