Bibliography
Anshu Veda, K. M. (2004, Oct 20). One and Two Phase Commit Protocols. Retrieved may 23, 2009, from .it.iitb.ac: http://www.it.iitb.ac.in/~kaushal/downloads/dbmsprojectreport.pdf
anynomous. (2009, may 5). location-based service (LBS). Retrieved may 23, 2009, from whatis.com: http://searchnetworking.techtarget.com/sDefinition/0,,sid7_gci532097,00.html
anynomous. (n.d.). Modular Mathematics, RSA Cryptography. Retrieved may 21, 2009, from Mathreference: http://www.mathreference.com/num-mod,rsa.html
anynomous. (2008, oct 03). Phishing. Retrieved may 21, 2009, from techtarget.com: http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci916037,00.html
anynomous. (2007). SCM. Retrieved may 23, 2009, from Whatis .com: http://searchcio.techtarget.com/sDefinition/0,,sid182_gci214546,00.html
anynomous. (n.d.). Semaphore (programming). Retrieved may 23, 2009, from wikipedia.org: http://en.wikipedia.org/wiki/Semaphore_(programming)
anynomous. (n.d.). wipkipedia. Retrieved may 23, 2009, from deadlocks: http://en.wikipedia.org/wiki/Deadlock
Associates, B. &. (2009). ACID properties. Retrieved may 23, 2009, from service-architecture.com: http://www.service-architecture.com/database/articles/acid_properties.html
Browne's, C. (2007, sep 23). Transaction Processing Monitors. Retrieved may 23, 2009, from linuxfinances: http://linuxfinances.info/info/tpmonitor.html
Clough, G. R. (2008). Comparing and Contrasting SSL and SET. Retrieved May 21, 2009, from savagerun.com: http://www.savagerun.com/SSLSET.htm
Gini, M. (1999, February 12). Agents and other 'Intelligent Software' for e-Commerce. Retrieved may 23, 2009, from www-users.cs.umn.edu: http://www-users.cs.umn.edu/~gini/csom.html
Hacker, E. (2008, feb 17). Web Authentication. Retrieved may 23, 2009, from hackerscenter.com: http://www.hackerscenter.com/index.php?/HSC-Guides/Web-App-Security/Web-Authentication.html
Innella, P. (2001, nov 16). The Evolution of Intrusion Detection Systems. Retrieved may 21, 2009, from securityfocus: http://www.securityfocus.com/infocus/1514
jean. (2007, july 23). What is CRM (customer relationship management)? Retrieved may 23, 2009, from Techtarget.com: http://searchcrm.techtarget.com/sDefinition/0,,sid11_gci213567,00.html
Miller, R. (2008). Practical UML™: A Hands-On Introduction for Developers. Retrieved may 23, 2009, from embarcadero.com: http://edn.embarcadero.com/article/31863
Nwana, H. S. (1996). Software Agents: An Overview. Knowledge Engineering Review , pp.1-40.
Petrie, C. J. (1996 ). Agent-Based Engineering, the Web, and Intelligence. IEEE Expert , 8-15.
Shavit, Y. (2008, jul 31). Federated databases. Retrieved may 25, 2009, from searchsystemschannel.techtarget.com: http://searchsystemschannel.techtarget.com/generic/0,295582,sid99_gci1323453,00.html
SSL. (n.d.). SSL Basics. Retrieved may 21, 2009, from verisign.com.au: http://www.verisign.com.au/ssl/ssl-information-center/ssl-basics/
TRUSTe. (2009). TRUSTe Marks Trustworthy Companies. Retrieved may 21, 2009, from TRUSTe: http://www.truste.org/about/web_privacy_seal.php
unanynomous. (n.d.). Synchronizing Threads. Retrieved may 23, 2009, from www.few.vu.nl: http://www.few.vu.nl/~eliens/documents/java/tutorial/essential/threads/multithreaded.html
verisign. (n.d.). company Information. Retrieved may 21, 2009, from Verisign.com: http://www.verisign.com/corporate/information/index.html
Marlin, Steve, "SET Making Slow Progress in Banking Arena."Bank Systems & Technology,August, 1999.
Morgan, Cynthia. "Dead Set Against SET?"Computer World,March 29, 1999.
Power, Richard, "1999 CSI/FBI Computer Crime and Security Survey," Computer Security Journal, Volume XV, Number 2, 1999,
Wikipedia – Thread (n.d.). Retrieved 11th May 2009 fromhttp://en.wikipedia.org/wiki/Thread_join
What Exactly IS a Spider (n.d.). Retrieved 23th May 2009 fromhttp://www.seologic.com/faq/robots-definition.php
Meta search engine – Wikipedia (n.d.). Retrieved 23 th May 2009 from http://en.wikipedia.org/wiki/Meta_search_engine
Tuesday, May 26, 2009
Exercise 26
Federated database:
A federated database is a system in which several databases appear to function as a single entity. Each component database in the system is completely self-sustained and functional. When an application queries the federated database, the system figures out which of its component databases contains the data being requested and passes the request to it. Federated databases can be thought of as database virtualization in much the same way that storage virtualization makes several drives appear as one.
In my past i have worked with bank, in which we faced the problem of load at year end. Using the Federated database the load for the system to search all the rows for single entity, will be eliminated by splitting the transaction by year. Users will often only look at transactions in the past year and the system will only need to touch one or two component databases (Shavit, 2008)
A federated database is a system in which several databases appear to function as a single entity. Each component database in the system is completely self-sustained and functional. When an application queries the federated database, the system figures out which of its component databases contains the data being requested and passes the request to it. Federated databases can be thought of as database virtualization in much the same way that storage virtualization makes several drives appear as one.
In my past i have worked with bank, in which we faced the problem of load at year end. Using the Federated database the load for the system to search all the rows for single entity, will be eliminated by splitting the transaction by year. Users will often only look at transactions in the past year and the system will only need to touch one or two component databases (Shavit, 2008)
Monday, May 25, 2009
Exercise 24
Exercise 24:
1. Differentiate the various types of software agents.
The different type of agents are:
• Collaborative agents
• Interface agents
• Mobile agents
• Information/Internet agents
• Reactive agents
• Hybrid agents
• Smart Agents
A collaborative agents emphasise autonomy and cooperation (with other agents) in order to perform tasks for their owners.
A Interface agents emphasise autonomy and learning in order to perform tasks for their owners.
A Mobile agents are computational software processes capable of roaming wide area networks (WANs) such as the WWW, interacting with foreign hosts, gathering information on behalf of its owner and coming back home having performed the duties set by its user
A Information agents perform the role of managing, manipulating or collating information from many distributed sources.
A Reactive agents are very simple and do not have internal models of their environment. Rather, they react to stimuli within then environment in which they exist.
A hybrid agents refer to those whose constitution is a combination of two or more agent philosophies within a singular agent. These philosophies include a mobile philosophy, an interface agent philosophy, collaborative agent philosophy, etc.
A heterogeneous agent system may also contain one or more hybrid agents
(Nwana, 1996)
2.Describe how techniques such as artificial intelligence and statistical techniques are used in software agents.
Artificial intelligence refers to the science and engineering of making intelligent machines, especially intelligent computer programs. It is related to the similar task of using computers to understand human intelligence, but AI does not have to confine itself to methods that are biologically observable.many software sgents are developed which have AI and they are referde to as Intelligent agents. Some examples of these agents include the "BargainFinder Agent" and Cyber Yenta, which perform searches for the user. The first is incredibly simpleminded and and the latter an incredibly simplified version of the original MIT Yenta work/, which is still in progress. The claim to intelligence here is basically string matching. Along the same lines, but somewhat more "AIish", CompassWare offers an Intelligent News Filter that parses natural language to perform a search. (Petrie, 1996 )
3. Identify various activities in e-commerce where software agents are currently in use.
As said by Maria Gini some problem of e-commerce which software agents can sole easily are:
• Procurement: obtaining materials, services. managing inflow into the organization towards the end user.
• Brokering Services: finding information about products, sellers, and prices, providing protection for privacy, validating purchasers credit, billing and accounting, etc.
• Digital Libraries and Recommending Services: retrieving information from distributed sources, filtering information on contents, collaborative filtering.
• Notification Services: notifying of new books or CDs, notifying when specific products are available at a specific price.
(Gini, 1999)
4. Computing ethics and bot programming case study: rocky
a. Get an account username and password from the lecturer to LC_MOO at http://ispg.csu.edu.au:7680 and login to the Welcome Lobby.
The username used is train5 and the password is train5.
b. Hold a 5-minute discussion with Rocky on a special topic. Commands act rocky (start bot) hush rocky (stop bot)
when i initiated act rockey command it gave me this message
train5 activates Rocky.
Rocky says, "Gee thanks for waking me up! I must have dozed off.."
c. Rocky is an ELIZA-like bot. Report your findings.
ELIZA was a computer program and primitive natural language processing. ELIZA operated by processing users' responses to scripts.it have a list of predefined answer to various responses of the user.one of the most famous of which was DOCTOR, a simulation of a Rogerian psychotherapist.
1. Differentiate the various types of software agents.
The different type of agents are:
• Collaborative agents
• Interface agents
• Mobile agents
• Information/Internet agents
• Reactive agents
• Hybrid agents
• Smart Agents
A collaborative agents emphasise autonomy and cooperation (with other agents) in order to perform tasks for their owners.
A Interface agents emphasise autonomy and learning in order to perform tasks for their owners.
