Federated database:
A federated database is a system in which several databases appear to function as a single entity. Each component database in the system is completely self-sustained and functional. When an application queries the federated database, the system figures out which of its component databases contains the data being requested and passes the request to it. Federated databases can be thought of as database virtualization in much the same way that storage virtualization makes several drives appear as one.
In my past i have worked with bank, in which we faced the problem of load at year end. Using the Federated database the load for the system to search all the rows for single entity, will be eliminated by splitting the transaction by year. Users will often only look at transactions in the past year and the system will only need to touch one or two component databases (Shavit, 2008)
Showing posts with label Exercise's. Show all posts
Showing posts with label Exercise's. Show all posts
Tuesday, May 26, 2009
Monday, May 25, 2009
Exercise 24
Exercise 24:
1. Differentiate the various types of software agents.
The different type of agents are:
• Collaborative agents
• Interface agents
• Mobile agents
• Information/Internet agents
• Reactive agents
• Hybrid agents
• Smart Agents
A collaborative agents emphasise autonomy and cooperation (with other agents) in order to perform tasks for their owners.
A Interface agents emphasise autonomy and learning in order to perform tasks for their owners.
A Mobile agents are computational software processes capable of roaming wide area networks (WANs) such as the WWW, interacting with foreign hosts, gathering information on behalf of its owner and coming back home having performed the duties set by its user
A Information agents perform the role of managing, manipulating or collating information from many distributed sources.
A Reactive agents are very simple and do not have internal models of their environment. Rather, they react to stimuli within then environment in which they exist.
A hybrid agents refer to those whose constitution is a combination of two or more agent philosophies within a singular agent. These philosophies include a mobile philosophy, an interface agent philosophy, collaborative agent philosophy, etc.
A heterogeneous agent system may also contain one or more hybrid agents
(Nwana, 1996)
2.Describe how techniques such as artificial intelligence and statistical techniques are used in software agents.
Artificial intelligence refers to the science and engineering of making intelligent machines, especially intelligent computer programs. It is related to the similar task of using computers to understand human intelligence, but AI does not have to confine itself to methods that are biologically observable.many software sgents are developed which have AI and they are referde to as Intelligent agents. Some examples of these agents include the "BargainFinder Agent" and Cyber Yenta, which perform searches for the user. The first is incredibly simpleminded and and the latter an incredibly simplified version of the original MIT Yenta work/, which is still in progress. The claim to intelligence here is basically string matching. Along the same lines, but somewhat more "AIish", CompassWare offers an Intelligent News Filter that parses natural language to perform a search. (Petrie, 1996 )
3. Identify various activities in e-commerce where software agents are currently in use.
As said by Maria Gini some problem of e-commerce which software agents can sole easily are:
• Procurement: obtaining materials, services. managing inflow into the organization towards the end user.
• Brokering Services: finding information about products, sellers, and prices, providing protection for privacy, validating purchasers credit, billing and accounting, etc.
• Digital Libraries and Recommending Services: retrieving information from distributed sources, filtering information on contents, collaborative filtering.
• Notification Services: notifying of new books or CDs, notifying when specific products are available at a specific price.
(Gini, 1999)
4. Computing ethics and bot programming case study: rocky
a. Get an account username and password from the lecturer to LC_MOO at http://ispg.csu.edu.au:7680 and login to the Welcome Lobby.
The username used is train5 and the password is train5.
b. Hold a 5-minute discussion with Rocky on a special topic. Commands act rocky (start bot) hush rocky (stop bot)
when i initiated act rockey command it gave me this message
train5 activates Rocky.
Rocky says, "Gee thanks for waking me up! I must have dozed off.."
c. Rocky is an ELIZA-like bot. Report your findings.
ELIZA was a computer program and primitive natural language processing. ELIZA operated by processing users' responses to scripts.it have a list of predefined answer to various responses of the user.one of the most famous of which was DOCTOR, a simulation of a Rogerian psychotherapist.
1. Differentiate the various types of software agents.
The different type of agents are:
• Collaborative agents
• Interface agents
• Mobile agents
• Information/Internet agents
• Reactive agents
• Hybrid agents
• Smart Agents
A collaborative agents emphasise autonomy and cooperation (with other agents) in order to perform tasks for their owners.
A Interface agents emphasise autonomy and learning in order to perform tasks for their owners.
A Mobile agents are computational software processes capable of roaming wide area networks (WANs) such as the WWW, interacting with foreign hosts, gathering information on behalf of its owner and coming back home having performed the duties set by its user
A Information agents perform the role of managing, manipulating or collating information from many distributed sources.
A Reactive agents are very simple and do not have internal models of their environment. Rather, they react to stimuli within then environment in which they exist.
A hybrid agents refer to those whose constitution is a combination of two or more agent philosophies within a singular agent. These philosophies include a mobile philosophy, an interface agent philosophy, collaborative agent philosophy, etc.
A heterogeneous agent system may also contain one or more hybrid agents
(Nwana, 1996)
2.Describe how techniques such as artificial intelligence and statistical techniques are used in software agents.
Artificial intelligence refers to the science and engineering of making intelligent machines, especially intelligent computer programs. It is related to the similar task of using computers to understand human intelligence, but AI does not have to confine itself to methods that are biologically observable.many software sgents are developed which have AI and they are referde to as Intelligent agents. Some examples of these agents include the "BargainFinder Agent" and Cyber Yenta, which perform searches for the user. The first is incredibly simpleminded and and the latter an incredibly simplified version of the original MIT Yenta work/, which is still in progress. The claim to intelligence here is basically string matching. Along the same lines, but somewhat more "AIish", CompassWare offers an Intelligent News Filter that parses natural language to perform a search. (Petrie, 1996 )
3. Identify various activities in e-commerce where software agents are currently in use.
As said by Maria Gini some problem of e-commerce which software agents can sole easily are:
• Procurement: obtaining materials, services. managing inflow into the organization towards the end user.
• Brokering Services: finding information about products, sellers, and prices, providing protection for privacy, validating purchasers credit, billing and accounting, etc.
• Digital Libraries and Recommending Services: retrieving information from distributed sources, filtering information on contents, collaborative filtering.
• Notification Services: notifying of new books or CDs, notifying when specific products are available at a specific price.
(Gini, 1999)
4. Computing ethics and bot programming case study: rocky
a. Get an account username and password from the lecturer to LC_MOO at http://ispg.csu.edu.au:7680 and login to the Welcome Lobby.
The username used is train5 and the password is train5.
b. Hold a 5-minute discussion with Rocky on a special topic. Commands act rocky (start bot) hush rocky (stop bot)
when i initiated act rockey command it gave me this message
train5 activates Rocky.
Rocky says, "Gee thanks for waking me up! I must have dozed off.."
c. Rocky is an ELIZA-like bot. Report your findings.
ELIZA was a computer program and primitive natural language processing. ELIZA operated by processing users' responses to scripts.it have a list of predefined answer to various responses of the user.one of the most famous of which was DOCTOR, a simulation of a Rogerian psychotherapist.
Exercise 25
Exercise 25: M-commerce and the e-wallet: Innovation and mobile devices
1. What is meant by a location based service?
A location-based service (LBS) is a software application for an IP-capable mobile device that requires knowledge about where the mobile device is located. Location-based services can be query-based and provide the end user with useful information such as "Where is the nearest ATM?" or they can be push-based and deliver coupons or other marketing information to customers who are in a specific geographical area.
An LBS requires five basic components: the service provider's software application, a mobile network to transmit data and requests for service, a content provider to supply the end user with geo-specific information, a positioning component and the end user's mobile device. By law, location-based services must be permission-based. That means that the end user must opt-in to the service in order to use it. In most cases, this means installing the LBS application and accepting a request to allow the service to know the device's location. (anynomous, location-based service (LBS), 2009)
In the research to explore the pro and cons of the LBS, I found a video which was released by CNN in which reporter Susan Candiotti explains how LBS marketing will work.
http://itknowledgeexchange.techtarget.com/overheard/video-the-pros-and-cons-of-lbs-marketing/
This video discusses all the privacy concern and the working of the LBS. Please do have to go at the video it might show you the potential the service hold.
