This document provides an overview of when to use a framework versus integrating existing products. It discusses the developer's choice between frameworks and integrated products. Frameworks like Symfony are designed as development platforms and provide more flexibility, while integrated products aim to be usable out of the box but have less flexibility. The document also provides examples of how to integrate Symfony within other products, such as by including Symfony routing rules that direct to an integrated product. It describes how a basic content management system could be developed within Symfony in just one day.
Multi criteria queries on a cassandra applicationIppon
Β
You shouldn't normally do multi-criteria queries with Cassandra.
We will detail the technical challenges and limitations involved, and how we successfully implemented such a solution for one of our biggest clients, using Java 8 and the CQL 3 driver.
This session will also focus on the tools we used (JHipster), our Java application framework (Spring Boot), and the cluster configuration we set up.
Jerome Mainaud - Ippon Technologies
Jerome Mainaud is Java Software Architect at Ippon Technologies. It help its clients to create, deploy and run applications based on NoSQL Database and Search Indexes. He mainly works with Cassandra, Apache or DataStax flavor. Jerome is a certified DataStax Enterprise Solution Architect.
http://blog.ippon.fr/
Dr. Strangelove, or how I learned to love plugin developmentUlrich Krause
Β
Building a plugin for the Notes client is hard and you need to be a rocket scientist to write a simple menu extension. This is exactly, what I thought, when I first heard of plugin development. In this session, you will learn, how to setup an Eclipse environment, connect it to your Notes Client for debugging and testing, and finally deploy your plugin to your users. Become familiar with the basics, and you will no longer be scared.
NCDevCon 2017 - Cross Platform Mobile AppsJohn M. Wargo
Β
Building cross-platform mobile apps using open source tools. A manic paced session where I build the same app across 4 different open source mobile development frameworks.
Top 10 Dying Programming Languages in 2020 | EdurekaEdureka!
Β
YouTube Link: https://youtu.be/LSM7hD6GM4M
Get Edureka Certified in Trending Programming Languages: https://www.edureka.co
In this highly competitive IT industry, everyone wants to learn programming languages that will keep them ahead of the game. But knowing what to learn so you gain the most out of your knowledge is a whole other ball game. So, we at Edureka have prepared a list of Top 10 Dying Programming Languages 2020 that will help you to make the right choice for your career. Meanwhile, if you ever wondered about which languages are slated for continuing uptake and possible greatness, we have a list for that, too.
Follow us to never miss an update in the future.
YouTube: https://www.youtube.com/user/edurekaIN
Instagram: https://www.instagram.com/edureka_learning/
Facebook: https://www.facebook.com/edurekaIN/
Twitter: https://twitter.com/edurekain
LinkedIn: https://www.linkedin.com/company/edureka
Castbox: https://castbox.fm/networks/505?country=in
* Itβs a open source IDE.
* Latest version is NetBeans 7.0
* Following type of applications can be created:
>Desktop applications
>Enterprises applications
>Web applications &
>Mobile applications, etc.
Drupal 8 is now introducing more and more Symfony2 components into its architecture. This will make it possible to use Symfony2 paradigms when building custom modules in Drupal 8. But what if you want to go further and include a standard Drupal 8 inside a Symfony2 project? This presentation shows how to do it in a step-by-step approach and gives more generic advice on how to wrap php application inside a Symfony2 application.
Multi criteria queries on a cassandra applicationIppon
Β
You shouldn't normally do multi-criteria queries with Cassandra.
We will detail the technical challenges and limitations involved, and how we successfully implemented such a solution for one of our biggest clients, using Java 8 and the CQL 3 driver.
This session will also focus on the tools we used (JHipster), our Java application framework (Spring Boot), and the cluster configuration we set up.
Jerome Mainaud - Ippon Technologies
Jerome Mainaud is Java Software Architect at Ippon Technologies. It help its clients to create, deploy and run applications based on NoSQL Database and Search Indexes. He mainly works with Cassandra, Apache or DataStax flavor. Jerome is a certified DataStax Enterprise Solution Architect.
http://blog.ippon.fr/
Dr. Strangelove, or how I learned to love plugin developmentUlrich Krause
Β
Building a plugin for the Notes client is hard and you need to be a rocket scientist to write a simple menu extension. This is exactly, what I thought, when I first heard of plugin development. In this session, you will learn, how to setup an Eclipse environment, connect it to your Notes Client for debugging and testing, and finally deploy your plugin to your users. Become familiar with the basics, and you will no longer be scared.