A Mobile agents are computational software processes capable of roaming wide area networks (WANs) such as the WWW, interacting with foreign hosts, gathering information on behalf of its owner and coming back home having performed the duties set by its user
A Information agents perform the role of managing, manipulating or collating information from many distributed sources.
A Reactive agents are very simple and do not have internal models of their environment. Rather, they react to stimuli within then environment in which they exist.
A hybrid agents refer to those whose constitution is a combination of two or more agent philosophies within a singular agent. These philosophies include a mobile philosophy, an interface agent philosophy, collaborative agent philosophy, etc.
A heterogeneous agent system may also contain one or more hybrid agents
(Nwana, 1996)
2.Describe how techniques such as artificial intelligence and statistical techniques are used in software agents.
Artificial intelligence refers to the science and engineering of making intelligent machines, especially intelligent computer programs. It is related to the similar task of using computers to understand human intelligence, but AI does not have to confine itself to methods that are biologically observable.many software sgents are developed which have AI and they are referde to as Intelligent agents. Some examples of these agents include the "BargainFinder Agent" and Cyber Yenta, which perform searches for the user. The first is incredibly simpleminded and and the latter an incredibly simplified version of the original MIT Yenta work/, which is still in progress. The claim to intelligence here is basically string matching. Along the same lines, but somewhat more "AIish", CompassWare offers an Intelligent News Filter that parses natural language to perform a search. (Petrie, 1996 )
3. Identify various activities in e-commerce where software agents are currently in use.
As said by Maria Gini some problem of e-commerce which software agents can sole easily are:
• Procurement: obtaining materials, services. managing inflow into the organization towards the end user.
• Brokering Services: finding information about products, sellers, and prices, providing protection for privacy, validating purchasers credit, billing and accounting, etc.
• Digital Libraries and Recommending Services: retrieving information from distributed sources, filtering information on contents, collaborative filtering.
• Notification Services: notifying of new books or CDs, notifying when specific products are available at a specific price.
(Gini, 1999)
4. Computing ethics and bot programming case study: rocky
a. Get an account username and password from the lecturer to LC_MOO at http://ispg.csu.edu.au:7680 and login to the Welcome Lobby.
The username used is train5 and the password is train5.
b. Hold a 5-minute discussion with Rocky on a special topic. Commands act rocky (start bot) hush rocky (stop bot)
when i initiated act rockey command it gave me this message
train5 activates Rocky.
Rocky says, "Gee thanks for waking me up! I must have dozed off.."
c. Rocky is an ELIZA-like bot. Report your findings.
ELIZA was a computer program and primitive natural language processing. ELIZA operated by processing users' responses to scripts.it have a list of predefined answer to various responses of the user.one of the most famous of which was DOCTOR, a simulation of a Rogerian psychotherapist.
Exercise 25
Exercise 25: M-commerce and the e-wallet: Innovation and mobile devices
1. What is meant by a location based service?
A location-based service (LBS) is a software application for an IP-capable mobile device that requires knowledge about where the mobile device is located. Location-based services can be query-based and provide the end user with useful information such as "Where is the nearest ATM?" or they can be push-based and deliver coupons or other marketing information to customers who are in a specific geographical area.
An LBS requires five basic components: the service provider's software application, a mobile network to transmit data and requests for service, a content provider to supply the end user with geo-specific information, a positioning component and the end user's mobile device. By law, location-based services must be permission-based. That means that the end user must opt-in to the service in order to use it. In most cases, this means installing the LBS application and accepting a request to allow the service to know the device's location. (anynomous, location-based service (LBS), 2009)
In the research to explore the pro and cons of the LBS, I found a video which was released by CNN in which reporter Susan Candiotti explains how LBS marketing will work.
http://itknowledgeexchange.techtarget.com/overheard/video-the-pros-and-cons-of-lbs-marketing/
This video discusses all the privacy concern and the working of the LBS. Please do have to go at the video it might show you the potential the service hold.
1. What is meant by a location based service?
A location-based service (LBS) is a software application for an IP-capable mobile device that requires knowledge about where the mobile device is located. Location-based services can be query-based and provide the end user with useful information such as "Where is the nearest ATM?" or they can be push-based and deliver coupons or other marketing information to customers who are in a specific geographical area.
An LBS requires five basic components: the service provider's software application, a mobile network to transmit data and requests for service, a content provider to supply the end user with geo-specific information, a positioning component and the end user's mobile device. By law, location-based services must be permission-based. That means that the end user must opt-in to the service in order to use it. In most cases, this means installing the LBS application and accepting a request to allow the service to know the device's location. (anynomous, location-based service (LBS), 2009)
In the research to explore the pro and cons of the LBS, I found a video which was released by CNN in which reporter Susan Candiotti explains how LBS marketing will work.
http://itknowledgeexchange.techtarget.com/overheard/video-the-pros-and-cons-of-lbs-marketing/
This video discusses all the privacy concern and the working of the LBS. Please do have to go at the video it might show you the potential the service hold.
Exercise 23
Exercise:23
1. What is a spider? What does it do?
A spider is nothing more than a computer program that follows certain links on the web and gathers information as it goes. For example, Googlebot will follow HREF or SRC tags to find pages and images that are associated with any given site. (What Exactly IS a Spider, n.d.).
2.What is a meta-search engine? Provide some examples
metacrawlers don't crawl the web themselves to build listings. Instead, they allow searches to be sent to several search engines all at once. The results are then blended together onto one page. Below are some of the major metacrawlers:
Dogpile
http://www.dogpile.com
Popular metasearch site owned by InfoSpace that sends a search to a customizable list of search engines, directories and specialty search sites, then displays results from each search engine individually. Winner of Best Meta Search Engine award from Search Engine Watch for 2003. (Review: Dogpile Sports a Fetching New Look, SearchDay, Sept. 2, 2003. Updates: Dogpile Enhances Search Results Search Engine Watch Blog, Nov. 10, 2004 - Dogpile Adds New Features Search Engine Watch Blog, Jan. 18, 2005 )
Vivisimo
http://vivisimo.com/
Enter a search term, and Vivismo will not only pull back matching responses from major search engines but also automatically organize the pages into categories. Slick and easy to use. Vivisimo won second place for Best Meta Search Engine in the 2003 Search Engine Watch awards and winner in 2002. (Review: Power Searching with Vivisimo, SearchDay, July 8, 2003)
Kartoo
http://www.kartoo.com
If you like the idea of seeing your web results visually, this meta search site shows the results with sites being interconnected by keywords. Honorable mention for Best Meta Search Engine award from Search Engine Watch in 2002.
Mamma
http://www.mamma.com
Founded in 1996, Mamma.com is one of the oldest meta search engines on the web. Mamma searches against a variety of major crawlers, directories and specialty search sites. The service also provides a paid listings option for advertisers, Mamma Classifieds. Mamma was an honorable mention for Best Meta Search Engine in the 2003 Search Engine Watch awards.
3. How can you get your site listed at major search sites; and how could you improve your site ranking?
One of the most popular method to improve the site ranking is to attract more visitors through advertising .other sites which are highly rated can be used to advertise you site, through which your site can attract more visitors.
1. What is a spider? What does it do?
A spider is nothing more than a computer program that follows certain links on the web and gathers information as it goes. For example, Googlebot will follow HREF or SRC tags to find pages and images that are associated with any given site. (What Exactly IS a Spider, n.d.).
2.What is a meta-search engine? Provide some examples
metacrawlers don't crawl the web themselves to build listings. Instead, they allow searches to be sent to several search engines all at once. The results are then blended together onto one page. Below are some of the major metacrawlers:
Dogpile
http://www.dogpile.com
Popular metasearch site owned by InfoSpace that sends a search to a customizable list of search engines, directories and specialty search sites, then displays results from each search engine individually. Winner of Best Meta Search Engine award from Search Engine Watch for 2003. (Review: Dogpile Sports a Fetching New Look, SearchDay, Sept. 2, 2003. Updates: Dogpile Enhances Search Results Search Engine Watch Blog, Nov. 10, 2004 - Dogpile Adds New Features Search Engine Watch Blog, Jan. 18, 2005 )
Vivisimo
http://vivisimo.com/
Enter a search term, and Vivismo will not only pull back matching responses from major search engines but also automatically organize the pages into categories. Slick and easy to use. Vivisimo won second place for Best Meta Search Engine in the 2003 Search Engine Watch awards and winner in 2002. (Review: Power Searching with Vivisimo, SearchDay, July 8, 2003)
Kartoo
http://www.kartoo.com
If you like the idea of seeing your web results visually, this meta search site shows the results with sites being interconnected by keywords. Honorable mention for Best Meta Search Engine award from Search Engine Watch in 2002.
Mamma
http://www.mamma.com
Founded in 1996, Mamma.com is one of the oldest meta search engines on the web. Mamma searches against a variety of major crawlers, directories and specialty search sites. The service also provides a paid listings option for advertisers, Mamma Classifieds. Mamma was an honorable mention for Best Meta Search Engine in the 2003 Search Engine Watch awards.
3. How can you get your site listed at major search sites; and how could you improve your site ranking?
One of the most popular method to improve the site ranking is to attract more visitors through advertising .other sites which are highly rated can be used to advertise you site, through which your site can attract more visitors.
Exercise 22
Exercise 22.
Differentiate between software systems such as Customer Relationship Management (CRM) software, Business-to-Business e-commerce programs and Supply-Chain Management (SCM) software.