1. What is meant by a location based service?
A location-based service (LBS) is a software application for an IP-capable mobile device that requires knowledge about where the mobile device is located. Location-based services can be query-based and provide the end user with useful information such as "Where is the nearest ATM?" or they can be push-based and deliver coupons or other marketing information to customers who are in a specific geographical area.
An LBS requires five basic components: the service provider's software application, a mobile network to transmit data and requests for service, a content provider to supply the end user with geo-specific information, a positioning component and the end user's mobile device. By law, location-based services must be permission-based. That means that the end user must opt-in to the service in order to use it. In most cases, this means installing the LBS application and accepting a request to allow the service to know the device's location. (anynomous, location-based service (LBS), 2009)
In the research to explore the pro and cons of the LBS, I found a video which was released by CNN in which reporter Susan Candiotti explains how LBS marketing will work.
http://itknowledgeexchange.techtarget.com/overheard/video-the-pros-and-cons-of-lbs-marketing/
This video discusses all the privacy concern and the working of the LBS. Please do have to go at the video it might show you the potential the service hold.
Exercise 23
Exercise:23
1. What is a spider? What does it do?
A spider is nothing more than a computer program that follows certain links on the web and gathers information as it goes. For example, Googlebot will follow HREF or SRC tags to find pages and images that are associated with any given site. (What Exactly IS a Spider, n.d.).
2.What is a meta-search engine? Provide some examples
metacrawlers don't crawl the web themselves to build listings. Instead, they allow searches to be sent to several search engines all at once. The results are then blended together onto one page. Below are some of the major metacrawlers:
Dogpile
http://www.dogpile.com
Popular metasearch site owned by InfoSpace that sends a search to a customizable list of search engines, directories and specialty search sites, then displays results from each search engine individually. Winner of Best Meta Search Engine award from Search Engine Watch for 2003. (Review: Dogpile Sports a Fetching New Look, SearchDay, Sept. 2, 2003. Updates: Dogpile Enhances Search Results Search Engine Watch Blog, Nov. 10, 2004 - Dogpile Adds New Features Search Engine Watch Blog, Jan. 18, 2005 )
Vivisimo
http://vivisimo.com/
Enter a search term, and Vivismo will not only pull back matching responses from major search engines but also automatically organize the pages into categories. Slick and easy to use. Vivisimo won second place for Best Meta Search Engine in the 2003 Search Engine Watch awards and winner in 2002. (Review: Power Searching with Vivisimo, SearchDay, July 8, 2003)
Kartoo
http://www.kartoo.com
If you like the idea of seeing your web results visually, this meta search site shows the results with sites being interconnected by keywords. Honorable mention for Best Meta Search Engine award from Search Engine Watch in 2002.
Mamma
http://www.mamma.com
Founded in 1996, Mamma.com is one of the oldest meta search engines on the web. Mamma searches against a variety of major crawlers, directories and specialty search sites. The service also provides a paid listings option for advertisers, Mamma Classifieds. Mamma was an honorable mention for Best Meta Search Engine in the 2003 Search Engine Watch awards.
3. How can you get your site listed at major search sites; and how could you improve your site ranking?
One of the most popular method to improve the site ranking is to attract more visitors through advertising .other sites which are highly rated can be used to advertise you site, through which your site can attract more visitors.
1. What is a spider? What does it do?
A spider is nothing more than a computer program that follows certain links on the web and gathers information as it goes. For example, Googlebot will follow HREF or SRC tags to find pages and images that are associated with any given site. (What Exactly IS a Spider, n.d.).
2.What is a meta-search engine? Provide some examples
metacrawlers don't crawl the web themselves to build listings. Instead, they allow searches to be sent to several search engines all at once. The results are then blended together onto one page. Below are some of the major metacrawlers:
Dogpile
http://www.dogpile.com
Popular metasearch site owned by InfoSpace that sends a search to a customizable list of search engines, directories and specialty search sites, then displays results from each search engine individually. Winner of Best Meta Search Engine award from Search Engine Watch for 2003. (Review: Dogpile Sports a Fetching New Look, SearchDay, Sept. 2, 2003. Updates: Dogpile Enhances Search Results Search Engine Watch Blog, Nov. 10, 2004 - Dogpile Adds New Features Search Engine Watch Blog, Jan. 18, 2005 )
Vivisimo
http://vivisimo.com/
Enter a search term, and Vivismo will not only pull back matching responses from major search engines but also automatically organize the pages into categories. Slick and easy to use. Vivisimo won second place for Best Meta Search Engine in the 2003 Search Engine Watch awards and winner in 2002. (Review: Power Searching with Vivisimo, SearchDay, July 8, 2003)
Kartoo
http://www.kartoo.com
If you like the idea of seeing your web results visually, this meta search site shows the results with sites being interconnected by keywords. Honorable mention for Best Meta Search Engine award from Search Engine Watch in 2002.
Mamma
http://www.mamma.com
Founded in 1996, Mamma.com is one of the oldest meta search engines on the web. Mamma searches against a variety of major crawlers, directories and specialty search sites. The service also provides a paid listings option for advertisers, Mamma Classifieds. Mamma was an honorable mention for Best Meta Search Engine in the 2003 Search Engine Watch awards.
3. How can you get your site listed at major search sites; and how could you improve your site ranking?
One of the most popular method to improve the site ranking is to attract more visitors through advertising .other sites which are highly rated can be used to advertise you site, through which your site can attract more visitors.
Exercise 22
Exercise 22.
Differentiate between software systems such as Customer Relationship Management (CRM) software, Business-to-Business e-commerce programs and Supply-Chain Management (SCM) software.
CRM (customer relationship management) is an information industry term for methodologies, software, and usually Internet capabilities that help and enterprises manage customer relationships in an organized way. For example, an enterprise might build a database about its customers that described relationships in sufficient detail so that management, salespeople, people providing service, and perhaps the customer directly could access information, match customer needs with product plans and offerings, remind customers of service requirements, know what other products a customer had purchased, and so forth. (jean, 2007)
Business-to-Business (B2B) software is used to transfer data between businesses such as purchase orders and invoices. This decreases cost of employees to manually enter data, time for goods to ship as orders can be processed almost immediately if stock is available, and time to receive payment, as many businesses using B2B have payments automatically flagged to pay on their due date.
Supply chain Management: Supply chain management (SCM) is the oversight of materials, information, and finances as they move in a process from supplier to manufacturer to wholesaler to retailer to consumer. Supply chain management involves coordinating and integrating these flows both within and among companies. Supply chain management flows can be divided into three main flows:
• The product flow
• The information flow
• The finances flow
The product flow includes the movement of goods from a supplier to a customer, as well as any customer returns or service needs. The information flow involves transmitting order and updating the status of delivery. The financial flow consists of credit terms, payment schedules, and consignment and title ownership arrangements. (anynomous, SCM, 2007)
Differentiate between software systems such as Customer Relationship Management (CRM) software, Business-to-Business e-commerce programs and Supply-Chain Management (SCM) software.
CRM (customer relationship management) is an information industry term for methodologies, software, and usually Internet capabilities that help and enterprises manage customer relationships in an organized way. For example, an enterprise might build a database about its customers that described relationships in sufficient detail so that management, salespeople, people providing service, and perhaps the customer directly could access information, match customer needs with product plans and offerings, remind customers of service requirements, know what other products a customer had purchased, and so forth. (jean, 2007)
Business-to-Business (B2B) software is used to transfer data between businesses such as purchase orders and invoices. This decreases cost of employees to manually enter data, time for goods to ship as orders can be processed almost immediately if stock is available, and time to receive payment, as many businesses using B2B have payments automatically flagged to pay on their due date.