NCDevCon 2017 - Cross Platform Mobile AppsJohn M. Wargo
Β
Building cross-platform mobile apps using open source tools. A manic paced session where I build the same app across 4 different open source mobile development frameworks.
Top 10 Dying Programming Languages in 2020 | EdurekaEdureka!
Β
YouTube Link: https://youtu.be/LSM7hD6GM4M
Get Edureka Certified in Trending Programming Languages: https://www.edureka.co
In this highly competitive IT industry, everyone wants to learn programming languages that will keep them ahead of the game. But knowing what to learn so you gain the most out of your knowledge is a whole other ball game. So, we at Edureka have prepared a list of Top 10 Dying Programming Languages 2020 that will help you to make the right choice for your career. Meanwhile, if you ever wondered about which languages are slated for continuing uptake and possible greatness, we have a list for that, too.
Follow us to never miss an update in the future.
YouTube: https://www.youtube.com/user/edurekaIN
Instagram: https://www.instagram.com/edureka_learning/
Facebook: https://www.facebook.com/edurekaIN/
Twitter: https://twitter.com/edurekain
LinkedIn: https://www.linkedin.com/company/edureka
Castbox: https://castbox.fm/networks/505?country=in
* Itβs a open source IDE.
* Latest version is NetBeans 7.0
* Following type of applications can be created:
>Desktop applications
>Enterprises applications
>Web applications &
>Mobile applications, etc.
Drupal 8 is now introducing more and more Symfony2 components into its architecture. This will make it possible to use Symfony2 paradigms when building custom modules in Drupal 8. But what if you want to go further and include a standard Drupal 8 inside a Symfony2 project? This presentation shows how to do it in a step-by-step approach and gives more generic advice on how to wrap php application inside a Symfony2 application.
Learn to leverage the power of server-side Javascript with this Node.js introductory tutorial. Weβll dive into Nodeβs architecture and understand the build and dependency management systems involved. Several modules for Node will be demoed, and weβll learn how to debug Node applications within an IDE. Youβll come away with an understanding of what sets Node apart from traditional Javascript, itβs inherently asynchronous and event-driven architecture, and take a look at some real world applications built on Node.
10 clues showing that you are doing OSGi in the wrong manner - Jerome Molieremfrancis
Β
This presentation aims to show common pitfalls in OSGi architecture and development and how to avoid them. It involves concrete use cases and their solutions. Antipatterns, bad designs , bad tooling will be presented during this session... This session is user oriented and aimed to give concrete feedbacks and good practices...
Html5, Native and Platform based Mobile ApplicationsYoss Cohen
Β
This presentation compares between different mobile applications techniques: Native, HTML5 and platform based (Flash, JavaFX, Silverlight) as well as review the level of support each alternative has for video.
This is a lightning presentation given by Sean Chung to our team to summarize a presentation he saw at JavaOne 2009. Sean also adds a slight spin to the original presentation by including Adobe Flex as an additional comparison axis.
Embedding Web UIs in your Eclipse applicationBoris Bokowski
Β
It is very common that Eclipse-based applications need a web UI for at least part of their functionality. Ideally, you would want to write your code once and deploy on the web and in Eclipse. How is this possible?
As part of the e4 project, we have explored how web UI components can be written isuch that they can be embedded in Eclipse as first-class views or editors. This tutorial will go into detail on what's involved when you want to embed web UI components in Eclipse.
Topics include: approaches for achieving code reuse, a deep dive on SWT's Browser control, details about how to communicate between Java and JavaScript, more advanced API for authentication, cookies etc.
3978 Why is Java so different... A Session for Cobol/PLI/Assembler Developersnick_garrod
Β
InterConnect 2015 Session 3978 Why is Java so different... A Session for Cobol/PLI/Assembler Developers. After giving sessions about Java in the past few years that tell System Programmers they should do Java on System z and that Java is just like every other language, this session tries to explain why Java is a bit different in Operating and Handling. Therefore this session tries to compare COBOL/PLI/Assembler with Java and how the Java technology works on System z: > Why can't you phase in a Java Program > How is a JIT working > Understand the Development Process of Java Applications > Debugging and Logging of Java Applications > and a lot more...
