Recovering information from RIAs users access logs

Web应用程序，尤其是“富互联网应用程序”(RIA)，它们使用了先进的技术，如JavaScript、AJAX、HTML5等，在现代系统中所占的比例越来越大。如今，我们与计算机的大多数交互都涉及Web和Web应用程序。随着RIA变得对移动越来越友好，这种趋势将进一步发展。*尽管Web应用程序和RIA具有所有优势，但它们也臭名昭著地受到安全漏洞的困扰，这是一个需要尽快解决的问题。IBM等公司已经开发了一系列以使Web应用程序更安全为中心的产品和服务，现在正将重点转向RIA。然而，这些工具和服务目前在有效处理RIA方面的能力有限。*在本研究中，我们的目标是通过两种方式促进RIA的安全：首先，我们将挖掘应用程序的现有使用(HTTP)日志，以推断有关应用程序的一系列技术信息，然后使用这些信息自动配置安全扫描仪。这将允许自动检测RIA中的安全漏洞。第二，仍然使用HTTP日志，但从单个用户，我们将自动重建该用户会话，这一重建可供法医调查人员在报告安全事件后使用；从而显著提高调查的准确性，同时显著缩短执行调查所需的时间。**

Web applications, and in particular "Rich Internet Applications" (RIAs), which use advanced technologies such as JavaScript, AJAX, HTML5 etc., represent an increasingly large proportion of modern systems. Nowadays, most of the interactions we have with computers involve Web and Web applications. This tendency will increase moving forward as RIAs become increasingly mobile-friendly.****For all their advantages, Web applications and RIAs are also notoriously plagued with security vulnerabilities, a problem that needs to be resolved as soon as possible. Companies such as IBM have developed a series of products and services centered on making Web applications more secure, and are now shifting their focus toward RIAs. However, these tools and services are currently limited in their ability to handle RIAs efficiently.****In this research, we aim to contribute to RIAs security in two ways: first, we will mine existing usage (HTTP) logs of the application to infer a series of technical information about the application, and then use that information to automatically configure security scanners. This will allow the automatic detection of security vulnerabilities in RIAs. Second, still using HTTP logs but from a single user, we will automatically reconstruct that user session, a reconstruction that can be used by forensics investigators after a security incident has been reported; thus dramatically improving the accuracy of the investigation while significantly cutting down the time required to perform the investigation.**