Supply chain Management: Supply chain management (SCM) is the oversight of materials, information, and finances as they move in a process from supplier to manufacturer to wholesaler to retailer to consumer. Supply chain management involves coordinating and integrating these flows both within and among companies. Supply chain management flows can be divided into three main flows:
• The product flow
• The information flow
• The finances flow
The product flow includes the movement of goods from a supplier to a customer, as well as any customer returns or service needs. The information flow involves transmitting order and updating the status of delivery. The financial flow consists of credit terms, payment schedules, and consignment and title ownership arrangements. (anynomous, SCM, 2007)
Exercise 21
Exercise 21: Shopping Cart Specifications
Develop the class diagram for the following shopping cart specifications:
A shopping Cart object is associated with only one credit Card and customer and to items in itemToBuy. Persistent customer information such as name, billing address, delivery address, e-mail address, and credit rating is stored in the customer object. The credit card object is associated with a frequentShopper discount object, if the credit rating for the customer is good. The customer can make or cancel orders as well as add and delete items to the shoppingCart product. The credit card object contains the secure method for checking that the charge is authentic.
Develop the class diagram for the following shopping cart specifications:
A shopping Cart object is associated with only one credit Card and customer and to items in itemToBuy. Persistent customer information such as name, billing address, delivery address, e-mail address, and credit rating is stored in the customer object. The credit card object is associated with a frequentShopper discount object, if the credit rating for the customer is good. The customer can make or cancel orders as well as add and delete items to the shoppingCart product. The credit card object contains the secure method for checking that the charge is authentic.
Exercise 20
Exercise 20: Modelling with UML
Describe each of the eight main diagrams used in UML.
At the centre of the UML are its nine kinds of modelling diagrams, which we describe here.
• Use case diagrams
• Class diagrams
• Object diagrams
• Sequence diagrams
• Collaboration diagrams
• Statechart diagrams
• Activity diagrams
• Component diagrams
• Deployment diagrams
(Miller, 2008)
Use case diagrams describe what a system does from the standpoint of an external observer. The emphasis is on what a system does rather than how.
Class diagram gives an overview of a system by showing its classes and the relationships among them. Class diagrams are static -- they display what interacts but not what happens when they do interact.
Object diagrams show instances instead of classes. They are useful for explaining small pieces with complicated relationships, especially recursive relationships.
Sequence diagram is an interaction diagram that details how operations are carried out -- what messages are sent and when. Sequence diagrams are organized according to time. The time progresses as you go down the page
Collaboration diagrams are also interaction diagrams. They convey the same information as sequence diagrams, but they focus on object roles instead of the times that messages are sent. In a sequence diagram, object roles are the vertices and messages are the connecting links.
A state chart diagram shows the possible states of the object and the transitions that cause a change in state.
An activity diagram is essentially a fancy flowchart. Activity diagrams and statechart diagrams are related. While a state chart diagram focuses attention on an object undergoing a process (or on a process as an object), an activity diagram focuses on the flow of activities involved in a single process. The activity diagram shows the how those activities depend on one another.
A component is a code module. Component diagrams are physical analogs of class diagram.
Deployment diagrams show the physical configurations of software and hardware.
Describe each of the eight main diagrams used in UML.
At the centre of the UML are its nine kinds of modelling diagrams, which we describe here.
• Use case diagrams
• Class diagrams
• Object diagrams
• Sequence diagrams
• Collaboration diagrams
• Statechart diagrams
• Activity diagrams
• Component diagrams
• Deployment diagrams
(Miller, 2008)
Use case diagrams describe what a system does from the standpoint of an external observer. The emphasis is on what a system does rather than how.
Class diagram gives an overview of a system by showing its classes and the relationships among them. Class diagrams are static -- they display what interacts but not what happens when they do interact.
Object diagrams show instances instead of classes. They are useful for explaining small pieces with complicated relationships, especially recursive relationships.
Sequence diagram is an interaction diagram that details how operations are carried out -- what messages are sent and when. Sequence diagrams are organized according to time. The time progresses as you go down the page
Collaboration diagrams are also interaction diagrams. They convey the same information as sequence diagrams, but they focus on object roles instead of the times that messages are sent. In a sequence diagram, object roles are the vertices and messages are the connecting links.
A state chart diagram shows the possible states of the object and the transitions that cause a change in state.
An activity diagram is essentially a fancy flowchart. Activity diagrams and statechart diagrams are related. While a state chart diagram focuses attention on an object undergoing a process (or on a process as an object), an activity diagram focuses on the flow of activities involved in a single process. The activity diagram shows the how those activities depend on one another.
A component is a code module. Component diagrams are physical analogs of class diagram.
Deployment diagrams show the physical configurations of software and hardware.
Exercise 19
Exercise 19: TP Monitors and Transaction Protocols
1. Give a description in your own words of the ACID properties of a transaction.
ACID properties of a transaction refers to
Atomicity: The phrase "all or nothing" succinctly describes the first ACID property of atomicity. When an update occurs to a database, either all or none of the update becomes available to anyone beyond the user or application performing the update.
Consistency: Consistency is the ACID property that ensures that any changes to values in an instance are consistent with changes to other values in the same instance
Isolation: The isolation portion of the ACID properties is needed when there are concurrent transactions. An important concept to understanding isolation through transactions is serializability. Transactions are serializable when the effect on the database is the same whether the transactions are executed in serial order or in an interleaved fashion.
Durability: Durability refers to the ability of the system to recover committed transaction updates if either the system or the storage media fails.
(Associates, 2009)
2. Describe a TP monitor environment. How can a TP monitor stop an operating system being overwhelmed?
A TP Monitor is a subsystem that groups together sets of related database updates and submits them together to a relational database. The result is that the database server does not need to do all of the work of managing the consistency/correctness of the database; the TP Monitor makes sure that groups of updates take place together or not at all. TP-Monitor environment which partitions the workflow engine into several resource managers (RMs) individually managed by a TP-Monitor environment. The RMs together form the workflow engine serving user requests. (Browne's, 2007)
3. What is the difference in load balancing with traditional and transactional MOM, RPC, and conversations?
Load balancing is dividing the amount of work that a computer has to do between two or more computers so that more work gets done in the same amount of time and, in general, all users get served faster.
Traditional RPC Model: In this the request from user should be queued and wait synchronously for the server to execute and return the reply where the client and server should be free at the same time.
MOM: MOM stands for Message-oriented middleware It acts as a middleware between the client and server, buffering the requests from user and replies from servers.
RPC(remote Procedure Call): Remote procedure call (RPC) is an Inter-process communication technology that allows a computer program to cause a subroutine or procedure to execute in another address space(commonly on another computer on a shared network) without the programmer explicitly coding the details for this remote interaction.
4.Why is a two-phase commit protocol better than a one-phase atomic commit protocol?
One –phase Atomic Commit Protocol
This protocol overlaps the voting phase with the execution of transaction and just has a decision
phase. There are two implementation the Implicit Yes Voting and the Coordinate Log.
Advantages:
Simple protocol fewer overheads.
• Low latency due to fewer disk writes.
• Useful in case of low bandwidth networks, as lesser messages are exchanged.
• In most cases all the updates will be logged befor commit so durability is assured.
Disadvantages
• The greatest disadvantage is that it can only handle immediate consistency con-
straints as there is no voting phase. It can not handle the deferred consistency
constraints
Two-Phase Atomic commit protocol: This is the most widely used protocol which commences in two phases ,Voting , to ensure that all sites are ready to commit,Decision , to ensure uniformity at abort or commit at all sites.
2PC is largely used in all distributed systems.
Advantages
• It ensures atomicity even in the presence of deferred constraints.
• It ensures independent recovery of all sites.
• Since it takes place in twophases, it can handle network failures, disconnections and
in their presence assure atomicity.
Disadvantages
• Involves a great deal of message complexity.
• Greater communication overheads as compared to simple optimistic protocols.
• Blocking of site nodes in case of failure of coordinator.
• Multiple forced writes of log, which increase latency.