Learn to leverage the power of server-side Javascript with this Node.js introductory tutorial. Weβll dive into Nodeβs architecture and understand the build and dependency management systems involved. Several modules for Node will be demoed, and weβll learn how to debug Node applications within an IDE. Youβll come away with an understanding of what sets Node apart from traditional Javascript, itβs inherently asynchronous and event-driven architecture, and take a look at some real world applications built on Node.
10 clues showing that you are doing OSGi in the wrong manner - Jerome Molieremfrancis
Β
This presentation aims to show common pitfalls in OSGi architecture and development and how to avoid them. It involves concrete use cases and their solutions. Antipatterns, bad designs , bad tooling will be presented during this session... This session is user oriented and aimed to give concrete feedbacks and good practices...
Html5, Native and Platform based Mobile ApplicationsYoss Cohen
Β
This presentation compares between different mobile applications techniques: Native, HTML5 and platform based (Flash, JavaFX, Silverlight) as well as review the level of support each alternative has for video.
This is a lightning presentation given by Sean Chung to our team to summarize a presentation he saw at JavaOne 2009. Sean also adds a slight spin to the original presentation by including Adobe Flex as an additional comparison axis.
Embedding Web UIs in your Eclipse applicationBoris Bokowski
Β
It is very common that Eclipse-based applications need a web UI for at least part of their functionality. Ideally, you would want to write your code once and deploy on the web and in Eclipse. How is this possible?
As part of the e4 project, we have explored how web UI components can be written isuch that they can be embedded in Eclipse as first-class views or editors. This tutorial will go into detail on what's involved when you want to embed web UI components in Eclipse.
Topics include: approaches for achieving code reuse, a deep dive on SWT's Browser control, details about how to communicate between Java and JavaScript, more advanced API for authentication, cookies etc.
3978 Why is Java so different... A Session for Cobol/PLI/Assembler Developersnick_garrod
Β
InterConnect 2015 Session 3978 Why is Java so different... A Session for Cobol/PLI/Assembler Developers. After giving sessions about Java in the past few years that tell System Programmers they should do Java on System z and that Java is just like every other language, this session tries to explain why Java is a bit different in Operating and Handling. Therefore this session tries to compare COBOL/PLI/Assembler with Java and how the Java technology works on System z: > Why can't you phase in a Java Program > How is a JIT working > Understand the Development Process of Java Applications > Debugging and Logging of Java Applications > and a lot more...
Technical talk about DDD and some other solutions that we are using at Akamon that was given in La Salle University and was promoted by PHPBarcelona, a local programmer community.
Introduction to Akamon software arquitecture for MPWAREloi Poch
Β
Technical talk about the architecture used Akamon based on DDD, CQRS, TDD and BDD given as a teacher in a class in the master "High Performance Web Development" at Ramon Llull University.
There is also a GitHub repository to practice this technical solution: https://github.com/eloipoch/mpwar
Symfony2 components to the rescue of your PHP projectsXavier Lacot
Β
Symfony2 components can be of a great help when trying to improve the level of existing PHP projects. This presentation explains how PHP and its ecosystem evolved during the last 10 years, and focuses on the successive use of several Symfony2 components, to show how useful they are for the PHP developer.
The presentation gives some migration strategies, and explains component by component the migration plan and the (possible) implications on the historical code.
An overview of Domino 8.5 XPages, the new RAD (rapid application development) environment for developing Domino web applications. This covers what is XPages, XPages Basics, XPages Advanced Development, and XPages futures. This session was given by Philippe Riand of IBM and John Head of PSC Group, LLC.
Dynamic Languages In The Enterprise (4developers march 2009)Ivo Jansch
Β
Slightly more generic version of my 'Enterprise PHP' talk, adjusted for the 4developers conference's 'dedicated languages' track that features developers with different backgrounds.
Electronic Publishing 2.0: Reimagining the Publication and Preservation of E ...Leonardo Flores
Β
This is my presentation slideshow for the First International Conference on Electronic Literature and Virtual Art (ELVA), presented on October 4, 2012.
Slides from a workshop I did at General Assembly. Geared toward non-designers at the idea/prototype stage seeking to build a good early product quickly.
