Software & Systems

Articles of journal № 4 at 2019 year.

Order result by: Public date | Title | Authors |

21. Web-robot detection method based on user’s navigation graph [№4 за 2019 год]
Authors: A.A. Menshchikov , Yu.A. Gatchin
Visitors: 7507
According to reports of web security companies, every fifth request to a typical website is from mali-cious automated system (web robots). Web robots already prevail over ordinary users of web resources in terms of traffic volume. They threaten data privacy and copyright, provide unauthorized information gathering, lead to statistics spoiling, and performance degradation. There is a need to detect and block the source of robots. The existing methods and algorithms involve syntactic and analytical processing of web server logs to detect web robots. Such approaches cannot reliably identify web robots that hide their presence and imitate the behavior of legitimate users. This article proposes a method of web-robot detection based on the characteristics of the page web-graph. The characteristics of the analyzed sessions include not only the features of a user web graph, but also parameters of each node visited by him (in and out degrees, centrality measures, and others). To calculate such characteristics, a connectivity graph of pages was constructed. Based on the analysis of these parameters, as well as the characteristics of the web robot's behav-ioral graph, the authors make a decision to classify the session. The authors provide an analysis of different behavioral patterns, describe the basic principles of ex-tracting the necessary data from web server logs, and the method of the connectivity graph construction as well as the most significant features. The paper conciders a detection procedure and selection of an appropriate classification model. For each studied model, the authors select optimal hyperparameters and perform cross-validation of the results. The analysis of the accuracy and precision of such detec-tion shows that the usage of XGboost library allows obtaining F1 measure equals 0.96.

22. Development of a spiking neural network with the possibility of high-speed training to neutralize DDoS attacks [№4 за 2019 год]
Authors: E.V. Palchevsky, O.I. Khristodulo
Visitors: 7653
Effective data accessibility is one of the key challenges in information security. Often DDoS attacks violate in-formation availability. The imperfection of modern protection methods against attacks by external unauthorized traffic leads to the fact that many companies with Internet access are faced with the inaccessibility of their own services that provide various services or information. This results in company financial losses from equipment downtime. To solve this problem, the authors have developed a spiking neural network to protect against attacks by external unauthorized traffic. The main advantages of the developed spiking neural network are high self-learning speed and quick response to DDoS attacks (including unknown ones). A new method of a spiking neural network self-training is based on uniform processing of spikes by each neuron. Due to this fact, the neural network is trained in the shortest possible time, therefore it quickly and efficiently filters attacks with external unauthorized traffic. The paper also compares the developed spiking neural network with similar solutions for protecting against DDoS attacks. As a result, it reveales that the developed neural network is more optimized for high loads and is able to detect and neutralize DDoS attacks as soon as possible. The developed spiking neural network was tested in idle conditions and in protection against DDoS attacks. Load values were obtained on the resources of the computing cluster. Long-term testing of a pulsed neural net-work shows a rather low load on the central processor, RAM and solid state drive during massive DDoS attacks. Thus, the optimal load not only increases the availability of each physical server, but also provides the ability to simultaneously run resource-intensive computing processes without any disruption to the functioning of the work-ing environment. Testing was carried out on computing cluster servers, where a spiking neural network showed stable operation and effectively protected from DDoS attacks.

23. Component in the Kotlin programming language for integrating executable programs into internet resources [№4 за 2019 год]
Authors: A.V. Prendota , P.V. Balakshin
Visitors: 3290
The paper provides an overview of tasks, methods and tools for training and working with the Kotlin programming language. This language was created as an alternative to other popular programming lan-guages based on JVM (Java Virtual Machine), and also to the languages that were used to write various Android and iOS applications. Due to the fact that Kotlin leveled inconveniences of competitive pro-gramming languages, it has become the official tool for the Android operating system since 2017. The importance of creating and supporting an online programming environment as a full-fledged training resource is shown. Using the online environment in training courses makes it possible to create sample programs for studying stylistic features of the language in the form of code that is executed di-rectly in the browser. Such approach allows ensuring the development of new projects even in the ab-sence of a full-fledged development environment on the developer's computer. Syntax highlighting and code completion also attract new users. The paper presents a brief analysis of existing online development platforms and highlights their shortcomings associated with integration problems with third-party sites, a small number of illustrative examples, and the lack of syntax highlighting and code completion. Furthermore the paper provides in-formation on how to solve a number of issues associated with writing and executing code in the Kotlin language. The paper considers the use of the Kotlin Playground library, which converts HTML blocks into specific code editors. This makes it possible to execute the created editors directly in the browser. Kotlin Playground library features such as code execution and compilation for various platforms, markup, code completion and highlighting capabilities, test script creation and execution, and working with the API are also considered. These features allow users to adapt every component of the online environment to his/her needs and to correctly integrate the resulting environment into Internet re-sources. The paper gives examples of the Kotlin Playground library functions, presents its syntax, installa-tion and further loading rules using Node Package Manager, as well as the use of this library. The paper concludes with a link to documentation and identifies common Russian and international educational online platforms on which Kotlin training courses have been or are being implemented using the Kotlin Playground library.