• Its performance is again a trade off,especially for short lived transactions, like Internet
applications
(Anshu Veda, 2004)
1. Give a description in your own words of the ACID properties of a transaction.
ACID properties of a transaction refers to
Atomicity: The phrase "all or nothing" succinctly describes the first ACID property of atomicity. When an update occurs to a database, either all or none of the update becomes available to anyone beyond the user or application performing the update.
Consistency: Consistency is the ACID property that ensures that any changes to values in an instance are consistent with changes to other values in the same instance
Isolation: The isolation portion of the ACID properties is needed when there are concurrent transactions. An important concept to understanding isolation through transactions is serializability. Transactions are serializable when the effect on the database is the same whether the transactions are executed in serial order or in an interleaved fashion.
Durability: Durability refers to the ability of the system to recover committed transaction updates if either the system or the storage media fails.
(Associates, 2009)
2. Describe a TP monitor environment. How can a TP monitor stop an operating system being overwhelmed?
A TP Monitor is a subsystem that groups together sets of related database updates and submits them together to a relational database. The result is that the database server does not need to do all of the work of managing the consistency/correctness of the database; the TP Monitor makes sure that groups of updates take place together or not at all. TP-Monitor environment which partitions the workflow engine into several resource managers (RMs) individually managed by a TP-Monitor environment. The RMs together form the workflow engine serving user requests. (Browne's, 2007)
3. What is the difference in load balancing with traditional and transactional MOM, RPC, and conversations?
Load balancing is dividing the amount of work that a computer has to do between two or more computers so that more work gets done in the same amount of time and, in general, all users get served faster.
Traditional RPC Model: In this the request from user should be queued and wait synchronously for the server to execute and return the reply where the client and server should be free at the same time.
MOM: MOM stands for Message-oriented middleware It acts as a middleware between the client and server, buffering the requests from user and replies from servers.
RPC(remote Procedure Call): Remote procedure call (RPC) is an Inter-process communication technology that allows a computer program to cause a subroutine or procedure to execute in another address space(commonly on another computer on a shared network) without the programmer explicitly coding the details for this remote interaction.
4.Why is a two-phase commit protocol better than a one-phase atomic commit protocol?
One –phase Atomic Commit Protocol
This protocol overlaps the voting phase with the execution of transaction and just has a decision
phase. There are two implementation the Implicit Yes Voting and the Coordinate Log.
Advantages:
Simple protocol fewer overheads.
• Low latency due to fewer disk writes.
• Useful in case of low bandwidth networks, as lesser messages are exchanged.
• In most cases all the updates will be logged befor commit so durability is assured.
Disadvantages
• The greatest disadvantage is that it can only handle immediate consistency con-
straints as there is no voting phase. It can not handle the deferred consistency
constraints
Two-Phase Atomic commit protocol: This is the most widely used protocol which commences in two phases ,Voting , to ensure that all sites are ready to commit,Decision , to ensure uniformity at abort or commit at all sites.
2PC is largely used in all distributed systems.
Advantages
• It ensures atomicity even in the presence of deferred constraints.
• It ensures independent recovery of all sites.
• Since it takes place in twophases, it can handle network failures, disconnections and
in their presence assure atomicity.
Disadvantages
• Involves a great deal of message complexity.
• Greater communication overheads as compared to simple optimistic protocols.
• Blocking of site nodes in case of failure of coordinator.
• Multiple forced writes of log, which increase latency.
• Its performance is again a trade off,especially for short lived transactions, like Internet
applications
(Anshu Veda, 2004)
Exercise 18
Exercise 18: Threading Demonstration in Python
Sorry ,i am not good at programming and that to python, i have never ever studied python in my past profile and to answer this exercise i would have to start from zero .so i would not be able to answer this question
Sorry ,i am not good at programming and that to python, i have never ever studied python in my past profile and to answer this exercise i would have to start from zero .so i would not be able to answer this question
Exercise 17
Exercise 17: Concurrency Terms
1.Find definitions for eight terms and concepts used in threaded programming
Waitable timer: Waitable timers were introduced with Windows 98 and Windows NT 4.0. and they were designed to work with threads that need to block for some times. A waitable timer object is a synchronization object whose state is set to signaled when the specified due time arrives. There are two types of waitable timers that can be created: manual-reset and synchronization.
Mutex (mutual exclusion): Mutual exclusion algorithms are used in concurrent programming to avoid the simultaneous use of a common resource, such as a global variable, by pieces of computer code called critical sections.
Thread Synchronization: Thread synchronization requires that a running thread gain a "lock" on an object before it can access it. The thread will wait in line for another thread that is using the method/data member to be done with it. This is very important to prevent the corruption of program data if multiple threads will be accessing the same data. (unanynomous)
Semaphores: a semaphore is a protected variable or abstract data type which constitutes the classic method for restricting access to shared resources such as shared memory in a multiprogramming environment. A counting semaphore is a counter for a set of available resources, rather than a locked/unlocked flag of a single resource. (anynomous, Semaphore (programming))
Locks:It is used to prevent conflict by ensuring that only one thread can access the resource at a time. It might be read or write lock.
Deadlock: A deadlock is a situation where in two or more competing actions are waiting for the other to finish, and thus neither ever does. (anynomous, wipkipedia)
Threads: A thread is a sequence of responses to an initial message posting. This enables you to follow or join an individual discussion in a newsgroup from among the many that may be there. A thread is usually shown graphically as an inital message and successive messages "hung off" the original message.
Event:An event is a sensor output, user action, or a message from other programs or threads (Wikipedia – Event-driven programming, n.d.).
1.Find definitions for eight terms and concepts used in threaded programming
Waitable timer: Waitable timers were introduced with Windows 98 and Windows NT 4.0. and they were designed to work with threads that need to block for some times. A waitable timer object is a synchronization object whose state is set to signaled when the specified due time arrives. There are two types of waitable timers that can be created: manual-reset and synchronization.
Mutex (mutual exclusion): Mutual exclusion algorithms are used in concurrent programming to avoid the simultaneous use of a common resource, such as a global variable, by pieces of computer code called critical sections.
Thread Synchronization: Thread synchronization requires that a running thread gain a "lock" on an object before it can access it. The thread will wait in line for another thread that is using the method/data member to be done with it. This is very important to prevent the corruption of program data if multiple threads will be accessing the same data. (unanynomous)
Semaphores: a semaphore is a protected variable or abstract data type which constitutes the classic method for restricting access to shared resources such as shared memory in a multiprogramming environment. A counting semaphore is a counter for a set of available resources, rather than a locked/unlocked flag of a single resource. (anynomous, Semaphore (programming))
Locks:It is used to prevent conflict by ensuring that only one thread can access the resource at a time. It might be read or write lock.
Deadlock: A deadlock is a situation where in two or more competing actions are waiting for the other to finish, and thus neither ever does. (anynomous, wipkipedia)
Threads: A thread is a sequence of responses to an initial message posting. This enables you to follow or join an individual discussion in a newsgroup from among the many that may be there. A thread is usually shown graphically as an inital message and successive messages "hung off" the original message.
Event:An event is a sensor output, user action, or a message from other programs or threads (Wikipedia – Event-driven programming, n.d.).
Exercise 16
Exercise 16: Authentication and Encryption Systems
1. Visit an e-commerce website and survey the mode of payment allowed. Would you trust the site with your business?
The following website http://www.jewellerystore.com.au/ offer ecommerce .the payment are:
1. ALL MAJOR CREDIT CARDS or BANK ACCOUNT FUNDS TRANSFER through PayPal (Australia & all International purchases). All the payment are automatically directed through the PayPal checkout when the payment option is selected . PayPal is a secure and free service.
2. Direct Bank Deposit (Cash deposit, cash transfer, or internet bank transfer - Australia only). Account details will be issued upon checkout.
3. Bank Cheque/Australia Post Money Order. Payee details and postal address will be issued upon checkout.
2. What measures should e-commerce provide to create trust among their potential customers? What measures can be verified by the customer?