20 Practical tips for a successful internationalisation projectecomplexx
Β
Short presentation about success factors for international website projects. Held first during RedDot User Conference London May 2009 by Paul Smith, ecomplexx UK.
EMC World 2016 - cnaITL.01 Adopting An Open Source Strategy{code}
Β
Open source technologies increase the speed of product delivery in today's digital world. The benefits open source provides can be realized through greater flexibility, lower costs and leverage for integration and support through a large eco-system. In this session, you will gain an understanding of how to be build an open source strategy to complement the adoption of application frameworks (Spring), PaaS (CF), and Containers/Schedulers (Docker, Mesos, Kubernetes) that enable businesses to quickly drive product offerings to the market.
Introduction to Buildpacks.io PresentationKnoldus Inc.
Β
Buildpacks is an open-source technology that provides a platform-independent way to build and package applications. They automate the process of transforming source code into a runnable container image. Buildpacks analyze the application source code, detect the language and dependencies, and then create a container image that includes all the necessary components.
This presentation will overview the basic capabilities of four types of software and provides examples that showcase multimedia capabilities.
β’ Jing
β’ Adobe Presenter
β’ Adobe Captivate 5
β’ Adobe Acrobat X
Similar to Symfony Day 2009 - Symfony vs Integrating products (20)
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Β
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Le nuove frontiere dell'AI nell'RPA con UiPath Autopilotβ’UiPathCommunity
Β
In questo evento online gratuito, organizzato dalla Community Italiana di UiPath, potrai esplorare le nuove funzionalitΓ di Autopilot, il tool che integra l'Intelligenza Artificiale nei processi di sviluppo e utilizzo delle Automazioni.
π Vedremo insieme alcuni esempi dell'utilizzo di Autopilot in diversi tool della Suite UiPath:
Autopilot per Studio Web
Autopilot per Studio
Autopilot per Apps
Clipboard AI
GenAI applicata alla Document Understanding
π¨βπ«π¨βπ» Speakers:
Stefano Negro, UiPath MVPx3, RPA Tech Lead @ BSP Consultant
Flavio Martinelli, UiPath MVP 2023, Technical Account Manager @UiPath
Andrei Tasca, RPA Solutions Team Lead @NTT Data
State of ICS and IoT Cyber Threat Landscape Report 2024 previewPrayukth K V
Β
The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development.
The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers:
State of global ICS asset and network exposure
Sectoral targets and attacks as well as the cost of ransom
Global APT activity, AI usage, actor and tactic profiles, and implications
Rise in volumes of AI-powered cyberattacks
Major cyber events in 2024
Malware and malicious payload trends
Cyberattack types and targets
Vulnerability exploit attempts on CVEs
Attacks on counties β USA
Expansion of bot farms β how, where, and why
In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East
Why are attacks on smart factories rising?
Cyber risk predictions
Axis of attacks β Europe
Systemic attacks in the Middle East
Download the full report from here:
https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/
A tale of scale & speed: How the US Navy is enabling software delivery from l...sonjaschweigert1
Β
Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navyβs DevSecOps platform, Party Barge, has achieved:
- Reduction in onboarding time from 5 weeks to 1 day
- Improved developer experience and productivity through actionable findings and reduction of false positives
- Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO)
Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production.
We will cover:
- How to remove silos in DevSecOps
- How to build efficient development pipeline roles and component templates
- How to deliver security artifacts that matter for ATOβs (SBOMs, vulnerability reports, and policy evidence)
- How to streamline operations with automated policy checks on container images
SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdfPeter Spielvogel
Β
Building better applications for business users with SAP Fiori.
β’ What is SAP Fiori and why it matters to you
β’ How a better user experience drives measurable business benefits
β’ How to get started with SAP Fiori today
β’ How SAP Fiori elements accelerates application development
β’ How SAP Build Code includes SAP Fiori tools and other generative artificial intelligence capabilities
β’ How SAP Fiori paves the way for using AI in SAP apps
Accelerate your Kubernetes clusters with Varnish CachingThijs Feryn
Β
A presentation about the usage and availability of Varnish on Kubernetes. This talk explores the capabilities of Varnish caching and shows how to use the Varnish Helm chart to deploy it to Kubernetes.