CRM (customer relationship management) is an information industry term for methodologies, software, and usually Internet capabilities that help and enterprises manage customer relationships in an organized way. For example, an enterprise might build a database about its customers that described relationships in sufficient detail so that management, salespeople, people providing service, and perhaps the customer directly could access information, match customer needs with product plans and offerings, remind customers of service requirements, know what other products a customer had purchased, and so forth. (jean, 2007)
Business-to-Business (B2B) software is used to transfer data between businesses such as purchase orders and invoices. This decreases cost of employees to manually enter data, time for goods to ship as orders can be processed almost immediately if stock is available, and time to receive payment, as many businesses using B2B have payments automatically flagged to pay on their due date.
Supply chain Management: Supply chain management (SCM) is the oversight of materials, information, and finances as they move in a process from supplier to manufacturer to wholesaler to retailer to consumer. Supply chain management involves coordinating and integrating these flows both within and among companies. Supply chain management flows can be divided into three main flows:
• The product flow
• The information flow
• The finances flow
The product flow includes the movement of goods from a supplier to a customer, as well as any customer returns or service needs. The information flow involves transmitting order and updating the status of delivery. The financial flow consists of credit terms, payment schedules, and consignment and title ownership arrangements. (anynomous, SCM, 2007)
Differentiate between software systems such as Customer Relationship Management (CRM) software, Business-to-Business e-commerce programs and Supply-Chain Management (SCM) software.
CRM (customer relationship management) is an information industry term for methodologies, software, and usually Internet capabilities that help and enterprises manage customer relationships in an organized way. For example, an enterprise might build a database about its customers that described relationships in sufficient detail so that management, salespeople, people providing service, and perhaps the customer directly could access information, match customer needs with product plans and offerings, remind customers of service requirements, know what other products a customer had purchased, and so forth. (jean, 2007)
Business-to-Business (B2B) software is used to transfer data between businesses such as purchase orders and invoices. This decreases cost of employees to manually enter data, time for goods to ship as orders can be processed almost immediately if stock is available, and time to receive payment, as many businesses using B2B have payments automatically flagged to pay on their due date.
Supply chain Management: Supply chain management (SCM) is the oversight of materials, information, and finances as they move in a process from supplier to manufacturer to wholesaler to retailer to consumer. Supply chain management involves coordinating and integrating these flows both within and among companies. Supply chain management flows can be divided into three main flows:
• The product flow
• The information flow
• The finances flow
The product flow includes the movement of goods from a supplier to a customer, as well as any customer returns or service needs. The information flow involves transmitting order and updating the status of delivery. The financial flow consists of credit terms, payment schedules, and consignment and title ownership arrangements. (anynomous, SCM, 2007)
Exercise 21
Exercise 21: Shopping Cart Specifications
Develop the class diagram for the following shopping cart specifications:
A shopping Cart object is associated with only one credit Card and customer and to items in itemToBuy. Persistent customer information such as name, billing address, delivery address, e-mail address, and credit rating is stored in the customer object. The credit card object is associated with a frequentShopper discount object, if the credit rating for the customer is good. The customer can make or cancel orders as well as add and delete items to the shoppingCart product. The credit card object contains the secure method for checking that the charge is authentic.
Develop the class diagram for the following shopping cart specifications:
A shopping Cart object is associated with only one credit Card and customer and to items in itemToBuy. Persistent customer information such as name, billing address, delivery address, e-mail address, and credit rating is stored in the customer object. The credit card object is associated with a frequentShopper discount object, if the credit rating for the customer is good. The customer can make or cancel orders as well as add and delete items to the shoppingCart product. The credit card object contains the secure method for checking that the charge is authentic.
Exercise 20
Exercise 20: Modelling with UML
Describe each of the eight main diagrams used in UML.
At the centre of the UML are its nine kinds of modelling diagrams, which we describe here.
• Use case diagrams
• Class diagrams
• Object diagrams
• Sequence diagrams
• Collaboration diagrams
• Statechart diagrams
• Activity diagrams
• Component diagrams
• Deployment diagrams
(Miller, 2008)
Use case diagrams describe what a system does from the standpoint of an external observer. The emphasis is on what a system does rather than how.
Class diagram gives an overview of a system by showing its classes and the relationships among them. Class diagrams are static -- they display what interacts but not what happens when they do interact.
Object diagrams show instances instead of classes. They are useful for explaining small pieces with complicated relationships, especially recursive relationships.
Sequence diagram is an interaction diagram that details how operations are carried out -- what messages are sent and when. Sequence diagrams are organized according to time. The time progresses as you go down the page
Collaboration diagrams are also interaction diagrams. They convey the same information as sequence diagrams, but they focus on object roles instead of the times that messages are sent. In a sequence diagram, object roles are the vertices and messages are the connecting links.
A state chart diagram shows the possible states of the object and the transitions that cause a change in state.
An activity diagram is essentially a fancy flowchart. Activity diagrams and statechart diagrams are related. While a state chart diagram focuses attention on an object undergoing a process (or on a process as an object), an activity diagram focuses on the flow of activities involved in a single process. The activity diagram shows the how those activities depend on one another.
A component is a code module. Component diagrams are physical analogs of class diagram.
Deployment diagrams show the physical configurations of software and hardware.
Describe each of the eight main diagrams used in UML.
At the centre of the UML are its nine kinds of modelling diagrams, which we describe here.
• Use case diagrams
• Class diagrams
• Object diagrams
• Sequence diagrams
• Collaboration diagrams
• Statechart diagrams
• Activity diagrams
• Component diagrams
• Deployment diagrams
(Miller, 2008)
Use case diagrams describe what a system does from the standpoint of an external observer. The emphasis is on what a system does rather than how.
Class diagram gives an overview of a system by showing its classes and the relationships among them. Class diagrams are static -- they display what interacts but not what happens when they do interact.
Object diagrams show instances instead of classes. They are useful for explaining small pieces with complicated relationships, especially recursive relationships.
Sequence diagram is an interaction diagram that details how operations are carried out -- what messages are sent and when. Sequence diagrams are organized according to time. The time progresses as you go down the page
Collaboration diagrams are also interaction diagrams. They convey the same information as sequence diagrams, but they focus on object roles instead of the times that messages are sent. In a sequence diagram, object roles are the vertices and messages are the connecting links.
A state chart diagram shows the possible states of the object and the transitions that cause a change in state.
An activity diagram is essentially a fancy flowchart. Activity diagrams and statechart diagrams are related. While a state chart diagram focuses attention on an object undergoing a process (or on a process as an object), an activity diagram focuses on the flow of activities involved in a single process. The activity diagram shows the how those activities depend on one another.
A component is a code module. Component diagrams are physical analogs of class diagram.
Deployment diagrams show the physical configurations of software and hardware.
Exercise 19
Exercise 19: TP Monitors and Transaction Protocols
1. Give a description in your own words of the ACID properties of a transaction.
ACID properties of a transaction refers to
Atomicity: The phrase "all or nothing" succinctly describes the first ACID property of atomicity. When an update occurs to a database, either all or none of the update becomes available to anyone beyond the user or application performing the update.
Consistency: Consistency is the ACID property that ensures that any changes to values in an instance are consistent with changes to other values in the same instance
Isolation: The isolation portion of the ACID properties is needed when there are concurrent transactions. An important concept to understanding isolation through transactions is serializability. Transactions are serializable when the effect on the database is the same whether the transactions are executed in serial order or in an interleaved fashion.
Durability: Durability refers to the ability of the system to recover committed transaction updates if either the system or the storage media fails.
(Associates, 2009)
2. Describe a TP monitor environment. How can a TP monitor stop an operating system being overwhelmed?
A TP Monitor is a subsystem that groups together sets of related database updates and submits them together to a relational database. The result is that the database server does not need to do all of the work of managing the consistency/correctness of the database; the TP Monitor makes sure that groups of updates take place together or not at all. TP-Monitor environment which partitions the workflow engine into several resource managers (RMs) individually managed by a TP-Monitor environment. The RMs together form the workflow engine serving user requests. (Browne's, 2007)
3. What is the difference in load balancing with traditional and transactional MOM, RPC, and conversations?
Load balancing is dividing the amount of work that a computer has to do between two or more computers so that more work gets done in the same amount of time and, in general, all users get served faster.
Traditional RPC Model: In this the request from user should be queued and wait synchronously for the server to execute and return the reply where the client and server should be free at the same time.
MOM: MOM stands for Message-oriented middleware It acts as a middleware between the client and server, buffering the requests from user and replies from servers.
RPC(remote Procedure Call): Remote procedure call (RPC) is an Inter-process communication technology that allows a computer program to cause a subroutine or procedure to execute in another address space(commonly on another computer on a shared network) without the programmer explicitly coding the details for this remote interaction.
4.Why is a two-phase commit protocol better than a one-phase atomic commit protocol?
One –phase Atomic Commit Protocol
This protocol overlaps the voting phase with the execution of transaction and just has a decision
phase. There are two implementation the Implicit Yes Voting and the Coordinate Log.
Advantages:
Simple protocol fewer overheads.
• Low latency due to fewer disk writes.
• Useful in case of low bandwidth networks, as lesser messages are exchanged.
• In most cases all the updates will be logged befor commit so durability is assured.
Disadvantages
• The greatest disadvantage is that it can only handle immediate consistency con-
straints as there is no voting phase. It can not handle the deferred consistency
constraints
Two-Phase Atomic commit protocol: This is the most widely used protocol which commences in two phases ,Voting , to ensure that all sites are ready to commit,Decision , to ensure uniformity at abort or commit at all sites.