Measures that e-commerce sites can provide include
• passwords,
• software security,
• digital certificates from a trusted source
• ABN
• Validation seals
• The published phone numbers of the website have been called and verified as belonging to the web site.
• Verification that the privacy policy of the site
• SSL
• Secured Seals
3. Visit the Verisign web site – what solutions does it offer for e-commerce?
Verisign provided following ecommerce solutions:
• VeriSign® SSL Certificate Services enable secure commerce, communications, and interactions by providing encryption and authentication services to Web sites, intranets, and extranets.
• VeriSign® Identity and Authentication Services strengthen and protect digital identities with a network approach to strong authentication and online fraud detection services.
• VeriSign® Domain Name Services globalize access to the Internet, and VeriSign is the authoritative registry of all .com, .net, .cc, and .tv domain names.
(verisign)
4. Visit the TRUSTe website. Describe what services and solutions are offered?
TRUSTe provides security seals to the business which shows that the business has a secure privacy policy in place. TRUSTe’s Web Privacy Seal builds confidence between businesses and consumers by identifying businesses with reliable online privacy practices. The seal marks companies that adhere to TRUSTe's strict privacy principles, and comply with the TRUSTe Watchdog dispute resolution process. (TRUSTe, 2009)
5. Get the latest PGP software fromhttp://web.mit.edu/network/pgp.html; install it on two machines and encrypt a message on one machine and decrypt it on the other. Report your findings.
The web page is not available.
6. The use of digital certificates and passports are just two examples of many tools for validating legitimate users and avoiding consequences such as identity theft. What others exist?
The other tools for validating legitimate users are:
Digest: Digest authentication is based on a challenge-response authentication model. The user makes a request without authentication credentials and the Web Server replies with a WWW-Authenticate header indicating credentials. Instead of sending the username and password the server challenges the client with random nonce.
NTLM: NTLM Authentication is Microsoft's proprietary NT LAN Manager authentication algorithm over HTTP. It works on Microsoft Internet Explorer only. Integrated Windows authentication works the same way as Message Digest authentication. NTLM[3] is a Microsoft-proprietary protocol that authenticates users and computers based on an authentication challenge and response.
Microsoft Passport: The Passport single sign in service is an authentication service allowing users to create a single set of credentials that will enable them to sign in to any site Referred to as "participating sites" that supports a Passport service.
Forms-Based: Forms based authentication technique is the popular authentication technique on the internet. Conventionally, web applications had users authenticate themselves through a Web form. The user's credentials as captured by this form are submitted to the business logic which determines the authorization level.
(Hacker, 2008)
1. Visit an e-commerce website and survey the mode of payment allowed. Would you trust the site with your business?
The following website http://www.jewellerystore.com.au/ offer ecommerce .the payment are:
1. ALL MAJOR CREDIT CARDS or BANK ACCOUNT FUNDS TRANSFER through PayPal (Australia & all International purchases). All the payment are automatically directed through the PayPal checkout when the payment option is selected . PayPal is a secure and free service.
2. Direct Bank Deposit (Cash deposit, cash transfer, or internet bank transfer - Australia only). Account details will be issued upon checkout.
3. Bank Cheque/Australia Post Money Order. Payee details and postal address will be issued upon checkout.
2. What measures should e-commerce provide to create trust among their potential customers? What measures can be verified by the customer?
Measures that e-commerce sites can provide include
• passwords,
• software security,
• digital certificates from a trusted source
• ABN
• Validation seals
• The published phone numbers of the website have been called and verified as belonging to the web site.
• Verification that the privacy policy of the site
• SSL
• Secured Seals
3. Visit the Verisign web site – what solutions does it offer for e-commerce?
Verisign provided following ecommerce solutions:
• VeriSign® SSL Certificate Services enable secure commerce, communications, and interactions by providing encryption and authentication services to Web sites, intranets, and extranets.
• VeriSign® Identity and Authentication Services strengthen and protect digital identities with a network approach to strong authentication and online fraud detection services.
• VeriSign® Domain Name Services globalize access to the Internet, and VeriSign is the authoritative registry of all .com, .net, .cc, and .tv domain names.
(verisign)
4. Visit the TRUSTe website. Describe what services and solutions are offered?
TRUSTe provides security seals to the business which shows that the business has a secure privacy policy in place. TRUSTe’s Web Privacy Seal builds confidence between businesses and consumers by identifying businesses with reliable online privacy practices. The seal marks companies that adhere to TRUSTe's strict privacy principles, and comply with the TRUSTe Watchdog dispute resolution process. (TRUSTe, 2009)
5. Get the latest PGP software fromhttp://web.mit.edu/network/pgp.html; install it on two machines and encrypt a message on one machine and decrypt it on the other. Report your findings.
The web page is not available.
6. The use of digital certificates and passports are just two examples of many tools for validating legitimate users and avoiding consequences such as identity theft. What others exist?
The other tools for validating legitimate users are:
Digest: Digest authentication is based on a challenge-response authentication model. The user makes a request without authentication credentials and the Web Server replies with a WWW-Authenticate header indicating credentials. Instead of sending the username and password the server challenges the client with random nonce.
NTLM: NTLM Authentication is Microsoft's proprietary NT LAN Manager authentication algorithm over HTTP. It works on Microsoft Internet Explorer only. Integrated Windows authentication works the same way as Message Digest authentication. NTLM[3] is a Microsoft-proprietary protocol that authenticates users and computers based on an authentication challenge and response.
Microsoft Passport: The Passport single sign in service is an authentication service allowing users to create a single set of credentials that will enable them to sign in to any site Referred to as "participating sites" that supports a Passport service.
Forms-Based: Forms based authentication technique is the popular authentication technique on the internet. Conventionally, web applications had users authenticate themselves through a Web form. The user's credentials as captured by this form are submitted to the business logic which determines the authorization level.
(Hacker, 2008)
Exercise 15
Exercise 15: Protecting and Archiving Data
1. What makes a firewall a good security investment? Accessing the Internet, find two or three firewall vendors. Do they provide hardware, software or both?
A firewall is a set of related programs, located at a network gateway server, which protects the resources of a private network from users from other networks. (The term also implies the security policy that is used with the programs.) An enterprise with an intranet that allows its workers access to the wider Internet installs a firewall to prevent outsiders from accessing its own private data resources and for controlling what outside resources its own users have access to.
Some providing software firewall are:
• Checkpoint zonealarm pro
• Sunbelt personal firewall
• Comodo firewall pro
Hardware Firewall:
• D-link - D-Link DIR-655 Extreme N Wireless Router
• Checkpoint- Zone Alarm Secure Wireless Router
2. Find out if your university or workplace has a backup policy in place. Is it followed and enforced?
In my past profile i have worked with Capital Local Area Bank ,India .the backup policy of the bank included es a daily backup on a 5 week cycle, as well as a month end backup. The month end backup is kept for 12 months. The financial year-end backup is kept for 7 years as a legal requirement. This policy is strictly enforced. Even if part of a backup fails, it must be determined why it failed, and steps taken to prevent this from reoccurring.
3. Most of the antivirus software perform an active scanning of the user activity on the Internet, detecting downloads and attachments in e-mails. Hackers have readily available resources to create new viruses. How easy is it to find a virus writing kit? Search the Internet and find such a tool. For example, see what you can find athttp://vx.netlux.org/dat/vct.shtml.
One of the website dedicated to write virus are http://virus.bartolich.at/virus-writing-HOWTO/_html/index.htmlReferences.
http://etricks.in/tag/how-to-write-virus-codes
but my antivirus didn’t let me download these files .as of the sites are blacklisted on my anti virsus.
1. What makes a firewall a good security investment? Accessing the Internet, find two or three firewall vendors. Do they provide hardware, software or both?
A firewall is a set of related programs, located at a network gateway server, which protects the resources of a private network from users from other networks. (The term also implies the security policy that is used with the programs.) An enterprise with an intranet that allows its workers access to the wider Internet installs a firewall to prevent outsiders from accessing its own private data resources and for controlling what outside resources its own users have access to.