This presentation was delivered at K8SUG Singapore. See https://feryn.eu/presentations/accelerate-your-kubernetes-clusters-with-varnish-caching-k8sug-singapore-28-2024 for more details.
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...DanBrown980551
Β
Do you want to learn how to model and simulate an electrical network from scratch in under an hour?
Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)!
During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook.
PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides:
- A fully editable and extendable library for grid component modelling;
- Visualization tools to display your network;
- Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses;
The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well.
What you will learn during the webinar:
- For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills;
- For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...James Anderson
Β
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
UiPath Test Automation using UiPath Test Suite series, part 4DianaGray10
Β
Welcome to UiPath Test Automation using UiPath Test Suite series part 4. In this session, we will cover Test Manager overview along with SAP heatmap.
The UiPath Test Manager overview with SAP heatmap webinar offers a concise yet comprehensive exploration of the role of a Test Manager within SAP environments, coupled with the utilization of heatmaps for effective testing strategies.
Participants will gain insights into the responsibilities, challenges, and best practices associated with test management in SAP projects. Additionally, the webinar delves into the significance of heatmaps as a visual aid for identifying testing priorities, areas of risk, and resource allocation within SAP landscapes. Through this session, attendees can expect to enhance their understanding of test management principles while learning practical approaches to optimize testing processes in SAP environments using heatmap visualization techniques
What will you get from this session?
1. Insights into SAP testing best practices
2. Heatmap utilization for testing
3. Optimization of testing processes
4. Demo
Topics covered:
Execution from the test manager
Orchestrator execution result
Defect reporting
SAP heatmap example with demo
Speaker:
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Generative AI Deep Dive: Advancing from Proof of Concept to ProductionAggregage
Β
Join Maher Hanafi, VP of Engineering at Betterworks, in this new session where he'll share a practical framework to transform Gen AI prototypes into impactful products! He'll delve into the complexities of data collection and management, model selection and optimization, and ensuring security, scalability, and responsible use.
Welcome to the first live UiPath Community Day Dubai! Join us for this unique occasion to meet our local and global UiPath Community and leaders. You will get a full view of the MEA region's automation landscape and the AI Powered automation technology capabilities of UiPath. Also, hosted by our local partners Marc Ellis, you will enjoy a half-day packed with industry insights and automation peers networking.
π Curious on our agenda? Wait no more!
10:00 Welcome note - UiPath Community in Dubai
Lovely Sinha, UiPath Community Chapter Leader, UiPath MVPx3, Hyper-automation Consultant, First Abu Dhabi Bank
10:20 A UiPath cross-region MEA overview
Ashraf El Zarka, VP and Managing Director MEA, UiPath
10:35: Customer Success Journey
Deepthi Deepak, Head of Intelligent Automation CoE, First Abu Dhabi Bank
11:15 The UiPath approach to GenAI with our three principles: improve accuracy, supercharge productivity, and automate more
Boris Krumrey, Global VP, Automation Innovation, UiPath
12:15 To discover how Marc Ellis leverages tech-driven solutions in recruitment and managed services.
Brendan Lingam, Director of Sales and Business Development, Marc Ellis
Removing Uninteresting Bytes in Software FuzzingAftab Hussain
Β
Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process.
In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds.
- These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
Β
Symfony Day 2009 - Symfony vs Integrating products
1. Symfony vs. Integrating products
when to use a framework
Xavier Lacot β Clever Age
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot
2. Who I am
ξ
Symfony developer since end 2005
ξ
Several contributions (plugins, docs, patches, etc.)
ξ
Manager of the PHP Business Unit of Clever Age
ξ
Clever Age - http://clever-age.com/
ξ
Based in Paris, Bordeaux and Lyon, ~70 people
ξ
Technical architecture expertise
ξ
Development,
ξ
Consulting / training / etc.
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 2
3. Contents
ξ
A (web) developer's life ?
ξ
The choice of a technical architecture
ξ
A practical sight on CMS and framework's code
ξ Howto...
