• Title/Summary/Keyword: Web View

Search Result 530, Processing Time 0.03 seconds

Supplementary Event-Listener Injection Attack in Smart Phones

  • Hidhaya, S. Fouzul;Geetha, Angelina;Kumar, B. Nandha;Sravanth, Loganathan Venkat;Habeeb, A.
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.9 no.10
    • /
    • pp.4191-4203
    • /
    • 2015
  • WebView is a vital component in smartphone platforms like Android, Windows and iOS that enables smartphone applications (apps) to embed a simple yet powerful web browser inside them. WebView not only provides the same functionalities as web browser, it, more importantly, enables a rich interaction between apps and webpages loaded inside the WebView. However, the design and the features of WebView lays path to tamper the sandbox protection mechanism implemented by browsers. As a consequence, malicious attacks can be launched either against the apps or by the apps through the exploitation of WebView APIs. This paper presents a critical attack called Supplementary Event-Listener Injection (SEI) attack which adds auxiliary event listeners, for executing malicious activities, on the HTML elements in the webpage loaded by the WebView via JavaScript Injection. This paper also proposes an automated static analysis system for analyzing WebView embedded apps to classify the kind of vulnerability possessed by them and a solution for the mitigation of the attack.

MVC Architecture-aware Restructuring of Web Apps (MVC 아키텍처 인지하는 웹 앱 재구조화)

  • Oh, Jaewon;Ahn, Woo Hyun;Kim, Taegong
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.21 no.11
    • /
    • pp.2153-2166
    • /
    • 2017
  • Web apps have a problem that they cause same data to be repetitively retrieved, processed, and displayed when web browsers load different web pages. To resolve the problem, this paper presents and evaluates a new method for restructuring of Java web apps. This approach dynamically analyzes Java web apps from the MVC (Model-View-Controller) architecture point of view and identifies redundant data by using the composite view pattern. Then the input apps are restructured in order not to load the redundant data when users make requests for new pages. This restructuring generates new web apps that conform to the MVC architecture and improve the performance of input web apps. The experimental results showed that when compared to legacy web apps, the restructured apps' response time was reduced on desktop PCs and mobile devices by 38% and 55%, respectively. In addition, case studies using open-source web apps showed the applicability of the proposed approach.

An extension of state transition graph for distributed environment (분산된 환경에서의 상태 전이 그래프의 확장)

  • Suh, Jin-Hyung;Lee, Wang-Heon
    • Journal of the Korea Society of Computer and Information
    • /
    • v.15 no.1
    • /
    • pp.71-81
    • /
    • 2010
  • In a typical web environment, it is difficult to determine the update and re-computation status of WebView content or the transition of WebView processing included in web page. If an update to one of data is performed before a read operation to that, we could get a wrong result due to the incorrect operation and increase a complexity of the problem to process. To solve this problem, lots of researchers have studied and most of these problems at the single user environment is not problems. However, the problems at a distributed environment might be occurred. For this reason, in this paper, we proposed the extended state transition graph and algorithms for each status of WebView for explaining WebView state in the distributed environment and analyze the performance of using the materialized WebView and not. Additionally, also analyze the timing issues in network and effectiveness which follows in size of WebView contents.

An Integrated View of Web Site Evaluation Method (통합적인 관점에서의 웹사이트 평가 방법)

  • 곽기영
    • Journal of Korea Society of Industrial Information Systems
    • /
    • v.7 no.4
    • /
    • pp.74-82
    • /
    • 2002
  • Although there have been many Web site evaluation models with an explosive growth of Internet, they seem to be not fully considering various aspects of Web sites resulting from their changing roles. This paper proposes a method for evaluating Internet Web sites based on an integrated view. The method consists of 4 views including user-judgement view, user-performance view, expert-judgement view, and expert-performance view. Working procedures of the method along with tools and techniques and its implications are presented.

  • PDF

A Design and Implementation of Direct Volume Rendering View Program based on Web (웹 기반의 다이렉트 볼륨 렌더링 View 프로그램의 설계 및 구현)

  • Yoon, Yo-Sup;Yoon, Ga-Rim;Kim, Young-Bong
    • Proceedings of the Korea Contents Association Conference
    • /
    • 2004.11a
    • /
    • pp.402-407
    • /
    • 2004
  • Since the world wide web, simple and convenient tool, has proposed, the Internet became the most simple network resource which provide many informations of the world. Furthermore, various methodologies are developed to support the dynamic service such as 3D View web service. We will propose the volume rendering view program that interactively visualize the 3D data on the web. The 3D Data is obtained by stacking the 2D images along the z-direction. We also employ the COM based OCX control which is a kind of Active component. This web program will contribute the diagnosis of the diseases through the 3D visualization and image analysis functions at remote places.

