Functional "AJAX" in Secure Synchronous Programming

Functional AJAX in Secure Synchronous Programming Ramesh Bharadwaj Center for High Assurance Computer Systems Naval Research Laboratory 4555 Overlook Avenue Washington, District of Columbia 20375›5337 ramesh@itd.nrl.navy.mil Supratik Mukhopadhyay Department of Computer Science West Virginia University Morgantown, West Virginia 26506›6109 supratik@csee.wvu.edu ABSTRACT AJAX (Asynchronous Javascript and XML) is a combination of technologies aimed at supporting an improved user/application interactivity in the context of web-based service-oriented computing. Based on the XMLHttpRequest API, AJAX provides an engine for handling service invocations asynchronously

while interacting with other applications/users in the foreground. The AJAX combination of technologies have already been deployed in popular applications like Google Maps. The adherence to XML-based format for data exchange makes this combination of technologies and similar other frameworks suitable for deployment in service-oriented architectures based on lightweight services (REST or Web) augmenting existing architectures with increased capabilities of interaction. While AJAX promises improved interaction capabilities, it is also accompanied by its baggage of problems. The lack of formal semantics makes it difficult to understand and validate the function- alities that an application is supposed to provide. The support for individual component technologies of AJAX (e.g., XMLHttpRe- quest, Javascript etc.) are different for different infrastructures (and browsers). The adoption of Javascript (an interpreted scripting language) makes it inefficient for running heavyweight processes. Be- sides, the source code must be downloaded by the client for execution which raises concerns in security and intellectual property issues. These problems render the existing AJAX framework unsuitable for deployment in mission-critical enterprise applications. In this paper, we present an AJAX -like framework in an event- driven secure synchronous programming environment. More precisely, we present a synchronous programming...

Website: www.csee.wvu.edu | Filesize: 231kb
No of Page(s): 10
Download Functional “AJAX” in Secure Synchronous Programming.pdf