ξ
Integrate Symfony within other products
ξ
A CMS with Symfony in less than one day
ξ Publication time : cleverMediaLibrary
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 3
4. A (web) developer's life
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot
http://www.flickr.com/photos/nathonline/918128338
4
5. A developer's life
ξ Web projects cover a large panel
ξ
Content management
ξ
Social networks
ξ
Customer Relation Management
ξ
Communication
ξ
Collaborative
ξ
File sharing
ξ
Specific applications
ξ In almost every web project, a developer will
loose some hair
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 5
6. A developer's life
ξ
Wide range of difficulty
ξ
5 days of html integration for a small Β« webpage Β»
ξ
β¦ 1000+ development days using a framework for a social/2.0
platform
ξ
Often, the right solution does not exist !
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 6
7. A developer's life
ξ
The developer has the choice between a lot
of tools
ξ
Frameworks
ξ
Integrated (open source) products
ξ
The bad : Integrated (closed-source) products
ξ
The worse : closed-source frameworks
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 7
8. A practical sight on products and framework's code
ξ
What do I mean with « products » ?
ξ
CMS, forums, CRM tools, blogs, photo gallery, etc.
ξ
Not designed as development platforms, but as usable tools
ξ
Usually only available as packages archives (zip, tar.gz)
ξ
Not based on a framework
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 8
9. A practical sight on products and framework's code
ξ
...and with « frameworks » ?
ξ
Not Β« functionalities-oriented Β»
ξ
Created as a development platform
ξ
DIY β do it yourself
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 9
10. β¦ for instance, Symfony
Symfony, a « full options » framework
cli
mvc
ajax
crud
cache
events
routing
+600 plugins
performance
documentation
admin generator
internationalization
unit and functional tests
ORMs (Propel or Doctrine)
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 10
11. The choice of a technical architecture
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 11
12. The choice of a technical architecture
Several considerations
ξ
Complexity of the project (workload, features,
scalability)
ξ
Development methodology
ξ
Is there a lot of personnalisation ?
ξ
Adding functions
ξ
Removing functions
ξ
Do plugins/extensions exist, that cover the
requirements ?
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 12
13. Integrating products
ξ
Integrating products is a good idea
ξ
It may save time, money, and pressure
ξ
It may help building a better application
ξ
At least the client will get the product's feature set
ξ
Don't always re-invent the wheel !
ξ
Perfect solutions for common needs
β¦ the hell is that client rarely have common needs !
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 13
14. Integrating products
Possible options :
ξ
Change some code :
ξ
issues with future upgrades
ξ
Change code + submit ticket :
ξ
lot more work (contributions needs to be clean)
ξ
Not sure it is accepted
ξ
Create extensions when possible
ξ
These products are not designed for developing !
ξ
Drop the product and code yourself
ξ
Clearly define the project
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 14
15. Β«CMS are good to make simple websites that are
mainly meant to be looked at, while frameworks
are good to make complex websites that are
meant to be interacted withΒ Β»
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 15
16. The choice of a technical architecture
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 16
17. The choice of a technical architecture
ξ
Magento Commerce is a sort of success story
ξ
Based on Zend Framework
ξ
Overhealmed OS Commerce in 2 years
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 17
18. The choice of a technical architecture
ξ
Gold rules
ξ
Think simple β not a overload of useless functions
ξ
Backend must be easy to use
ξ
WYSIWYG editor
ξ
Adapted widgets
ξ
Follow standards β never hack up
ξ
Documentation !
ξ
Open the development : search contributors
ξ
Release often
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 18
19. The choice of a technical architecture
ξ
The equation is simple :
Time to hack vs. Time to build
ξ
What do you prefer in your life ?
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 19
20. A practical sight on products and framework's code
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 20
21. A practical sight on products and framework's code
ξ
The quality largely varies
ξ
Security
ξ
A common design pattern (MVC ?)
ξ
Portability (database, etc.)
ξ
ORM
ξ
Developer tools / Technical documentation
ξ
Performance
ξ
API
ξ
Object-oriented
ξ
Standards compliance
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 21
22. For instance : Drupal architecture
request
Drupal core
Modules hooks
hook()
Theme engine
Theme engine (*.tpl.php)
Symfony Day β 4. Juni 2009
response
Clever Age | Xavier Lacot 22
23. For instance : some Drupal facts
ξ
Forms validation β¦ w00t
if (!empty($form_values['departing']) && ( $departing < $date )) {
form_set_error('departing', t('The departing date isn't valid.'));
}
ξ
We love documentation...
function node_form_submit($form_id, $form_values) {
global $user;
...