  • PDF

Web-based HLS(Http Live Streaming) Multi-view System for Real-time High Quality Video (실시간 고화질 영상에 대한 웹기반의 HLS 멀티뷰 시스템 설계)

  • Kim, Dae-Jin
    • The Journal of the Korea Contents Association
    • /
    • v.17 no.11
    • /
    • pp.312-318
    • /
    • 2017
  • In recent years, a high-quality video input device has been generalized, and a central control system capable of simultaneously viewing video input in real time has become an essential element. At this time, there are attempts to access through the web without installing the program separately. However, if multiple high-quality videos are simultaneously viewed through the web browser, the web browser is terminated by force. In this paper, we propose a web-based HLS(HTTP Live Streaming) multi-view system for real-time high-definition video. We have reconstructed the multi-view screen as a screen by transcoding and implemented a system that can monitor multiple video inputs through a web browser on the fly without using security vulnerability ActiveX.

Anonymous Pay-Per-View Service for Web-Based Video-on-Demand Systems (웹 기반 VOD 시스템을 위한 익명성이 제공되는 Pay-Per-View 서비스)

  • Joo, Han-Kyu
    • Journal of Digital Contents Society
    • /
    • v.9 no.1
    • /
    • pp.69-75
    • /
    • 2008
  • Video-on-demand (VOD) service allows subscribers to view any video whenever they want. With the development of the high speed computer networks, web-based VOD services are available. To support VOD services, charging scheme is necessary. Pay-per-view is an effective charging scheme for VOD services. Pay-per-view allows the subscribers to pay for what they have viewed. Privacy is another important attribute for VOD services. The subscribers may not want to reveal what they have viewed to anyone including the VOD provider. Anonymity makes it complicated to calculate charge for the VOD service. An approach that achieves both anonymity and pay-per-view charge calculation is necessary. In this paper, anonymous web-based VOD service is proposed. The proposed approach also gives pay-per-view capability.

  • PDF

Interactive 3D-View Image Service on Web and Mobile Phone (웹 및 모바일 폰에서의 인터랙티브 3D-View 이미지 서비스 기술)

  • Jeon, Kyeong-Won;Kwon, Yong-Moo;Jo, Sang-Woo;Ki, Jeong-Seok
    • 한국HCI학회:학술대회논문집
    • /
    • 2007.02a
    • /
    • pp.518-523
    • /
    • 2007
  • This paper presents web service and service on mobile phone about research on virtual URS(Ubiquitous Robotic Space). We modeled the URS. Then, we find the location of robot in the virtual URS on web and mobile phone. We control the robot view with mobile phone. This paper addresses the concept of virtual URS and introduces interaction between robot in the virtual URS and human using web and mobile phone service. Then, this paper introduces a case of service on mobile phone.

  • PDF

Creating Method for Multi-Size Web View Based on Query Restructuring Rules

  • Shin, Sang-Gyu;Kim, Tai-Suk
    • Journal of Korea Multimedia Society
    • /
    • v.11 no.12
    • /
    • pp.1758-1764
    • /
    • 2008
  • In this paper, we propose query restructure method which realizes not only to present the result from database in Web page but also to adapt user's browsing environments. Recently, wireless PDA (Personal Digital Assistant) and portable phone and terminals equipped with Web browser become very popular. Various browsers would be required to create the HTML which adapt to the user's browsing environment. We propose an adaptive data presentation system which is an extension of SQL which creates HTML pages dynamically adapting to the size of screen. In our proposed method, the three basic rules for the layout conversion are provided and applying these rules, an efficient layout conversion technique optimized to user environment is proposed. Moreover, we propose a standard for converting layouts and a layout optimization for adaptive conversion of layouts.

  • PDF

Design of an Architecture Pattern for Ajax-based Web Applications (Ajax기반 웹 응용을 위한 아키텍쳐 패턴 설계)

  • Kim, Hwang-Man;Kim, Yong-Goo
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.36 no.9B
    • /
    • pp.1057-1065
    • /
    • 2011
  • In order to achieve the ease of development and to facilitate the maintenance of codes for complex Ajax (Asynchronous Java Script and XML)-based web clients, this paper proposes a CVC (Communicator-View-Controller) architecture pattern by modifying the well-known MVC (Model-View-Controller) framework. By composing the Communicator of codes for asynchronous data retrieval, which is common to Ajax-based clients, the proposed architecture pattern is able to cut out the graphic design related codes to constitute the View layer. Based on such declarative generalization of complex web-client codes, Ajax-related codes can be easily modularized and efficiently reused in development and maintenance stages, and graphics design can be done separately regardless of the other business logic related codes development, resulting in highly efficient development and maintenance of complex Ajax-based web clients.