Search

To guard against the WEB site's cross-site scripting (XSS) attacks, the characteristics and filtering mode of XSS vulnerabilities were analyzed. A technical scheme for XSS vulnerabilities discovery was presented. First, an anti-filter rules set was used to convert the XSS code and then an automatic crawler program was employed to inject the XSS code and test it's usability. Finally, the effective XSS code and the point of the injected code could be acquired. The presented method has been successfully used to discover the XSS vulnerabilities of web-email and web site. [ABSTRACT FROM AUTHOR]

To solve the problems of low power factor and large amount of harmonic component caused by uncontrolled diode rectifier in wind-power generation, the mathematical models for each part of inverter in wind-power generation with back-to-back topology were analyzed. Considering the control strategy of inverter at machine side and the net side, mathematical models of grid-connected converter and wind-power generation inverter were established. Simulations were implemented using Simulink software. The results have verified the correctness and feasibility of proposed control strategies in this paper [ABSTRACT FROM AUTHOR]

In order to solve the problems of the low end-user's flexibility in information systems, the concept of flexible business is proposed and the flexible business object model defined. Based on flexible model, the business function in specific domain was described. The key factors of flexible business, such as flexible property, behavior, basic-info set and view set, are defined. Meanwhile, the flexible correlation is described, the model's development process based on domain engineering given and an example of its application in software risk management system presented to illustrate the model. The results showed that flexible business object model could greatly improve the user lever flexibility in software system. [ABSTRACT FROM AUTHOR]