2PC is largely used in all distributed systems.
Advantages
• It ensures atomicity even in the presence of deferred constraints.
• It ensures independent recovery of all sites.
• Since it takes place in twophases, it can handle network failures, disconnections and
in their presence assure atomicity.
Disadvantages
• Involves a great deal of message complexity.
• Greater communication overheads as compared to simple optimistic protocols.
• Blocking of site nodes in case of failure of coordinator.
• Multiple forced writes of log, which increase latency.
• Its performance is again a trade off,especially for short lived transactions, like Internet
applications
(Anshu Veda, 2004)
1. Give a description in your own words of the ACID properties of a transaction.
ACID properties of a transaction refers to
Atomicity: The phrase "all or nothing" succinctly describes the first ACID property of atomicity. When an update occurs to a database, either all or none of the update becomes available to anyone beyond the user or application performing the update.
Consistency: Consistency is the ACID property that ensures that any changes to values in an instance are consistent with changes to other values in the same instance
Isolation: The isolation portion of the ACID properties is needed when there are concurrent transactions. An important concept to understanding isolation through transactions is serializability. Transactions are serializable when the effect on the database is the same whether the transactions are executed in serial order or in an interleaved fashion.
Durability: Durability refers to the ability of the system to recover committed transaction updates if either the system or the storage media fails.
(Associates, 2009)
2. Describe a TP monitor environment. How can a TP monitor stop an operating system being overwhelmed?
A TP Monitor is a subsystem that groups together sets of related database updates and submits them together to a relational database. The result is that the database server does not need to do all of the work of managing the consistency/correctness of the database; the TP Monitor makes sure that groups of updates take place together or not at all. TP-Monitor environment which partitions the workflow engine into several resource managers (RMs) individually managed by a TP-Monitor environment. The RMs together form the workflow engine serving user requests. (Browne's, 2007)
3. What is the difference in load balancing with traditional and transactional MOM, RPC, and conversations?
Load balancing is dividing the amount of work that a computer has to do between two or more computers so that more work gets done in the same amount of time and, in general, all users get served faster.
Traditional RPC Model: In this the request from user should be queued and wait synchronously for the server to execute and return the reply where the client and server should be free at the same time.
MOM: MOM stands for Message-oriented middleware It acts as a middleware between the client and server, buffering the requests from user and replies from servers.
RPC(remote Procedure Call): Remote procedure call (RPC) is an Inter-process communication technology that allows a computer program to cause a subroutine or procedure to execute in another address space(commonly on another computer on a shared network) without the programmer explicitly coding the details for this remote interaction.
4.Why is a two-phase commit protocol better than a one-phase atomic commit protocol?
One –phase Atomic Commit Protocol
This protocol overlaps the voting phase with the execution of transaction and just has a decision
phase. There are two implementation the Implicit Yes Voting and the Coordinate Log.
Advantages:
Simple protocol fewer overheads.
• Low latency due to fewer disk writes.
• Useful in case of low bandwidth networks, as lesser messages are exchanged.
• In most cases all the updates will be logged befor commit so durability is assured.
Disadvantages
• The greatest disadvantage is that it can only handle immediate consistency con-
straints as there is no voting phase. It can not handle the deferred consistency
constraints
Two-Phase Atomic commit protocol: This is the most widely used protocol which commences in two phases ,Voting , to ensure that all sites are ready to commit,Decision , to ensure uniformity at abort or commit at all sites.
2PC is largely used in all distributed systems.
Advantages
• It ensures atomicity even in the presence of deferred constraints.
• It ensures independent recovery of all sites.
• Since it takes place in twophases, it can handle network failures, disconnections and
in their presence assure atomicity.
Disadvantages
• Involves a great deal of message complexity.
• Greater communication overheads as compared to simple optimistic protocols.
• Blocking of site nodes in case of failure of coordinator.
• Multiple forced writes of log, which increase latency.
• Its performance is again a trade off,especially for short lived transactions, like Internet
applications
(Anshu Veda, 2004)
Exercise 18
Exercise 18: Threading Demonstration in Python
Sorry ,i am not good at programming and that to python, i have never ever studied python in my past profile and to answer this exercise i would have to start from zero .so i would not be able to answer this question
Sorry ,i am not good at programming and that to python, i have never ever studied python in my past profile and to answer this exercise i would have to start from zero .so i would not be able to answer this question
Exercise 17
Exercise 17: Concurrency Terms
1.Find definitions for eight terms and concepts used in threaded programming
Waitable timer: Waitable timers were introduced with Windows 98 and Windows NT 4.0. and they were designed to work with threads that need to block for some times. A waitable timer object is a synchronization object whose state is set to signaled when the specified due time arrives. There are two types of waitable timers that can be created: manual-reset and synchronization.
Mutex (mutual exclusion): Mutual exclusion algorithms are used in concurrent programming to avoid the simultaneous use of a common resource, such as a global variable, by pieces of computer code called critical sections.
Thread Synchronization: Thread synchronization requires that a running thread gain a "lock" on an object before it can access it. The thread will wait in line for another thread that is using the method/data member to be done with it. This is very important to prevent the corruption of program data if multiple threads will be accessing the same data. (unanynomous)
Semaphores: a semaphore is a protected variable or abstract data type which constitutes the classic method for restricting access to shared resources such as shared memory in a multiprogramming environment. A counting semaphore is a counter for a set of available resources, rather than a locked/unlocked flag of a single resource. (anynomous, Semaphore (programming))
Locks:It is used to prevent conflict by ensuring that only one thread can access the resource at a time. It might be read or write lock.
Deadlock: A deadlock is a situation where in two or more competing actions are waiting for the other to finish, and thus neither ever does. (anynomous, wipkipedia)
Threads: A thread is a sequence of responses to an initial message posting. This enables you to follow or join an individual discussion in a newsgroup from among the many that may be there. A thread is usually shown graphically as an inital message and successive messages "hung off" the original message.
Event:An event is a sensor output, user action, or a message from other programs or threads (Wikipedia – Event-driven programming, n.d.).
1.Find definitions for eight terms and concepts used in threaded programming
Waitable timer: Waitable timers were introduced with Windows 98 and Windows NT 4.0. and they were designed to work with threads that need to block for some times. A waitable timer object is a synchronization object whose state is set to signaled when the specified due time arrives. There are two types of waitable timers that can be created: manual-reset and synchronization.
Mutex (mutual exclusion): Mutual exclusion algorithms are used in concurrent programming to avoid the simultaneous use of a common resource, such as a global variable, by pieces of computer code called critical sections.
Thread Synchronization: Thread synchronization requires that a running thread gain a "lock" on an object before it can access it. The thread will wait in line for another thread that is using the method/data member to be done with it. This is very important to prevent the corruption of program data if multiple threads will be accessing the same data. (unanynomous)
Semaphores: a semaphore is a protected variable or abstract data type which constitutes the classic method for restricting access to shared resources such as shared memory in a multiprogramming environment. A counting semaphore is a counter for a set of available resources, rather than a locked/unlocked flag of a single resource. (anynomous, Semaphore (programming))
Locks:It is used to prevent conflict by ensuring that only one thread can access the resource at a time. It might be read or write lock.
Deadlock: A deadlock is a situation where in two or more competing actions are waiting for the other to finish, and thus neither ever does. (anynomous, wipkipedia)
Threads: A thread is a sequence of responses to an initial message posting. This enables you to follow or join an individual discussion in a newsgroup from among the many that may be there. A thread is usually shown graphically as an inital message and successive messages "hung off" the original message.
Event:An event is a sensor output, user action, or a message from other programs or threads (Wikipedia – Event-driven programming, n.d.).
Exercise 16
Exercise 16: Authentication and Encryption Systems
1. Visit an e-commerce website and survey the mode of payment allowed. Would you trust the site with your business?
The following website http://www.jewellerystore.com.au/ offer ecommerce .the payment are:
1. ALL MAJOR CREDIT CARDS or BANK ACCOUNT FUNDS TRANSFER through PayPal (Australia & all International purchases). All the payment are automatically directed through the PayPal checkout when the payment option is selected . PayPal is a secure and free service.
2. Direct Bank Deposit (Cash deposit, cash transfer, or internet bank transfer - Australia only). Account details will be issued upon checkout.
3. Bank Cheque/Australia Post Money Order. Payee details and postal address will be issued upon checkout.
2. What measures should e-commerce provide to create trust among their potential customers? What measures can be verified by the customer?
Measures that e-commerce sites can provide include
• passwords,
• software security,
• digital certificates from a trusted source
• ABN
• Validation seals
• The published phone numbers of the website have been called and verified as belonging to the web site.
• Verification that the privacy policy of the site
• SSL
• Secured Seals
3. Visit the Verisign web site – what solutions does it offer for e-commerce?
Verisign provided following ecommerce solutions:
• VeriSign® SSL Certificate Services enable secure commerce, communications, and interactions by providing encryption and authentication services to Web sites, intranets, and extranets.
• VeriSign® Identity and Authentication Services strengthen and protect digital identities with a network approach to strong authentication and online fraud detection services.
• VeriSign® Domain Name Services globalize access to the Internet, and VeriSign is the authoritative registry of all .com, .net, .cc, and .tv domain names.