Some providing software firewall are:
• Checkpoint zonealarm pro
• Sunbelt personal firewall
• Comodo firewall pro
Hardware Firewall:
• D-link - D-Link DIR-655 Extreme N Wireless Router
• Checkpoint- Zone Alarm Secure Wireless Router
2. Find out if your university or workplace has a backup policy in place. Is it followed and enforced?
In my past profile i have worked with Capital Local Area Bank ,India .the backup policy of the bank included es a daily backup on a 5 week cycle, as well as a month end backup. The month end backup is kept for 12 months. The financial year-end backup is kept for 7 years as a legal requirement. This policy is strictly enforced. Even if part of a backup fails, it must be determined why it failed, and steps taken to prevent this from reoccurring.
3. Most of the antivirus software perform an active scanning of the user activity on the Internet, detecting downloads and attachments in e-mails. Hackers have readily available resources to create new viruses. How easy is it to find a virus writing kit? Search the Internet and find such a tool. For example, see what you can find athttp://vx.netlux.org/dat/vct.shtml.
One of the website dedicated to write virus are http://virus.bartolich.at/virus-writing-HOWTO/_html/index.htmlReferences.
http://etricks.in/tag/how-to-write-virus-codes
but my antivirus didn’t let me download these files .as of the sites are blacklisted on my anti virsus.
Exercise 14
Exercise 14: Electronic Payments and Security II
1. What are cookies and how are they used to improve security?
A cookie is a text-only string that gets entered into the memory of your browser. This value of a variable that a website sets. If the lifetime of this value is set to be longer than the time you spend at that site, then this string is saved to file for future reference.
2. Can the use of cookies be a security risk?
There are some cookies that are malicious cookies that hackers sometimes use to store your information - the keystrokes, sometimes your passwords and your user names - and they use these cookies to send information from your computer to theirs. If you value your security on the internet, you can set your web browser settings to a very high security so that websites don't retain these cookies.
The following video can be used to understand the ffect of cookies on security
http://www.videojug.com/expertanswer/internet-safety/how-do-cookies-affect-my-internet-security
1. What are cookies and how are they used to improve security?
A cookie is a text-only string that gets entered into the memory of your browser. This value of a variable that a website sets. If the lifetime of this value is set to be longer than the time you spend at that site, then this string is saved to file for future reference.
2. Can the use of cookies be a security risk?
There are some cookies that are malicious cookies that hackers sometimes use to store your information - the keystrokes, sometimes your passwords and your user names - and they use these cookies to send information from your computer to theirs. If you value your security on the internet, you can set your web browser settings to a very high security so that websites don't retain these cookies.
The following video can be used to understand the ffect of cookies on security
http://www.videojug.com/expertanswer/internet-safety/how-do-cookies-affect-my-internet-security
Exercise 13
Exercise: 13
1. List and describe your experiences with a secure Web site. Some examples may be:
• University enrolment;
• online banking, auctions, real estate;
• booking a cheap air ticket or concert ticket;
• Shopping online for a book, software or a CD.
When using secure sites one common thing which i noticed was that the sites where very logically designed and easy to use. Most of the sites are very easy to navigate to find what you want. Shopping sites generally contain a shopping cart and a checkout. Some of the sites which i have used are , Amazon, Ebay, Jetstar etc. The information about the reliability of the site can be checked from the SSL certificate and the information available on the sites about its security.
2. What is SET and how does it compare to SSL as a platform for secure electronic transactions? Is SET in common use?
A protocol designed to en sure the security and integrity of online communications and purchases, Secure Electronic Transaction (SET) uses digital certificates, issued to merchants and other businesses and customers, to perform a series of security checks verifying that the identity of a customer or sender of information is valid.
The Secure Sockets Layer protects data transferred over http using encryption enabled by a server's SSL Certificate. An SSL Certificate contains a public key and a private key. A public key is used to encrypt information and a private key is used to decipher it. When a browser points to a secured domain, an SSL handshake authenticates the server and the client and establishes an encryption method and a unique session key. They can begin a secure session that protects message privacy and message integrity. (SSL).SSL is a standard for encrypted client/server communication between network devices. A network protocol, SSL runs on top of TCP/IP (Transmission Control Protocol/Internet Protocol: facilitates connectivity at diverse environments
Comparing SSL and SET we can see that, SSL is relatively easy to use and is widely acceptable. On the other side the major reasons for the marketplace's eventual decision to go with SET will be the faster settlement times, stronger assurances regarding order integrity. SET will become the industry standard because of SET's back and forth, double check security measures and the fact that SET transfers money early in the transaction process. (Clough, 2008)
1. List and describe your experiences with a secure Web site. Some examples may be:
• University enrolment;
• online banking, auctions, real estate;
• booking a cheap air ticket or concert ticket;
• Shopping online for a book, software or a CD.
When using secure sites one common thing which i noticed was that the sites where very logically designed and easy to use. Most of the sites are very easy to navigate to find what you want. Shopping sites generally contain a shopping cart and a checkout. Some of the sites which i have used are , Amazon, Ebay, Jetstar etc. The information about the reliability of the site can be checked from the SSL certificate and the information available on the sites about its security.
2. What is SET and how does it compare to SSL as a platform for secure electronic transactions? Is SET in common use?
A protocol designed to en sure the security and integrity of online communications and purchases, Secure Electronic Transaction (SET) uses digital certificates, issued to merchants and other businesses and customers, to perform a series of security checks verifying that the identity of a customer or sender of information is valid.
The Secure Sockets Layer protects data transferred over http using encryption enabled by a server's SSL Certificate. An SSL Certificate contains a public key and a private key. A public key is used to encrypt information and a private key is used to decipher it. When a browser points to a secured domain, an SSL handshake authenticates the server and the client and establishes an encryption method and a unique session key. They can begin a secure session that protects message privacy and message integrity. (SSL).SSL is a standard for encrypted client/server communication between network devices. A network protocol, SSL runs on top of TCP/IP (Transmission Control Protocol/Internet Protocol: facilitates connectivity at diverse environments
Comparing SSL and SET we can see that, SSL is relatively easy to use and is widely acceptable. On the other side the major reasons for the marketplace's eventual decision to go with SET will be the faster settlement times, stronger assurances regarding order integrity. SET will become the industry standard because of SET's back and forth, double check security measures and the fact that SET transfers money early in the transaction process. (Clough, 2008)
Exercise 12
Exercise 12- Designing for a secure framework
Part 1: Find out about SET and the use of RSA 128-bit encryption for e-commerce.
SET (Secure Electronic Transfer): A protocol designed to en sure the security and integrity of online communications and purchases, Secure Electronic Transaction (SET) uses digital certificates, issued to merchants and other businesses and customers, to perform a series of security checks verifying that the identity of a customer or sender of information is valid.
The SET (Secure Electronic Transaction) protocol is an open industry standard developed for the secure transmission of payment information over the Internet and other electronic networks. SET has the strong support of two major league credit card companies: Visa and MasterCard .SET provides the basic framework within which many of the various components of securing digital transactions function. Digital certificates, digital signatures, and digital wallets all function according to the SET protocol.
Read more:http://ecommerce.hostip.info/pages/925/Secure-Electronic-Transaction-SET.html#ixzz0GCq4VUWr&B
RSA-128 bit Encryption:
Security has also been a major issue in the E-commerce. The strength of an encryption algorithm is based on its key length, expressed in bits. The longer the key length, the harder it is for an attacker to break the cipher. RSA 128-bit encryption is a public-key encryption and authentication system developed in 1977 by Ron Rivest, AdiShamir, and Leonard Aldeman. The method uses modular exponentiation, which can be performed efficiently by a computer, even when the module and exponent are hundreds of digits long. The public key is a modulus m and an exponent e. A message is represented by a number c between 0 and m-1. (If the message is longer, chop it up into pieces and encrypt each piece.) Raise c to the e power mod m and transmit the result. The private key is the same modulus m and the inverse exponent d, such that e×d is 1 mod φ(m). As you recall from the previous page, c to the e to the d gives c back again. Rising to the e encrypts, and raising to the d decrypts. In a typical application, m is the product of two large primes’ p and q. Thus φ(m) = (p-1)×(q-1). Given an exponent e, find the modular inverse relative to φ(m), and call it d. This builds the public and private keys. The security lies in the difficulty of factoring m into its primes. Without p and q, Charlie cannot derive φ(m), and cannot compute d. Anybody can send encrypted data to Bob, but only Bob can decrypt. (anynomous)
Part 2: What can you find out about network and host-based intrusion detection systems?
