Abstract

Cross origin interactions constitute the core of today’s collaborative Word Wide Web. They are, however, also the cause of malicious behaviour like Cross-Site Request Forgery (CSRF), clickjacking, and cross-site timing attacks, which we collectively refer as Web Infiltration attacks. These attacks are a rampant source of information stealth and privacy intrusion on the web. Existing browser security policies like Same Origin Policy, either ignore this class of attacks or, like Content Security Policy, insufficiently deal with them. In this paper, we propose a new declarative browser security policy — “Cross Origin Request Policy” (CORP) — to mitigate such attacks. CORP enables a server to have fine-grained control on the way different sites can access resources on the server. The server declares the policy using HTTP response headers. The web browser monitors cross origin HTTP requests targeting the server and blocks those which do not comply with CORP. Based on lessons drawn from examining various types of cross origin attacks, we formulate CORP and demonstrate its effectiveness and ease of deployment. We formally verify the design of CORP by modelling it in the Alloy model checker. We also implement CORP as a browser extension for the Chrome web browser and evaluate it against real-world cross origin attacks on open source web applications. Our initial investigation reveals that most of the popular websites already segregate their resources in a way which makes deployment of CORP easier.

Abstract

As education and technology merge, the diversity of teaching and learning methods expand even more. Virtual labs are a set of web applications containing learning materials that compliment the various courses in an Engineering curriculum. The primary intent of the virtual labs is to provide in-lab experience to their users even when the physical lab infrastructure is not available. In this paper, we propose a method for providing access to virtual labs for all those lack internet access. Our aim is to facilitate availability and usage of Virtual Labs without network connectivity. We preinstall the virtual labs with full environment on an Operating System and also use Debian packages for easy installation of the labs on existing Operating System.

Abstract

e propose set of guidelines for virtual labs to improve end user experience based on analysis of experimental results. Virtual labs were designed and developed by people with different technical backgrounds based on their familiarity with the technologies and the complexity of virtual lab. As a result each lab developer decided to use his or her own set of tools and technologies leading to performance issues during execution of the virtual labs. Performance of a web application depends upon the content of the web page. Therefore, we did analysis on web pages of virtual lab and listed guidelines to enhance user experience.

Abstract

Friendsourcing games aim to collect useful information about individuals by targeting their socially connected groups or friends. The current method of eliciting information is to pose direct questions to friends and expect a truthful response in return. However, such an approach not only becomes monotonous after some time but also suffers from problems like social awkwardness and reticence and thus, affecting the accuracy of the generated responses. In this paper, we present Power of Friends, a novel approach to friendsourcing games, which involves identifying the unanimous opinion of all the friends about a question related to an individual. We tested our proposed approach with seven different groups and were able to generate 47 facts about members of the selected groups. Participants particularly enjoyed the guesswork and interactive elements of the game. Based on the feedback obtained from the study, we propose four strategies for designing similar friendsourcing games.

Abstract

The Millenium Development goals emphasize the need for building" open, rule-based, predictable and non-discriminatory" e-governance systems. However, building such open systems remains a challenge: on the one hand, the systems are required to be open, whereas, on the other, there is the need to preserve and protect private and confidential information of potentially millions of users. This requires that e-governance systems carry clear specifications of how access to users' documents is managed throughout an e-governance application's workflow.

Abstract

Pedagogical literature is generally rich with references to digitally savvy students, operating at twitch speed. This creates pressure on instructors, pedagogies, educational technologies to primarily cater to these digital natives. This paper conducts a descriptive study of students of rural AP to see if indeed Indian tier 2-3 students are of this caliber and description. Should the digital natives model be used for rural Indian student profile as well? Findings from our survey based study reveal that of the (N=372) tier 2, 3 students only 50% own a PC, only 41% surf the web, and of those who surf, it is mostly consumption behavior with social intent. And finally, while the confidence in learning and skills is high, English comprehension skills is poor. We feel that this profile of students is in contrast to the computer savvy image being projected, and should inform emerging educational technology projects aimed for rural India.

Abstract

We revive an old but little explored idea about how to think about algorithms and problem solving. Algorithms are discrete dynamical systems, also called iterative systems. Pursuing this point of view pays rich dividends. Important concepts like state space, next-state function, termination, fixed points, invariants, traces etc., can be mapped from dynamical systems to elements of algorithm design. Many of these concepts can be visualised through plots that trace the dynamic behaviour of the algorithm

Abstract

The objective of this paper is to suggest a fresh approach to introductory programming curricula in the Indian school and engineering college context. The approach allows the student to connect high-school (up to 10+2) mathematics to the fundamentals of computing, algorithms and problem solving. The bridge connecting algebra and computing is functional programming, a paradigm confined over forty years to the computer science research community but now gaining popularity in industry as well as undergraduate education in some schools across the world. We show, using several examples, why and how functional programming is easier to master than traditional imperative programming. We conclude with the results of our attempts so far at introducing functional programming to students in IT colleges in India.

Abstract

espite the advancement in the information extraction area, the task of identifying associated relations among named entities within a text document remains a significant challenge. Existing automated approaches lack human precision and they also struggle to handle erroneous documents. In this paper, we propose a crowdsourcing-based approach to improve the accuracy of the generated relations from the existing extraction techniques. Our idea is to gather judgments on the extracted relations of an article from the interested users. By contributing, the users in return remember the facts related to a document. This paper presents the complete design of the approach along with a user study done with twelve participants. Results show that the users rated the proposed system positively and were willing to contribute their time and energy for the task.

Abstract

A set of tools that demostrate the concept of a re-narration web, that aims to add alternative, target specific narrations of web documents as an extension of the web protocol with the intent of assisting a process of content dissemination and access that is inclusive of non-literate people.