(verisign)
4. Visit the TRUSTe website. Describe what services and solutions are offered?
TRUSTe provides security seals to the business which shows that the business has a secure privacy policy in place. TRUSTe’s Web Privacy Seal builds confidence between businesses and consumers by identifying businesses with reliable online privacy practices. The seal marks companies that adhere to TRUSTe's strict privacy principles, and comply with the TRUSTe Watchdog dispute resolution process. (TRUSTe, 2009)
5. Get the latest PGP software fromhttp://web.mit.edu/network/pgp.html; install it on two machines and encrypt a message on one machine and decrypt it on the other. Report your findings.
The web page is not available.
6. The use of digital certificates and passports are just two examples of many tools for validating legitimate users and avoiding consequences such as identity theft. What others exist?
The other tools for validating legitimate users are:
Digest: Digest authentication is based on a challenge-response authentication model. The user makes a request without authentication credentials and the Web Server replies with a WWW-Authenticate header indicating credentials. Instead of sending the username and password the server challenges the client with random nonce.
NTLM: NTLM Authentication is Microsoft's proprietary NT LAN Manager authentication algorithm over HTTP. It works on Microsoft Internet Explorer only. Integrated Windows authentication works the same way as Message Digest authentication. NTLM[3] is a Microsoft-proprietary protocol that authenticates users and computers based on an authentication challenge and response.
Microsoft Passport: The Passport single sign in service is an authentication service allowing users to create a single set of credentials that will enable them to sign in to any site Referred to as "participating sites" that supports a Passport service.
Forms-Based: Forms based authentication technique is the popular authentication technique on the internet. Conventionally, web applications had users authenticate themselves through a Web form. The user's credentials as captured by this form are submitted to the business logic which determines the authorization level.
(Hacker, 2008)
1. Visit an e-commerce website and survey the mode of payment allowed. Would you trust the site with your business?
The following website http://www.jewellerystore.com.au/ offer ecommerce .the payment are:
1. ALL MAJOR CREDIT CARDS or BANK ACCOUNT FUNDS TRANSFER through PayPal (Australia & all International purchases). All the payment are automatically directed through the PayPal checkout when the payment option is selected . PayPal is a secure and free service.
2. Direct Bank Deposit (Cash deposit, cash transfer, or internet bank transfer - Australia only). Account details will be issued upon checkout.
3. Bank Cheque/Australia Post Money Order. Payee details and postal address will be issued upon checkout.
2. What measures should e-commerce provide to create trust among their potential customers? What measures can be verified by the customer?
Measures that e-commerce sites can provide include
• passwords,
• software security,
• digital certificates from a trusted source
• ABN
• Validation seals
• The published phone numbers of the website have been called and verified as belonging to the web site.
• Verification that the privacy policy of the site
• SSL
• Secured Seals
3. Visit the Verisign web site – what solutions does it offer for e-commerce?
Verisign provided following ecommerce solutions:
• VeriSign® SSL Certificate Services enable secure commerce, communications, and interactions by providing encryption and authentication services to Web sites, intranets, and extranets.
• VeriSign® Identity and Authentication Services strengthen and protect digital identities with a network approach to strong authentication and online fraud detection services.
• VeriSign® Domain Name Services globalize access to the Internet, and VeriSign is the authoritative registry of all .com, .net, .cc, and .tv domain names.
(verisign)
4. Visit the TRUSTe website. Describe what services and solutions are offered?
TRUSTe provides security seals to the business which shows that the business has a secure privacy policy in place. TRUSTe’s Web Privacy Seal builds confidence between businesses and consumers by identifying businesses with reliable online privacy practices. The seal marks companies that adhere to TRUSTe's strict privacy principles, and comply with the TRUSTe Watchdog dispute resolution process. (TRUSTe, 2009)
5. Get the latest PGP software fromhttp://web.mit.edu/network/pgp.html; install it on two machines and encrypt a message on one machine and decrypt it on the other. Report your findings.
The web page is not available.
6. The use of digital certificates and passports are just two examples of many tools for validating legitimate users and avoiding consequences such as identity theft. What others exist?
The other tools for validating legitimate users are:
Digest: Digest authentication is based on a challenge-response authentication model. The user makes a request without authentication credentials and the Web Server replies with a WWW-Authenticate header indicating credentials. Instead of sending the username and password the server challenges the client with random nonce.
NTLM: NTLM Authentication is Microsoft's proprietary NT LAN Manager authentication algorithm over HTTP. It works on Microsoft Internet Explorer only. Integrated Windows authentication works the same way as Message Digest authentication. NTLM[3] is a Microsoft-proprietary protocol that authenticates users and computers based on an authentication challenge and response.
Microsoft Passport: The Passport single sign in service is an authentication service allowing users to create a single set of credentials that will enable them to sign in to any site Referred to as "participating sites" that supports a Passport service.
Forms-Based: Forms based authentication technique is the popular authentication technique on the internet. Conventionally, web applications had users authenticate themselves through a Web form. The user's credentials as captured by this form are submitted to the business logic which determines the authorization level.
(Hacker, 2008)
Exercise 15
Exercise 15: Protecting and Archiving Data
1. What makes a firewall a good security investment? Accessing the Internet, find two or three firewall vendors. Do they provide hardware, software or both?
A firewall is a set of related programs, located at a network gateway server, which protects the resources of a private network from users from other networks. (The term also implies the security policy that is used with the programs.) An enterprise with an intranet that allows its workers access to the wider Internet installs a firewall to prevent outsiders from accessing its own private data resources and for controlling what outside resources its own users have access to.
Some providing software firewall are:
• Checkpoint zonealarm pro
• Sunbelt personal firewall
• Comodo firewall pro
Hardware Firewall:
• D-link - D-Link DIR-655 Extreme N Wireless Router
• Checkpoint- Zone Alarm Secure Wireless Router
2. Find out if your university or workplace has a backup policy in place. Is it followed and enforced?
In my past profile i have worked with Capital Local Area Bank ,India .the backup policy of the bank included es a daily backup on a 5 week cycle, as well as a month end backup. The month end backup is kept for 12 months. The financial year-end backup is kept for 7 years as a legal requirement. This policy is strictly enforced. Even if part of a backup fails, it must be determined why it failed, and steps taken to prevent this from reoccurring.
3. Most of the antivirus software perform an active scanning of the user activity on the Internet, detecting downloads and attachments in e-mails. Hackers have readily available resources to create new viruses. How easy is it to find a virus writing kit? Search the Internet and find such a tool. For example, see what you can find athttp://vx.netlux.org/dat/vct.shtml.
One of the website dedicated to write virus are http://virus.bartolich.at/virus-writing-HOWTO/_html/index.htmlReferences.
http://etricks.in/tag/how-to-write-virus-codes
but my antivirus didn’t let me download these files .as of the sites are blacklisted on my anti virsus.
1. What makes a firewall a good security investment? Accessing the Internet, find two or three firewall vendors. Do they provide hardware, software or both?
A firewall is a set of related programs, located at a network gateway server, which protects the resources of a private network from users from other networks. (The term also implies the security policy that is used with the programs.) An enterprise with an intranet that allows its workers access to the wider Internet installs a firewall to prevent outsiders from accessing its own private data resources and for controlling what outside resources its own users have access to.
Some providing software firewall are:
• Checkpoint zonealarm pro
• Sunbelt personal firewall
• Comodo firewall pro
Hardware Firewall:
• D-link - D-Link DIR-655 Extreme N Wireless Router
• Checkpoint- Zone Alarm Secure Wireless Router
2. Find out if your university or workplace has a backup policy in place. Is it followed and enforced?
In my past profile i have worked with Capital Local Area Bank ,India .the backup policy of the bank included es a daily backup on a 5 week cycle, as well as a month end backup. The month end backup is kept for 12 months. The financial year-end backup is kept for 7 years as a legal requirement. This policy is strictly enforced. Even if part of a backup fails, it must be determined why it failed, and steps taken to prevent this from reoccurring.
3. Most of the antivirus software perform an active scanning of the user activity on the Internet, detecting downloads and attachments in e-mails. Hackers have readily available resources to create new viruses. How easy is it to find a virus writing kit? Search the Internet and find such a tool. For example, see what you can find athttp://vx.netlux.org/dat/vct.shtml.
One of the website dedicated to write virus are http://virus.bartolich.at/virus-writing-HOWTO/_html/index.htmlReferences.
http://etricks.in/tag/how-to-write-virus-codes
but my antivirus didn’t let me download these files .as of the sites are blacklisted on my anti virsus.
Exercise 14
Exercise 14: Electronic Payments and Security II
1. What are cookies and how are they used to improve security?
A cookie is a text-only string that gets entered into the memory of your browser. This value of a variable that a website sets. If the lifetime of this value is set to be longer than the time you spend at that site, then this string is saved to file for future reference.
2. Can the use of cookies be a security risk?
There are some cookies that are malicious cookies that hackers sometimes use to store your information - the keystrokes, sometimes your passwords and your user names - and they use these cookies to send information from your computer to theirs. If you value your security on the internet, you can set your web browser settings to a very high security so that websites don't retain these cookies.
The following video can be used to understand the ffect of cookies on security
http://www.videojug.com/expertanswer/internet-safety/how-do-cookies-affect-my-internet-security
1. What are cookies and how are they used to improve security?
A cookie is a text-only string that gets entered into the memory of your browser. This value of a variable that a website sets. If the lifetime of this value is set to be longer than the time you spend at that site, then this string is saved to file for future reference.
2. Can the use of cookies be a security risk?
There are some cookies that are malicious cookies that hackers sometimes use to store your information - the keystrokes, sometimes your passwords and your user names - and they use these cookies to send information from your computer to theirs. If you value your security on the internet, you can set your web browser settings to a very high security so that websites don't retain these cookies.