The goal of intrusion detection is to monitor network assets to detect anomalous behavior and misuse. This concept has been around for nearly twenty years but only recently has it seen a dramatic rise in popularity and incorporation into the overall information security infrastructure.
Network Intrusion system: Network intrusion detection deals with information passing on the wire between hosts. Typically referred to as "packet-sniffers," network intrusion detection devices intercept packets traveling along various communication mediums and protocols, usually TCP/IP. (Innella, 2001)
Host based Intrusion System: Host-based intrusion detection systems are designed to monitor, detect, and respond to user and system activity and attacks on a given host. Some more robust tools also offer audit policy management and centralization, supply data forensics, statistical analysis and evidentiary support, and in certain instances provide some measure of access control. Host-based intrusion detection is best suited to combat internal threats because of its ability to monitor and respond to specific user actions and file accesses on the host. (Power, 1999: 32.)
Part 3: What is 'phishing'?
Phishing is an e-mail fraud method in which the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients. A phishing expedition, like the fishing expedition it's named for, is a speculative venture: the phishes puts the lure hoping to fool at least a few of the prey that encounter the bait. (anynomous, Phishing, 2008)
The following link is a YouTube video which decide the Phishing http://www.youtube.com/watch?v=sqRZGhiHGxg
Part 1: Find out about SET and the use of RSA 128-bit encryption for e-commerce.
SET (Secure Electronic Transfer): A protocol designed to en sure the security and integrity of online communications and purchases, Secure Electronic Transaction (SET) uses digital certificates, issued to merchants and other businesses and customers, to perform a series of security checks verifying that the identity of a customer or sender of information is valid.
The SET (Secure Electronic Transaction) protocol is an open industry standard developed for the secure transmission of payment information over the Internet and other electronic networks. SET has the strong support of two major league credit card companies: Visa and MasterCard .SET provides the basic framework within which many of the various components of securing digital transactions function. Digital certificates, digital signatures, and digital wallets all function according to the SET protocol.
Read more:http://ecommerce.hostip.info/pages/925/Secure-Electronic-Transaction-SET.html#ixzz0GCq4VUWr&B
RSA-128 bit Encryption:
Security has also been a major issue in the E-commerce. The strength of an encryption algorithm is based on its key length, expressed in bits. The longer the key length, the harder it is for an attacker to break the cipher. RSA 128-bit encryption is a public-key encryption and authentication system developed in 1977 by Ron Rivest, AdiShamir, and Leonard Aldeman. The method uses modular exponentiation, which can be performed efficiently by a computer, even when the module and exponent are hundreds of digits long. The public key is a modulus m and an exponent e. A message is represented by a number c between 0 and m-1. (If the message is longer, chop it up into pieces and encrypt each piece.) Raise c to the e power mod m and transmit the result. The private key is the same modulus m and the inverse exponent d, such that e×d is 1 mod φ(m). As you recall from the previous page, c to the e to the d gives c back again. Rising to the e encrypts, and raising to the d decrypts. In a typical application, m is the product of two large primes’ p and q. Thus φ(m) = (p-1)×(q-1). Given an exponent e, find the modular inverse relative to φ(m), and call it d. This builds the public and private keys. The security lies in the difficulty of factoring m into its primes. Without p and q, Charlie cannot derive φ(m), and cannot compute d. Anybody can send encrypted data to Bob, but only Bob can decrypt. (anynomous)
Part 2: What can you find out about network and host-based intrusion detection systems?
The goal of intrusion detection is to monitor network assets to detect anomalous behavior and misuse. This concept has been around for nearly twenty years but only recently has it seen a dramatic rise in popularity and incorporation into the overall information security infrastructure.
Network Intrusion system: Network intrusion detection deals with information passing on the wire between hosts. Typically referred to as "packet-sniffers," network intrusion detection devices intercept packets traveling along various communication mediums and protocols, usually TCP/IP. (Innella, 2001)
Host based Intrusion System: Host-based intrusion detection systems are designed to monitor, detect, and respond to user and system activity and attacks on a given host. Some more robust tools also offer audit policy management and centralization, supply data forensics, statistical analysis and evidentiary support, and in certain instances provide some measure of access control. Host-based intrusion detection is best suited to combat internal threats because of its ability to monitor and respond to specific user actions and file accesses on the host. (Power, 1999: 32.)
Part 3: What is 'phishing'?
Phishing is an e-mail fraud method in which the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients. A phishing expedition, like the fishing expedition it's named for, is a speculative venture: the phishes puts the lure hoping to fool at least a few of the prey that encounter the bait. (anynomous, Phishing, 2008)
The following link is a YouTube video which decide the Phishing http://www.youtube.com/watch?v=sqRZGhiHGxg
Tuesday, April 7, 2009
Exercise 10
1} i visited the Microsoft site and tried some search to find the e-commerce in their database products.I found article at http://www.microsoft.com/presspass/press/1999/may99/edwardspr.mspx
Which shows that J.D. Edwards intends to deliver e-commerce solutions based on Microsoft Site Server 3.0 Commerce Edition and the BizTalk framework.the aticle shows that By integrating One World with Site Server Commerce Edition,will help businesses deploy and manage business-to-consumer, corporate-purchasing and supply-chain management. The integration also includes a comprehensive set of server components, management tools and sample sites to significantly reduce development time and costs.This article alos show how the integration of different product is used to provide the best e-commerce application.
Do find how micrsoft compare its product aith Open souce product i found a article at
https://partner.microsoft.com/brasil/40029886 which leverage the findings in this IPED study which shows Microsoft's Web Application Platform More Profitable than Open Source. The article states that the Microsoft partners are earning up to 40 percent more profit than those offering open-source products and services. The article show that 6 areas of differential between open source and Microsoft.
2} Integration and role of AJAX in enterprise:
If I think about the companies IT infrastructure , Most companies have a hodgepodge of systems that each perform a unique set of functions.. The problem arises where multiple systems cannot work together. There is no standardization. There is no commonality that interconnects these disparate systems so they can act as one. This is where integration comes into play.
If the integration concept is followed corely the companies would be able to achieve their strategic IT objective to increase utilization and efficiency of existing infrastructure investments.
AJAX is not a new technology but a combination of several existing technologies in a new way. These include HTML, CSS, DOM, XML, XSLT, XMLHttpRequest and Javascript. The acronym AJAX stands for Asynchronous Javascript and XML. AJAX is based on open standards supported by many browsers and platforms. AJAX is a new paradigm for building web application. (Arlekar, 2006)
AJAX is really about the end user. With AJAX features, a Web application is much more interactive, more responsive. It's faster and friendlier. The user is encouraged to do more with the page as interaction and responses (and feedback in case of slow operations) are all handled more elegantly. Overall, the user has a much better experience.
The architecture of AJAX is show below
.gif)
http://msdn.microsoft.com/en-us/magazine/cc163363.aspx
Some example of AJAX at work is Google services like Maps, Gmail, Suggest, Reader use it.
3} I tried to find the similarities between Ruby on rails And Action script but can’t really fin d anything. so I referred to the blog of other student for the subject. In Dennis blog i found this which states that Programmer can use model-view-controller MVC design pattern in coding their Action Script 2.0 (Moock, 2004). But Ruby on Rails is a full-stack MVC framework for database-backed web applications, let coding by favour convention over configuration (Alameda, 2008).