ξ
β¦ and also SQL queries !
db_query('DELETE FROM {node} WHERE nid = %d', $node->nid);
db_query('DELETE FROM {node_revisions} WHERE nid = %d', $node->nid);
ξ
~70 000 lines of PHP code, ~75 files only...
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 23
24. A practical sight on products and framework's code
ξ
Overall criticism :
ξ
Poorly (well, not) OO
ξ
No MVC, Modules are a mess
ξ
No native developer tool, core code is not
commented
ξ
No ORM. The Β« database layer Β» main usage is to
map Β« drupal_query() Β» to db specific functions
ξ
Forms management is archaiq
ξ
Writing modules might turn into a nightmare β 5000
lines+ of code in a single file, etc.
ξ
From a purely technical point of view : #FAIL
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 24
25. A practical sight on products and framework's code
ξ
Positive points:
ξ
It works out of the box
ξ
If there are very few customizations to do, then it is
the prfect solution (no development at all)
ξ
There is a huge community
ξ
Lots of contributions
ξ
/! mot of them are unusable !!!
ξ
The Β« client effect Β» always works
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 25
26. So how to take profit out of both ?
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 26
27. How to integrate Symfony with other products
ξ
Consider the following context
ξ
Very large company
ξ
Non-technical people
ξ
High content management requirements
ξ
A big part of the site is a custom development
ξ
We do not have a lot of days
...a common situation
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 27
28. How to integrate Symfony with other products
ξ
Facts:
ξ
Not possible to develop everything
ξ
Using the CMS as the development tool won't help
ξ => let's integrate Symfony ! Several ways:
ξ
Include-based integration
ξ
Several Apache mountpoints
ξ
XMPP-based communication
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 28
29. How to integrate Symfony with other products
Module A
Module B
Symfony
...
βcmsβ module
databases Drupal install
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 29
30. How to integrate Symfony with other products
ξ
routing.yml, last rule :
drupal:
url: /:uri
param: { module: cms, action: drupal }
requirements: { uri: ^(.)*$ }
ξ Cms module / executeDrupal() :
public function executeDrupal(sfWebRequest $request)
{
ob_start('drupal');
include(sfConfig::get('sf_root_dir').'/lib/drupal/index.php');
$this->return = ob_get_flush();
}
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 30
31. How to integrate Symfony with other products
ξ
Second solution, XMPP calls for db
synchronisation (huge work, but w00t):
XMPP server
Drupal install Symfony
(Openfire)
Uses pubSub as data format
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 31
33. A minimal CMS
ξ
What is a minimal CMS ?
ξ
Backend
ξ
Users management,
ξ
Possibility to create pages at certain urls
ξ
Posibiliy to put content in these pages
ξ
Media management
ξ
Frontend
ξ
Ability to display informations
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 33
34. A minimal CMS
ξ
Backend components
ξ
sfDoctrineGuardPlugin
ξ
cleverMediaLibraryPlugin
ξ
some tables for the model:
content:
id:
displayed_author: varchar(150)
title: varchar(255)
body: longvarchar
created_at: timestamp
created_by: { type: integer, foreignTable: sf_guard_user, foreignReference: id }
publication_status: varchar(20)
published_at: timestamp
published_by: { type: integer, foreignTable: sf_guard_user, foreignReference: id }
updated_at: timestamp
updated_by: { type: integer, foreignTable: sf_guard_user, foreignReference: id }
meta_description: longvarchar
meta_keywords: longvarchar
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 34
35. A minimal CMS : frontend highlights
ξ
« catch-all » routing rule in routing.yml
# for html pages
cms:
url: /:uri.html
param: { module: cms, action: view }
requirements: { uri: ^(.)*$ }
# for all other defined url
cms_garbage:
url: /:uri
param: { module: cms, action: view }
requirements: { uri: ^(.)*$ }
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 35
36. Publication time : cleverMediaLibraryPlugin
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 36
37. Objectifs
ξ
An enterprise solution for managing media
ξ
Supports a large number of file formats
ξ
Images, videos
ξ
Documents
ξ
etc.
ξ
Storage abstraction
ξ
Media management API
ξ
Metadata support
ξ
Search (tags + index), credentials
ξ
Performance
Symfony Day β 4. Juni 2009
Clever Age | Xavier Lacot 37