The following video can be used to understand the ffect of cookies on security
http://www.videojug.com/expertanswer/internet-safety/how-do-cookies-affect-my-internet-security
Exercise 13
Exercise: 13
1. List and describe your experiences with a secure Web site. Some examples may be:
• University enrolment;
• online banking, auctions, real estate;
• booking a cheap air ticket or concert ticket;
• Shopping online for a book, software or a CD.
When using secure sites one common thing which i noticed was that the sites where very logically designed and easy to use. Most of the sites are very easy to navigate to find what you want. Shopping sites generally contain a shopping cart and a checkout. Some of the sites which i have used are , Amazon, Ebay, Jetstar etc. The information about the reliability of the site can be checked from the SSL certificate and the information available on the sites about its security.
2. What is SET and how does it compare to SSL as a platform for secure electronic transactions? Is SET in common use?
A protocol designed to en sure the security and integrity of online communications and purchases, Secure Electronic Transaction (SET) uses digital certificates, issued to merchants and other businesses and customers, to perform a series of security checks verifying that the identity of a customer or sender of information is valid.
The Secure Sockets Layer protects data transferred over http using encryption enabled by a server's SSL Certificate. An SSL Certificate contains a public key and a private key. A public key is used to encrypt information and a private key is used to decipher it. When a browser points to a secured domain, an SSL handshake authenticates the server and the client and establishes an encryption method and a unique session key. They can begin a secure session that protects message privacy and message integrity. (SSL).SSL is a standard for encrypted client/server communication between network devices. A network protocol, SSL runs on top of TCP/IP (Transmission Control Protocol/Internet Protocol: facilitates connectivity at diverse environments
Comparing SSL and SET we can see that, SSL is relatively easy to use and is widely acceptable. On the other side the major reasons for the marketplace's eventual decision to go with SET will be the faster settlement times, stronger assurances regarding order integrity. SET will become the industry standard because of SET's back and forth, double check security measures and the fact that SET transfers money early in the transaction process. (Clough, 2008)
1. List and describe your experiences with a secure Web site. Some examples may be:
• University enrolment;
• online banking, auctions, real estate;
• booking a cheap air ticket or concert ticket;
• Shopping online for a book, software or a CD.
When using secure sites one common thing which i noticed was that the sites where very logically designed and easy to use. Most of the sites are very easy to navigate to find what you want. Shopping sites generally contain a shopping cart and a checkout. Some of the sites which i have used are , Amazon, Ebay, Jetstar etc. The information about the reliability of the site can be checked from the SSL certificate and the information available on the sites about its security.
2. What is SET and how does it compare to SSL as a platform for secure electronic transactions? Is SET in common use?
A protocol designed to en sure the security and integrity of online communications and purchases, Secure Electronic Transaction (SET) uses digital certificates, issued to merchants and other businesses and customers, to perform a series of security checks verifying that the identity of a customer or sender of information is valid.
The Secure Sockets Layer protects data transferred over http using encryption enabled by a server's SSL Certificate. An SSL Certificate contains a public key and a private key. A public key is used to encrypt information and a private key is used to decipher it. When a browser points to a secured domain, an SSL handshake authenticates the server and the client and establishes an encryption method and a unique session key. They can begin a secure session that protects message privacy and message integrity. (SSL).SSL is a standard for encrypted client/server communication between network devices. A network protocol, SSL runs on top of TCP/IP (Transmission Control Protocol/Internet Protocol: facilitates connectivity at diverse environments
Comparing SSL and SET we can see that, SSL is relatively easy to use and is widely acceptable. On the other side the major reasons for the marketplace's eventual decision to go with SET will be the faster settlement times, stronger assurances regarding order integrity. SET will become the industry standard because of SET's back and forth, double check security measures and the fact that SET transfers money early in the transaction process. (Clough, 2008)
Exercise 12
Exercise 12- Designing for a secure framework
Part 1: Find out about SET and the use of RSA 128-bit encryption for e-commerce.
SET (Secure Electronic Transfer): A protocol designed to en sure the security and integrity of online communications and purchases, Secure Electronic Transaction (SET) uses digital certificates, issued to merchants and other businesses and customers, to perform a series of security checks verifying that the identity of a customer or sender of information is valid.
The SET (Secure Electronic Transaction) protocol is an open industry standard developed for the secure transmission of payment information over the Internet and other electronic networks. SET has the strong support of two major league credit card companies: Visa and MasterCard .SET provides the basic framework within which many of the various components of securing digital transactions function. Digital certificates, digital signatures, and digital wallets all function according to the SET protocol.
Read more:http://ecommerce.hostip.info/pages/925/Secure-Electronic-Transaction-SET.html#ixzz0GCq4VUWr&B
RSA-128 bit Encryption:
Security has also been a major issue in the E-commerce. The strength of an encryption algorithm is based on its key length, expressed in bits. The longer the key length, the harder it is for an attacker to break the cipher. RSA 128-bit encryption is a public-key encryption and authentication system developed in 1977 by Ron Rivest, AdiShamir, and Leonard Aldeman. The method uses modular exponentiation, which can be performed efficiently by a computer, even when the module and exponent are hundreds of digits long. The public key is a modulus m and an exponent e. A message is represented by a number c between 0 and m-1. (If the message is longer, chop it up into pieces and encrypt each piece.) Raise c to the e power mod m and transmit the result. The private key is the same modulus m and the inverse exponent d, such that e×d is 1 mod φ(m). As you recall from the previous page, c to the e to the d gives c back again. Rising to the e encrypts, and raising to the d decrypts. In a typical application, m is the product of two large primes’ p and q. Thus φ(m) = (p-1)×(q-1). Given an exponent e, find the modular inverse relative to φ(m), and call it d. This builds the public and private keys. The security lies in the difficulty of factoring m into its primes. Without p and q, Charlie cannot derive φ(m), and cannot compute d. Anybody can send encrypted data to Bob, but only Bob can decrypt. (anynomous)
Part 2: What can you find out about network and host-based intrusion detection systems?
The goal of intrusion detection is to monitor network assets to detect anomalous behavior and misuse. This concept has been around for nearly twenty years but only recently has it seen a dramatic rise in popularity and incorporation into the overall information security infrastructure.
Network Intrusion system: Network intrusion detection deals with information passing on the wire between hosts. Typically referred to as "packet-sniffers," network intrusion detection devices intercept packets traveling along various communication mediums and protocols, usually TCP/IP. (Innella, 2001)
Host based Intrusion System: Host-based intrusion detection systems are designed to monitor, detect, and respond to user and system activity and attacks on a given host. Some more robust tools also offer audit policy management and centralization, supply data forensics, statistical analysis and evidentiary support, and in certain instances provide some measure of access control. Host-based intrusion detection is best suited to combat internal threats because of its ability to monitor and respond to specific user actions and file accesses on the host. (Power, 1999: 32.)
Part 3: What is 'phishing'?
Phishing is an e-mail fraud method in which the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients. A phishing expedition, like the fishing expedition it's named for, is a speculative venture: the phishes puts the lure hoping to fool at least a few of the prey that encounter the bait. (anynomous, Phishing, 2008)
The following link is a YouTube video which decide the Phishing http://www.youtube.com/watch?v=sqRZGhiHGxg
Part 1: Find out about SET and the use of RSA 128-bit encryption for e-commerce.
SET (Secure Electronic Transfer): A protocol designed to en sure the security and integrity of online communications and purchases, Secure Electronic Transaction (SET) uses digital certificates, issued to merchants and other businesses and customers, to perform a series of security checks verifying that the identity of a customer or sender of information is valid.
The SET (Secure Electronic Transaction) protocol is an open industry standard developed for the secure transmission of payment information over the Internet and other electronic networks. SET has the strong support of two major league credit card companies: Visa and MasterCard .SET provides the basic framework within which many of the various components of securing digital transactions function. Digital certificates, digital signatures, and digital wallets all function according to the SET protocol.
Read more:http://ecommerce.hostip.info/pages/925/Secure-Electronic-Transaction-SET.html#ixzz0GCq4VUWr&B
RSA-128 bit Encryption:
Security has also been a major issue in the E-commerce. The strength of an encryption algorithm is based on its key length, expressed in bits. The longer the key length, the harder it is for an attacker to break the cipher. RSA 128-bit encryption is a public-key encryption and authentication system developed in 1977 by Ron Rivest, AdiShamir, and Leonard Aldeman. The method uses modular exponentiation, which can be performed efficiently by a computer, even when the module and exponent are hundreds of digits long. The public key is a modulus m and an exponent e. A message is represented by a number c between 0 and m-1. (If the message is longer, chop it up into pieces and encrypt each piece.) Raise c to the e power mod m and transmit the result. The private key is the same modulus m and the inverse exponent d, such that e×d is 1 mod φ(m). As you recall from the previous page, c to the e to the d gives c back again. Rising to the e encrypts, and raising to the d decrypts. In a typical application, m is the product of two large primes’ p and q. Thus φ(m) = (p-1)×(q-1). Given an exponent e, find the modular inverse relative to φ(m), and call it d. This builds the public and private keys. The security lies in the difficulty of factoring m into its primes. Without p and q, Charlie cannot derive φ(m), and cannot compute d. Anybody can send encrypted data to Bob, but only Bob can decrypt. (anynomous)
Part 2: What can you find out about network and host-based intrusion detection systems?
The goal of intrusion detection is to monitor network assets to detect anomalous behavior and misuse. This concept has been around for nearly twenty years but only recently has it seen a dramatic rise in popularity and incorporation into the overall information security infrastructure.