24. Peculiarities of porting the Robot Operating System framework onto Elbrus platform [№4 за 2019 год]
Authors: A.A. Tachkov, A.Yu. Vukolov, A.V. Kozov
Visitors: 4951
The Robot Operating System is the most widespread helper framework for mobile robots control sys-tems development. However, it fully supports only Ubuntu/Debian Linux-based software, which leads to limitation of the possibility to use calculating equipment developed natively in Russia within design control systems. The authors ported ROS Melodic Morenia onto Elbrus platform natively developed in Russia (computer based on Elbrus-4C CPU). This paper describes main peculiarities of the porting process associated with the differences be-tween Elbrus operating system and most of Linux distributions. Version matching for Elbrus integrated software on which the ROS depends is also considered. The authors attempted to determine ROS build dependency libraries that could be fully installed on Elbrus using only system packages and to repack these libraries into deb-packages for further installation onto similar computers. In addition, the paper describes the developed deployment scenarios for ROS ready-out-of-the-box. There is a description of testing of the prepared distribution performed for the task of multilayered passability map building. This task was solved on control system with LIDAR point cloud input. The authors demonstrate the results of tests as treatment times for the identical point clouds processing and map layer refreshment. The tests were run on systems based on Elbrus-4C, Intel Core i3-3220 and Intel Core i7-6700HQ CPUs using the same ROS version. The authors conclude that the ROS Melodic More-nia deployed onto Elbrus platform iы fully operational.

25. Domain-specific languages for testing web applications [№4 за 2019 год]
Authors: V.G. Fedorenkov , P.V. Balakshin
Visitors: 6278
The desire to release a high quality product with minimal errors often raises many problems regarding product testing for developers of both large and smaller projects. This work is devoted to searching for solutions for these problems. The paper compares the main methods as well as the existing software tools for creating and sup-porting domain specific languages aimed at working with test scripts to testing interfaces of web appli-cations. It also considers existing tools for working with Selenium, reviews the methodology of writing DSL (with further selection of the most appropriate), shows how to implement a prototype of DSL based on Selenium and to test and assess the applicability of a prototype. It describes the advantages of using DSL in testing, its functional and non-functional requirements, shows the developed DSL in a simplified form, the language structure (Java-packages). One of the main criteria for working with all of the abovementioned is the involvement of non-technical specialists at each testing stage (solving the so-called translation problem), which is im-portant for implementing comprehensive testing of a software product. One of the key features of the article is the demonstration of implementing a DSL prototype based on Selenium, followed by testing and evaluating the applicability of the implemented prototype. The paper shows a method of creating an additional metaprogramming tool for further simplification of cre-ation, support, and modification of the developed test scripts.

26. Model and algorithm of selecting software architecture for IoT systems [№4 за 2019 год]
Author: Yu.V. Yadgarova
Visitors: 2809
The paper presents an analytical model for cost estimation and an algorithm for selecting a basic pat-tern of software architecture, as well as design tactics for the IoT (Internet of things) systems. It gener-alizes the concept of IoT technologies, reviews software systems quality parameters, emphasizes the main significant parameters applicable to IoT systems and proposes methods to achieve them. The nec-essary quality parameters of software systems are achieved by implementing the basic pattern of soft-ware architecture and related design tactics. The paper introduces the analytical model of dependency of project labor intensity on the used el-ements of software architecture. The project labor intensity is calculated according to the COCOMO II method. The search algorithm for the basic architecture pattern and design tactics is presented. The in-dicated algorithm is built on the basis of a local search when solving the problem of satisfying con-straints with minimizing the labor intensity function. Selecting a pattern, user preferences are also tak-en into account. The model and algorithm allow selecting the most appropriate architecture patterns and tactics for a particular type of project at early stages of their design. Indicated approach allows reducing errors in software architecture design at the initial stage of IoT-architecture pattern selection. The paper considers implementation of this approach in the project of flexible workspace management system development. It is advisable to use the approach to achieve the required system quality parameters and minimize errors when selecting software architecture at the ini-tial stages of the project, finally reducing the project cost. The approach can also be used to develop fully functional prototypes on a tight schedule.

◄ ← Preview | 1 | 2 | 3