Which shows that J.D. Edwards intends to deliver e-commerce solutions based on Microsoft Site Server 3.0 Commerce Edition and the BizTalk framework.the aticle shows that By integrating One World with Site Server Commerce Edition,will help businesses deploy and manage business-to-consumer, corporate-purchasing and supply-chain management. The integration also includes a comprehensive set of server components, management tools and sample sites to significantly reduce development time and costs.This article alos show how the integration of different product is used to provide the best e-commerce application.
Do find how micrsoft compare its product aith Open souce product i found a article at
https://partner.microsoft.com/brasil/40029886 which leverage the findings in this IPED study which shows Microsoft's Web Application Platform More Profitable than Open Source. The article states that the Microsoft partners are earning up to 40 percent more profit than those offering open-source products and services. The article show that 6 areas of differential between open source and Microsoft.
2} Integration and role of AJAX in enterprise:
If I think about the companies IT infrastructure , Most companies have a hodgepodge of systems that each perform a unique set of functions.. The problem arises where multiple systems cannot work together. There is no standardization. There is no commonality that interconnects these disparate systems so they can act as one. This is where integration comes into play.
If the integration concept is followed corely the companies would be able to achieve their strategic IT objective to increase utilization and efficiency of existing infrastructure investments.
AJAX is not a new technology but a combination of several existing technologies in a new way. These include HTML, CSS, DOM, XML, XSLT, XMLHttpRequest and Javascript. The acronym AJAX stands for Asynchronous Javascript and XML. AJAX is based on open standards supported by many browsers and platforms. AJAX is a new paradigm for building web application. (Arlekar, 2006)
AJAX is really about the end user. With AJAX features, a Web application is much more interactive, more responsive. It's faster and friendlier. The user is encouraged to do more with the page as interaction and responses (and feedback in case of slow operations) are all handled more elegantly. Overall, the user has a much better experience.
The architecture of AJAX is show below
.gif)
http://msdn.microsoft.com/en-us/magazine/cc163363.aspx
Some example of AJAX at work is Google services like Maps, Gmail, Suggest, Reader use it.
3} I tried to find the similarities between Ruby on rails And Action script but can’t really fin d anything. so I referred to the blog of other student for the subject. In Dennis blog i found this which states that Programmer can use model-view-controller MVC design pattern in coding their Action Script 2.0 (Moock, 2004). But Ruby on Rails is a full-stack MVC framework for database-backed web applications, let coding by favour convention over configuration (Alameda, 2008).
Monday, April 6, 2009
Exercise 11
Exercise 11: XML Introduction
1] XML Parsers
• Internet Explorer 5 XML Parser
Internet Explorer 4 was the first Web browser to include a parser, and IE5 includes a good XML parser.
• Expat
Expat is an XML 1.0 parser that is free for private and commercial use.
• Lark
Lark is a non-validating XML parser written in Java.
(Kyrnin)
2] The benefits of adoption a standardized scheme is ,easy of using a single platform by all the business.
Any new introductions will minimum follow the standard, which will help to provide better understanding
Using a standards in business decrease the risk of incompatibility
3] SMIL stands for Synchronized Multimedia Integration Language
SMIL allows integrating a set of independent multimedia objects into a synchronized multimedia presentation. Using SMIL, an author can
1. Describe the temporal behaviour of the presentation
2. Describe the layout of the presentation on a screen
3. Associate hyperlinks with media objects
4. Define conditional content inclusion/exclusion based on
System/network properties
SMIL language is popular in media types Real Audio and Real Video. In addition, they have added some new media types Real Pix (graphics), Real Text and Real Flash. All these media types are tied together through SMIL and all are streamed for playback in the Real Player. SMIL is used to develop multimedia applications for the web platform. SMIL can later become a standard to develop applications for the iTV platform.
(Giuliano Araujo Bertoti)
1] XML Parsers
• Internet Explorer 5 XML Parser
Internet Explorer 4 was the first Web browser to include a parser, and IE5 includes a good XML parser.
• Expat
Expat is an XML 1.0 parser that is free for private and commercial use.
• Lark
Lark is a non-validating XML parser written in Java.
(Kyrnin)
2] The benefits of adoption a standardized scheme is ,easy of using a single platform by all the business.
Any new introductions will minimum follow the standard, which will help to provide better understanding
Using a standards in business decrease the risk of incompatibility
3] SMIL stands for Synchronized Multimedia Integration Language
SMIL allows integrating a set of independent multimedia objects into a synchronized multimedia presentation. Using SMIL, an author can
1. Describe the temporal behaviour of the presentation
2. Describe the layout of the presentation on a screen
3. Associate hyperlinks with media objects
4. Define conditional content inclusion/exclusion based on
System/network properties
SMIL language is popular in media types Real Audio and Real Video. In addition, they have added some new media types Real Pix (graphics), Real Text and Real Flash. All these media types are tied together through SMIL and all are streamed for playback in the Real Player. SMIL is used to develop multimedia applications for the web platform. SMIL can later become a standard to develop applications for the iTV platform.
(Giuliano Araujo Bertoti)
Exercise 8
Exercise 8:PHP and MySQL database access
1.
Start with a simple table in the database:
mysql> SELECT * FROM employees;
2.
Create a web page with the following PHP:
$db = mysql_connect(“localhost", “username", “password");
mysql_select_db(“mydatabase",$db);
$result = mysql_query("SELECT * FROM employees",$db);
echo "First Name: ", mysql_result($result,0,"first"), "
";
echo "Last Name: ", mysql_result($result,0,"last"), "
";
echo "Address: ", mysql_result($result,0,"address"), "
";
echo "Position: ", mysql_result($result,0,"position"), "
";
?>
3.
This is how we can add a record and is part of a file to create called add_record.html
4.
The corresponding PHP file is add_record.php used with the POST method:
mysql_select_db(“mydatabase",$db);
$result = mysql_query("INERT INTO employees (first,last,address,position) VALUES ('$first','$last','$address','$position')");
if ($result == 1) { echo "Thank you! Your information has been entered.“;
} else {
echo "Sorry, there's a problem";
}
?>
5.
The last code example shows how to get multiple records:
$db = mysql_connect(“localhost", “username", "password");
mysql_select_db(“mydatabase",$db);
$result = mysql_query("SELECT * FROM employees",$db);
echo "\n";
";
?>
19
1.
Start with a simple table in the database:
mysql> SELECT * FROM employees;
2.
Create a web page with the following PHP:
$db = mysql_connect(“localhost", “username", “password");
mysql_select_db(“mydatabase",$db);
$result = mysql_query("SELECT * FROM employees",$db);
echo "First Name: ", mysql_result($result,0,"first"), "
";
echo "Last Name: ", mysql_result($result,0,"last"), "
";
echo "Address: ", mysql_result($result,0,"address"), "
";
echo "Position: ", mysql_result($result,0,"position"), "
";
?>
3.
This is how we can add a record and is part of a file to create called add_record.html
4.
The corresponding PHP file is add_record.php used with the POST method:
mysql_select_db(“mydatabase",$db);
$result = mysql_query("INERT INTO employees (first,last,address,position) VALUES ('$first','$last','$address','$position')");
if ($result == 1) { echo "Thank you! Your information has been entered.“;
} else {
echo "Sorry, there's a problem";
}
?>
5.
The last code example shows how to get multiple records:
$db = mysql_connect(“localhost", “username", "password");
mysql_select_db(“mydatabase",$db);
$result = mysql_query("SELECT * FROM employees",$db);
echo "
| Name | Position |
| ", $myrow[2], ", ", $myrow[1], " | ", $myrow[3], " |
";
?>
19
Exercise 7
Create an HTML page with the form:
2. Then, create a PHP file named submit.php with the following code:
echo “Hello, “, $myname;
?>
2. Then, create a PHP file named submit.php with the following code:
echo “Hello, “, $myname;
?>
Subscribe to:
Posts (Atom)