Network Intrusion system: Network intrusion detection deals with information passing on the wire between hosts. Typically referred to as "packet-sniffers," network intrusion detection devices intercept packets traveling along various communication mediums and protocols, usually TCP/IP. (Innella, 2001)
Host based Intrusion System: Host-based intrusion detection systems are designed to monitor, detect, and respond to user and system activity and attacks on a given host. Some more robust tools also offer audit policy management and centralization, supply data forensics, statistical analysis and evidentiary support, and in certain instances provide some measure of access control. Host-based intrusion detection is best suited to combat internal threats because of its ability to monitor and respond to specific user actions and file accesses on the host. (Power, 1999: 32.)
Part 3: What is 'phishing'?
Phishing is an e-mail fraud method in which the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients. A phishing expedition, like the fishing expedition it's named for, is a speculative venture: the phishes puts the lure hoping to fool at least a few of the prey that encounter the bait. (anynomous, Phishing, 2008)
The following link is a YouTube video which decide the Phishing http://www.youtube.com/watch?v=sqRZGhiHGxg
workshop 8
Workshop 8
Ruby on Rails Workshops Report and Evaluation
1. List what you consider to be the three strengths of Ruby on Rails workshop series
The main strength of ROR workshop series include:
It is efficient for a non programming background person to understand
The option work as developer or programming provided the ease to work with your field of interest
The design to the workshop help in step by step improvement with the framework
2. List what you consider to be the three weaknesses of Ruby on Rails workshop series
Less support provided for initial installation
Time given for workshop work is less
Some of the workshops are confusing.
3. List what aspects of Ruby on Rails workshop series that you found to be most difficult.
Installation is very difficult
Too much work to be done in workshop but time allocation is very less.
4. List what improvements could be made to the Ruby on Rails workshop series
More detailed initial workshops to help get used to the framework
More time to be allocated for each workshop
Free response and reflective questions:
5. Reflect on your experiences with the other Web framework used in this subject: Was it effective? How can it be improved? Should other Web frameworks be used as well or instead of Ruby on Rails?
Overall experience has been very good but there were some problem initial which took more time to be settled i.e. installation with vista.This is a good framework if its fixes its problem with vista.
6. Did the Developer’s or IT managers Team that you joined after workshop 4 have a preference towards using other tools to facilitate collaboration? Comment on the differences between these uses of the sub-forum or Interact wiki tools from your experiences in this subject.
I would have preferred a centralised forum as it is provided easily avialble information with all the related topics.
7. Further comments to add?
Too many workshops and exercises for a given time period
Ruby on Rails Workshops Report and Evaluation
1. List what you consider to be the three strengths of Ruby on Rails workshop series
The main strength of ROR workshop series include:
It is efficient for a non programming background person to understand
The option work as developer or programming provided the ease to work with your field of interest
The design to the workshop help in step by step improvement with the framework
2. List what you consider to be the three weaknesses of Ruby on Rails workshop series
Less support provided for initial installation
Time given for workshop work is less
Some of the workshops are confusing.
3. List what aspects of Ruby on Rails workshop series that you found to be most difficult.
Installation is very difficult
Too much work to be done in workshop but time allocation is very less.
4. List what improvements could be made to the Ruby on Rails workshop series
More detailed initial workshops to help get used to the framework
More time to be allocated for each workshop
Free response and reflective questions:
5. Reflect on your experiences with the other Web framework used in this subject: Was it effective? How can it be improved? Should other Web frameworks be used as well or instead of Ruby on Rails?
Overall experience has been very good but there were some problem initial which took more time to be settled i.e. installation with vista.This is a good framework if its fixes its problem with vista.
6. Did the Developer’s or IT managers Team that you joined after workshop 4 have a preference towards using other tools to facilitate collaboration? Comment on the differences between these uses of the sub-forum or Interact wiki tools from your experiences in this subject.
I would have preferred a centralised forum as it is provided easily avialble information with all the related topics.
7. Further comments to add?
Too many workshops and exercises for a given time period
workshop 7
Workshop 7
End of the Line: production site migration and maintenance:
In-house hosting: In house hosting refers to the criterion in which the organisation use their self owned resources to host a website, which may include their own server room and all other equipments. This involves a heavy amount of capital investment.
Outsource-hosting:
As an alternative to the capital intensive nature of enterprise content solutions, outsource hosting offers a lower cost alternative to both smaller and larger organizations that want the power of smart portal technology, yet cannot justify the manpower or budget resources to maintain it in-house.
Cloud hosting:
Website hosted on a cloud hosting operates on clustered servers where online operations are not limited to a single server. By handling security, load balance and hardware resources virtually; the website has access to the processing power of a number of servers that are distributed in real time. (Jerry, 2009)
Implementation: After customer consent toward the application the implementation part is initiated in which the developer actually code the application. And various test, risk management functions are added into.
Maintenance Plan: It refers to the modification of a software product after delivery to correct faults, to improve proformance and add other attributes. This may include the migration process which would require the support of the in-house IT team. Both the maintenance and in-house IT team work together to bring the system up and running with best results.
The key software maintenance issues are both managerial and technical. Key management issues are: alignment with customer priorities, staffing, which organization does maintenance, estimating costs. Key technical issues are: limited understanding, impact testing, and maintainability measurement. The 4 types of maintenance according to ISO/IEC 14764:
Corrective maintenance: Reactive modification of a software product performed after delivery to correct discovered problems.
Adaptive maintenance: Modification of a software product performed after delivery to keep a software product usable in a changed or changing environment.
Perfective maintenance: Modification of a software product after delivery to improve performance or maintainability.
Preventive maintenance: Modification of a software product after delivery to detect and correct latent faults in the software product before them become effective faults.
End of the Line: production site migration and maintenance:
In-house hosting: In house hosting refers to the criterion in which the organisation use their self owned resources to host a website, which may include their own server room and all other equipments. This involves a heavy amount of capital investment.
Outsource-hosting:
As an alternative to the capital intensive nature of enterprise content solutions, outsource hosting offers a lower cost alternative to both smaller and larger organizations that want the power of smart portal technology, yet cannot justify the manpower or budget resources to maintain it in-house.
Cloud hosting:
Website hosted on a cloud hosting operates on clustered servers where online operations are not limited to a single server. By handling security, load balance and hardware resources virtually; the website has access to the processing power of a number of servers that are distributed in real time. (Jerry, 2009)
Implementation: After customer consent toward the application the implementation part is initiated in which the developer actually code the application. And various test, risk management functions are added into.
Maintenance Plan: It refers to the modification of a software product after delivery to correct faults, to improve proformance and add other attributes. This may include the migration process which would require the support of the in-house IT team. Both the maintenance and in-house IT team work together to bring the system up and running with best results.
The key software maintenance issues are both managerial and technical. Key management issues are: alignment with customer priorities, staffing, which organization does maintenance, estimating costs. Key technical issues are: limited understanding, impact testing, and maintainability measurement. The 4 types of maintenance according to ISO/IEC 14764:
Corrective maintenance: Reactive modification of a software product performed after delivery to correct discovered problems.
Adaptive maintenance: Modification of a software product performed after delivery to keep a software product usable in a changed or changing environment.
Perfective maintenance: Modification of a software product after delivery to improve performance or maintainability.
Preventive maintenance: Modification of a software product after delivery to detect and correct latent faults in the software product before them become effective faults.
workshop 6
Workshop 6
Enjoying the Ride: Web framework alternatives, scalability and flexibility
While undergoing the research various frameworks, the major issue which was notices was that Jruby would be a better option against ruby on rails. Because ruby finish last in all performance bencmarking and jruby fix by focusing on performance. The other benefit of jruby is that it runs on java platform which helps to access all the support of Unicode.
Now comparing rails with other platforms:
Rails over Struts (Java):
Struts gives more flexibility as you can do something with hibernate that are hard to achieve with active record in rails. But flexibility comes with cost due to which cost of getting it is high and this involves more code and configuration.
Rails over Django (python):
The biggest difference is that django seems to be aimed at web publishing application whereas rails is well suited for web application development. The major difference is in style and feeling rather than functionality. To get a more detailed look over these differences the following paper published would be helpful. The link is http://ojs.pythonpapers.org/index.php/tpp/article/viewArticle/24
Rails over seaside (Smalltalk):
Seaside does not contain explicit support for a database or model layer and also does not contain separate templating system for easily creating HTML View instead Smalltalk code is used that generate HTML, hence rails is more useful full-stacked solutions for web applications.
Rails over PHP:
The biggest difference is that rails scales better and provide more benfits.with PHP ,you need to choose a framework that gives you some kind of object-relational mapping .to summarize we can say that PHP is better than rails on single platform in which you need to one or two pages that fetch data from a database .but that’s it.
(Bini)
Enjoying the Ride: Web framework alternatives, scalability and flexibility
While undergoing the research various frameworks, the major issue which was notices was that Jruby would be a better option against ruby on rails. Because ruby finish last in all performance bencmarking and jruby fix by focusing on performance. The other benefit of jruby is that it runs on java platform which helps to access all the support of Unicode.
Now comparing rails with other platforms:
Rails over Struts (Java):
Struts gives more flexibility as you can do something with hibernate that are hard to achieve with active record in rails. But flexibility comes with cost due to which cost of getting it is high and this involves more code and configuration.
