SAML, developed by the Security Services Technical Committee of the Organization for the Advancement of Structured Information Standards (OASIS), is an XML-based framework for communicating user authentication, entitlement, and attribute information. As its name suggests, SAML allows business entities to make assertions regarding the identity, attributes, and entitlements of a subject (an entity that is often a human user) to other entities, such as a partner company or another enterprise application.
Read the rest of this entry »

• 0 Comments

Borland Delphi is known to be a great environment for the development of stand-alone and client-server applications on the Microsoft Windows platform. Its virtues range from full OOP support to visual development, in a unique combination of power and ease. However, the new frontier of development is now Internet programming. What has Delphi got to offer in this new context? Which are the features you can rely upon to build great Internet applications with Delphi? That’s what this paper intends to reveal. We’ll see that Delphi can be used:
• For direct socket and TCP/IP programming;
• In conjunction with third-party components that implement the most common Internet protocols, on the client or the server side;
• To produce HTML pages on the server side, with the WebBroker and Internet Express architectures;
• As well as to work with Microsoft’s core technologies, including MTS, COM, ASP, and ActiveX.
Read the rest of this entry »

• 0 Comments

Web sites today face many threats to the confidentiality and integrity of the data used and the functionality provided by the application. This problem is compounded by the fact that Web developers are simply lack of either adequate knowledge and skills in writing secure Web application codes (Huang et al., 2005) or sufficient testing methodologies for the audit and control of Web development (Mansouir and Houri, 2006). Works in the design and implementation of security measures for Web applications are greatly in need.
Read the rest of this entry »

• 0 Comments

Microsoft gives a name to its Flash-killer technology. The technology formerly known as WPF/E is now known as Silverlight. Microsoft has given a go-to-market name for its cross-platform, cross-browser plug-in for delivering the next generation of user experiences and rich Internet applications for the Web. The technology formerly known as WPF/E is now known as Silverlight.
Read the rest of this entry »

• 0 Comments

The basic elements for an application using the AJAX technologies, JavaScript and the XMLHttpRequest object, are not difficult to understand and there are many articles on the web that show how to use this object and declare that being AJAX. I think there are a lot more topics that should be understood and talked about.
Read the rest of this entry »

• 0 Comments

The rapid advent of “Web 2.0” applications has unleashed new HTTP traffic patterns which differ from the conventional HTTP request-response model. In particular, asynchronous pre-fetching of data in order to provide a smooth web browsing experience and richer HTTP payloads (e.g., Javascript libraries) of Web 2.0 applications induce larger, heavier, and more bursty traffic on the underlying networks. We present a traffic study of Web 2.0 applications including Google Maps, modern Web-email, and social networking Web sites, and compare them with all HTTP traffic. We highlight the key differences of Web 2.0 traffic from traditional HTTP traffic through statistical analysis. As such our work elucidates the changing face of one of the most popular application on the Internet: The World Wide Web.
Read the rest of this entry »

• 0 Comments

This book provides a set of design and implementation guidelines for writing secure programs for Linux and Unix systems. Such programs include application programs used as viewers of remote data, web applications (including CGI scripts), network servers, and setuid/setgid programs. Specific guidelines for C, C++, Java, Perl, Python, TCL, and Ada95 are included.
Read the rest of this entry »

• 0 Comments

This document outlines a chapter in the book Implementing Mobile Web 2.0 by Ajit Jaokar published by futuretext (Feb 2009). It is released separately as a stand-alone chapter. Here, we discuss the role of the next generation SIM (Subscriber Identity Module) card, referred to as SCWS (Smart card web server) SIM within Mobile Web 2.0. To explain the background, this document includes other sections from the book so that it becomes as complete document in itself.
Read the rest of this entry »

• 0 Comments