Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:

 

Automated Testing of Complex Web 2.0 Applications Prevents Security Vulnerabilities

01.03.2013
So far there are no methods to test complex web 2.0 applications systematically and at low cost for malfunctions and security vulnerabilities.
Therefore, computer scientists from Saarland University have developed a software system for checking complex web applications autonomously. They will show their technology on 5 March at the computer fair Cebit (Hall 9, booth F34). As of today the Federal Ministry of Economics and Technology is supporting the researchers in their effort to commercialize the technology by founding a spin-off.

“The police have discovered a new variant of internet fraud. The offender capitalizes on the complexity of social networks”, reported a newspaper a month ago in Southern Germany. Valentin Dallmeier, postdoc at the software engineering chair at Saarland University, is not surprised. He says that the methods that web developers and responsible project leaders rely on to try to find programming errors and security holes in web applications have been too ineffective and inefficient. “This is still done manually and therefore causes not only very high costs, but also high levels of risk for companies and the community,” Martin Burger explains. He works at the software engineering chair, too. Together the two postdocs want to change this serious deficit. Therefore they have developed the software system “Webmate”, which determines automatically why Web 2.0 applications fail.
For the transfer of the technology to a spin-off, they have just received 500,000 Euros from the national support program “EXIST” run by the Federal Ministry of Economics and Technology (BMWi). The program is aimed at improving the entrepreneurial environment at universities and research institutions and at increasing the number of technology- and knowledge-based business start-ups.

Computer scientists from Saarland University have developed a software system for checking complex web applications autonomously
bellhäuser - das bilderwerk

So called Web 2.0 applications run centrally on an online server. Therefore, in contrast to conventional programs, they are not installed on the user’s computer or laptop; instead, the user interacts with them via a web browser. In recent years, thanks to new web development technologies such as Asynchronous JavaScript and XML (AJAX), web applications can be used as smoothly as if they were installed on personal computers. AJAX takes care of organizing the transfer of data packets between the user’s computer and server in such a way that the delays incurred by the connection are barely noticeable. Hence, not only private users but also companies and the public sector are adopting web applications more and more frequently. However, news about data theft and malfunctions is also reported on a daily basis.

Dallmeier and Burger want to prevent such worst-case scenarios and other breakdowns. Businesses and their responsible web administrators will only have to type in their Web address. Afterwards the system discovers automatically how the different components of the application are connected to each other and via which menus, buttons, and other control panels the users are interacting with the application. Subsequently, it generates and executes test scenarios. If it discovers, for example, that the application is not compatible with a certain version of a browser, or a control panel no longer exists in a new version of the application, the system informs the developer immediately — likewise if a database is not connected, a server does not respond, or a link is dead. The web developer is able to repeat this test at any time.

Dallmeier, Burger and the three other persons planning to found the spin-off are sure that their technology will succeed. They estimate the market potential in Germany alone to be 120 million Euros annually.

Computer science research on the campus of Saarland University
The Department of Computer Science is not the only research institution which is exploring new aspects of computer science. Only a few yards from there, you can also find the Max Planck Institute for Computer Science, the Max Planck Institute for Software Systems, the Center for Bioinformatics, the Center for IT-Security, Privacy and Accountability, the German Research Center for Artificial Intelligence, the Intel Visual Computing Institute and the recently renewed Cluster of Excellence “Multimodal Computing and Interaction”.

For further information please contact:
Valentin Dallmeier
Tel: +49 681 302-70993
E-Mail: dallmeier@cs.uni-saarland.de

Gordon Bolduan, Science Communication
Cluster of Excellence “Multimodal Computing and Interaction”
Phone: +49 681 302-70741
During Cebit: +49 0511/ 89497024
E-Mail: gbolduan@mmci.uni-saarland.de

Friederike Meyer zu Tittingdorf | Universität des Saarlandes
Further information:
http://www.uni-saarland.de
http://www.st.cs.uni-saarland.de/webmate/

More articles from Information Technology:

nachricht Putting food-safety detection in the hands of consumers
15.11.2018 | Massachusetts Institute of Technology

nachricht Next stop Morocco: EU partners test innovative space robotics technologies in the Sahara desert
09.11.2018 | Deutsches Forschungszentrum für Künstliche Intelligenz GmbH, DFKI

All articles from Information Technology >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: A Chip with Blood Vessels

Biochips have been developed at TU Wien (Vienna), on which tissue can be produced and examined. This allows supplying the tissue with different substances in a very controlled way.

Cultivating human cells in the Petri dish is not a big challenge today. Producing artificial tissue, however, permeated by fine blood vessels, is a much more...

Im Focus: A Leap Into Quantum Technology

Faster and secure data communication: This is the goal of a new joint project involving physicists from the University of Würzburg. The German Federal Ministry of Education and Research funds the project with 14.8 million euro.

In our digital world data security and secure communication are becoming more and more important. Quantum communication is a promising approach to achieve...

Im Focus: Research icebreaker Polarstern begins the Antarctic season

What does it look like below the ice shelf of the calved massive iceberg A68?

On Saturday, 10 November 2018, the research icebreaker Polarstern will leave its homeport of Bremerhaven, bound for Cape Town, South Africa.

Im Focus: Penn engineers develop ultrathin, ultralight 'nanocardboard'

When choosing materials to make something, trade-offs need to be made between a host of properties, such as thickness, stiffness and weight. Depending on the application in question, finding just the right balance is the difference between success and failure

Now, a team of Penn Engineers has demonstrated a new material they call "nanocardboard," an ultrathin equivalent of corrugated paper cardboard. A square...

Im Focus: Coping with errors in the quantum age

Physicists at ETH Zurich demonstrate how errors that occur during the manipulation of quantum system can be monitored and corrected on the fly

The field of quantum computation has seen tremendous progress in recent years. Bit by bit, quantum devices start to challenge conventional computers, at least...

All Focus news of the innovation-report >>>

Anzeige

Anzeige

VideoLinks
Industry & Economy
Event News

“3rd Conference on Laser Polishing – LaP 2018” Attracts International Experts and Users

09.11.2018 | Event News

On the brain’s ability to find the right direction

06.11.2018 | Event News

European Space Talks: Weltraumschrott – eine Gefahr für die Gesellschaft?

23.10.2018 | Event News

 
Latest News

Massive impact crater from a kilometer-wide iron meteorite discovered in Greenland

15.11.2018 | Earth Sciences

When electric fields make spins swirl

15.11.2018 | Physics and Astronomy

Discovery of a cool super-Earth

15.11.2018 | Physics and Astronomy

VideoLinks
Science & Research
Overview of more VideoLinks >>>