Rails over Django (python):
The biggest difference is that django seems to be aimed at web publishing application whereas rails is well suited for web application development. The major difference is in style and feeling rather than functionality. To get a more detailed look over these differences the following paper published would be helpful. The link is http://ojs.pythonpapers.org/index.php/tpp/article/viewArticle/24
Rails over seaside (Smalltalk):
Seaside does not contain explicit support for a database or model layer and also does not contain separate templating system for easily creating HTML View instead Smalltalk code is used that generate HTML, hence rails is more useful full-stacked solutions for web applications.
Rails over PHP:
The biggest difference is that rails scales better and provide more benfits.with PHP ,you need to choose a framework that gives you some kind of object-relational mapping .to summarize we can say that PHP is better than rails on single platform in which you need to one or two pages that fetch data from a database .but that’s it.
(Bini)
workshop 5
Part 1:
1. what type of mobile devices are suitable for:
a. Just the SMS message service;
b. The full user experience via SMS, GPS Taxi tracking and Google Maps
Some of the mobile devices which would be suitable for SMS service would be
Mobile handsets
Pager
Some of the mobile devices which provide a full user experience are
• Blackberry handset
• I phones
• Nokia N-series
• GPRS PDA phone or Mobile data terminals (MDT)
• The Datax 3 Mobile data terminal
2. Describe any new hardware, networking, software, systems, procedures and personnel that would be needed by the taxi company Website to support this stage 2 developments.
Assuming the future it seem that the biggest problem in coming time would the increased calls to the booking office ,which will lead to delayed response .so to overcome these problem the solution would be
Speech recognition:
Through this system taxi patrons can simply talk directly to the taxi dispatch computer using any telephone to carry out their booking requests. Customers don’t have to struggle with confusing push button menus, because the solution ‘understands’ the verbal request from the customer’s normal speech. The automated booking system offers customers many benefits including no waiting in phone queues to book a taxi, accurate entry of booking requests, 24 x 7 availability and an ‘automated operator’ that is always happy and polite.
The hardware to support this would be dual DL380 Compaq servers, which run the application software and the voice recognition engine. (Vecommerce)
Part C: Online Taxi Business Process Modelling
Apart from the business basics of offering a clean car, safe driving, being on time, consider the business processes involved and construct a Simple Online Taxi business process model using any suitable drawing tool.
The process model will be designed keeping in view that The taxi cars should be equipped with a GPS unit which gives the position of the car at each moment. They should also contain a system which communicates with the central. At the central there should be a computer system which does the planning. This means the planner can be sacked and money can be saved. The operator takes a call from a customer, enters the data into the system and then reads o_ the produced information on the screen. Communication with the taxi cars should go via the distributed computer system and should involve the taxi drivers as little as possible. The model includes Automated Taxi Location and Despatch System (ATLDS) for TIBS Taxis Pte. Ltd. In collaboration with Signalling Technology Pty. Ltd., an Australian company, the ATLDS incorporates the best of GPS (Global Positioning System), CDS (Computerised Despatch System), IVR (Interactive Voice Response) and Public Mobile Data Network (PMDN) technologies.
The steps are :
Before the Ride
Customer make booking of taxis through the telephone, PC dial-up, credit card terminal, palm top and the IVR system
The Order Taking Subsystem comprises a PABX and an IVR system. The PABX connects calls and the IVR provides the interactive response to the caller
Customer provided the his details name, address ,phone, pickup time ,any special consideration, cab requirement - luxury or sports ,passenger travelling
The CLI feature enables the ATLDS system to identify the caller and at such it is able to retrieve prior information of the caller (such as names and pick-up addresses) stored in the system database.
The IVR greets the caller with pre-recorded messages and prompts the caller at every step to provide his booking details by pressing of keys on a telephone.
The system locates the most suitable taxis (based on a number of search criteria) that is nearest to the pick-up point with the help of the GPS.
The system sends out the pick-up address through the PMDN network.
Vacant taxis within the search radius of the pick-up address will automatically respond to the system their positions.
The booking details are sent to the driver of the selected taxis via the PMDN.
With the information received, the system computes the distances of the taxis and the taxi nearest to the pick-up address will then be allocated the job.
The system will automatically announce to the customer the taxis number plate and ETA (Expected Time of Arrival) through the IVR.
The Mobile Data Terminal provides the display of message containing booking details to the taxi driver.
During the Ride
Digital maps are available for cabbies to check out unfamiliar pick up locations.
The system also provides traffic, geographical and topological information.
The customer will be receiving notifications from taxis driver in various time intervals for example: every 5 min the customer will get the updated location of the taxi.
Since taxi driver have all the details, he will greet the customer with his name.
The taxi driver would initiate a conversation and continue with it if they are interested or show interest if they started talking first.
End of the Ride
There are two kinds of customers: a contract customer who receives monthly invoices and others which pay directly to the taxi driver.
Taxi driver would help the customer get out of the car and would have their luggage ready waiting for them and say goodbye.
The business process concludes when the company uses the taxi vehicle’s GPS location data again to send a final friendly thank you, suggests feedback via SMS and offers a goodbye message.
IVR-Interactive Voice response System
CSR –Customer service agent
PABX-Private Automated Branch Exchange
PMDN-Public Mobile Data Network
1. what type of mobile devices are suitable for:
a. Just the SMS message service;
b. The full user experience via SMS, GPS Taxi tracking and Google Maps
Some of the mobile devices which would be suitable for SMS service would be
Mobile handsets
Pager
Some of the mobile devices which provide a full user experience are
• Blackberry handset
• I phones
• Nokia N-series
• GPRS PDA phone or Mobile data terminals (MDT)
• The Datax 3 Mobile data terminal
2. Describe any new hardware, networking, software, systems, procedures and personnel that would be needed by the taxi company Website to support this stage 2 developments.
Assuming the future it seem that the biggest problem in coming time would the increased calls to the booking office ,which will lead to delayed response .so to overcome these problem the solution would be
Speech recognition:
Through this system taxi patrons can simply talk directly to the taxi dispatch computer using any telephone to carry out their booking requests. Customers don’t have to struggle with confusing push button menus, because the solution ‘understands’ the verbal request from the customer’s normal speech. The automated booking system offers customers many benefits including no waiting in phone queues to book a taxi, accurate entry of booking requests, 24 x 7 availability and an ‘automated operator’ that is always happy and polite.
The hardware to support this would be dual DL380 Compaq servers, which run the application software and the voice recognition engine. (Vecommerce)
Part C: Online Taxi Business Process Modelling
Apart from the business basics of offering a clean car, safe driving, being on time, consider the business processes involved and construct a Simple Online Taxi business process model using any suitable drawing tool.
The process model will be designed keeping in view that The taxi cars should be equipped with a GPS unit which gives the position of the car at each moment. They should also contain a system which communicates with the central. At the central there should be a computer system which does the planning. This means the planner can be sacked and money can be saved. The operator takes a call from a customer, enters the data into the system and then reads o_ the produced information on the screen. Communication with the taxi cars should go via the distributed computer system and should involve the taxi drivers as little as possible. The model includes Automated Taxi Location and Despatch System (ATLDS) for TIBS Taxis Pte. Ltd. In collaboration with Signalling Technology Pty. Ltd., an Australian company, the ATLDS incorporates the best of GPS (Global Positioning System), CDS (Computerised Despatch System), IVR (Interactive Voice Response) and Public Mobile Data Network (PMDN) technologies.
The steps are :
Before the Ride
Customer make booking of taxis through the telephone, PC dial-up, credit card terminal, palm top and the IVR system
The Order Taking Subsystem comprises a PABX and an IVR system. The PABX connects calls and the IVR provides the interactive response to the caller
Customer provided the his details name, address ,phone, pickup time ,any special consideration, cab requirement - luxury or sports ,passenger travelling
The CLI feature enables the ATLDS system to identify the caller and at such it is able to retrieve prior information of the caller (such as names and pick-up addresses) stored in the system database.
The IVR greets the caller with pre-recorded messages and prompts the caller at every step to provide his booking details by pressing of keys on a telephone.
The system locates the most suitable taxis (based on a number of search criteria) that is nearest to the pick-up point with the help of the GPS.
The system sends out the pick-up address through the PMDN network.
Vacant taxis within the search radius of the pick-up address will automatically respond to the system their positions.
The booking details are sent to the driver of the selected taxis via the PMDN.
With the information received, the system computes the distances of the taxis and the taxi nearest to the pick-up address will then be allocated the job.
The system will automatically announce to the customer the taxis number plate and ETA (Expected Time of Arrival) through the IVR.
The Mobile Data Terminal provides the display of message containing booking details to the taxi driver.
During the Ride
Digital maps are available for cabbies to check out unfamiliar pick up locations.
The system also provides traffic, geographical and topological information.
The customer will be receiving notifications from taxis driver in various time intervals for example: every 5 min the customer will get the updated location of the taxi.
Since taxi driver have all the details, he will greet the customer with his name.
The taxi driver would initiate a conversation and continue with it if they are interested or show interest if they started talking first.
End of the Ride
There are two kinds of customers: a contract customer who receives monthly invoices and others which pay directly to the taxi driver.
Taxi driver would help the customer get out of the car and would have their luggage ready waiting for them and say goodbye.
The business process concludes when the company uses the taxi vehicle’s GPS location data again to send a final friendly thank you, suggests feedback via SMS and offers a goodbye message.
IVR-Interactive Voice response System
CSR –Customer service agent
PABX-Private Automated Branch Exchange
PMDN-Public Mobile Data Network
Subscribe to:
Posts (Atom)
