http://digital.library.wisc.edu/1793/34920 http://digital.library.wisc.edu/1793/34240 Extensive analysis of the software security vunerabilities that exist within the Java software execution environment (Master of Software Engineering) Marouf, Said M. Software applications and systems are the backbone of most services in our lives, which makes software security a critical concern to users and organizations. Achieving the maximum level of security is crucial when developing software applications. To achieve such security, software developers must be aware of the potential security vulnerabilities within the software programming languages they use. Many programming languages suffer from major security vulnerabilities such as C and C++, which are known for buffer overflow vulnerabilities. Java on the other hand is known for its immunity against such traditional security vulnerabilities. Even though Java provides a higher level of security than other programming languages, it still suffers from potential security vulnerabilities. This document illustrates some of the potential security vulnerabilities within the Java software execution environment. Security vulnerabilities are illustrated through sample code and discussions. The document also proposes mitigations for the corresponding security vulnerabilities. Mon, 29 Oct 2007 22:58:59 GMT http://digital.library.wisc.edu/1793/34226 Tool for the automation of membership services and equipment management (Master of Software Engineering) Thean, Looi Kim. The Recreational Sport Department at the University of Wisconsin La Crosse wanted a software tool to help manage membership services, track equipment, check in and check out equipment, monitor locker assignment, and finally analyze each equipment's usage. Currently, the Recreational Sport Department is using a manual process and paper documents to keep track of all the above mentioned activities. This manuscript addresses the development of a software tool to assist the Recreational Sports Department. The tool consists of four major components: (1) Membership registration, (2) Equipment inventory management, (3) Equipment check in and check out processes, and (4) Receipt and report generation. The Membership Registration component consists of addition, modification and deletion of membership; in addition, it also includes locker assignment and cost calculation processes. Equipment inventory management consists of addition, modification and deletion of individual equipment. An added side component of equipment inventory management allows the users to group a list of desired equipment and create a team equipment group to be checked out later. Equipment check out and check in processes shall have an intuitive GUI to make the activities easy to use. A user will be able to print the membership receipt at any time. In addition, users will also be able to generate any report on usage of equipment with a variety of information. Mon, 29 Oct 2007 22:58:59 GMT http://digital.library.wisc.edu/1793/34224 Adding MRP/DRP functionality to Microsoft Navision (Master of Software Engineering) Lo, Tou Estimating the correct materials to order for the production of finished goods has been a daunting task for many manufacturing industries. Questions such as 'what materials are needed', 'how much of each material is needed', and 'when it is needed' have been a challenge that each industry has to deal with. This is where Materials Requirements Planning (MRP) can come in handy. MRP is a system developed to handle the ordering and scheduling of inventories, such as raw materials and subcomponents, which will be used in the production of finished goods [1]. A MRP system is intended to simultaneously meet three objectives: (1) to ensure that materials and products are available for production and delivery to customers (what is needed), (2) to maintain the lowest possible level of inventory (how much is needed), and (3) to plan manufacturing activities, delivery schedules and purchasing activities (when is it needed) [1]. For industries that have multiple locations, Distribution Requirements Planning (DRP) is another handy tool. DRP is an extension of MRP. In the calculation of MRP, it takes into consideration unused raw materials and subcomponents from different locations within the industry. Raw materials and/or subcomponents are recommended to be transferred from one location to another to fill a need instead of ordering raw materials from suppliers. ORC Industries uses an Enterprise Resource Planning (ERP) system called Microsoft Navision. An ERP system is an integrated software solution used to manage an industry's resources (accounting, purchasing, inventory, etc.). Navision comes with stock MRP functionality but needs to be custom-tailored in order to meet the requirements of ORC Industries. It is therefore decided to develop a customized MRP/DRP system for ORC industries. This manuscript describes the development of the customized MRP/DRP system. It includes a forecasting module that attempts to predict the sales for a specified period, which will be used in the MRP/DRP calculation. Mon, 29 Oct 2007 22:58:59 GMT http://digital.library.wisc.edu/1793/34222 Web-based employment application & processing support system (Master of Software Engineering) Shakya, Sujan. Web-based Employment Application & Processing Support System (WEAPSS) is an online common platform for both applicants and departments/administration for the pool search vacancies. It will replace the traditional "paper application" process for part-time positions for instructional academic staff with a new employment jobsite and an online employment application tracking system. This web application will automates the entire hiring process, including the position requisition approval process, employment and application processing, affirmative action (recruitment profile) and personnel action processing. This manuscript, in particular describes development of the WEAPSS including the challenges, issues that arose during its development and what counter major were taken to deal with it. Mon, 29 Oct 2007 22:58:59 GMT http://digital.library.wisc.edu/1793/34220 Investigation of a C++ refactoring tool (Master of Software Engineering) Brubaker, Ryan. The practice of software refactoring has become a core issue in software engineering today. Continually improving the structure of a program, while preserving its observable behavior, extends the lifetime of a program and allows it to evolve to meet ever changing and increasingly demanding requirements. This manuscript describes a prototype for a tool, Automated Refactoring Tool (ART), which assists C++ developers in performing refactorings that improve the structure and readability of their code. The tool provides a C++ preprocessor along with a parser that generates a program database. The developer can then manipulate the program elements within the database to perform refactorings on the source code. The refactoring correctly updates the source code and preprocessing directives to reflect the developer's intentions and outputs the updated source code to disk. A simple GUI is provided that allows the developer to easily choose with program element to refactor. Mon, 29 Oct 2007 22:58:59 GMT http://digital.library.wisc.edu/1793/34218 Online student portfolio system (Master of Software Engineering) Reich, Steven E. Becoming a teacher is a lengthy process for students in Wisconsin. One major requirement for state certification is that students complete a portfolio relating to the ten standards set by the Wisconsin Department of Public Instruction. This document describes the development of a software system designed to assist students at the University of Wisconsin-La Crosse in maintaining these portfolios and allowing faculty members to easily view and comment on each student's files independent of face-to-face communication. The software is a web application to be run from a university server that was developed using JSP pages, a SQL server, and a file server. Also examined are several important decisions involving the structure and functionalities of the program as well as the communication between the developer and the customer over the course of development. Mon, 29 Oct 2007 22:58:59 GMT http://digital.library.wisc.edu/1793/34216 Financial aid data warehouse (Master of Software Engineering) Qian, Yi. Recently, the institutional research office has increasingly emphasized campus decision applications in which current and historical data is comprehesively analyzed and explored in order to support high-level decision making. Many characteristics of decision support queries make the current database system inadequate: The query clause required by institutional research office often contains many AND and OR conditions. Particularly OR conditions are poorly handled in the current school database systems. The institutional research office often needs to pose several related queries. Since there is no convenient way to express these commonly occuring families of queries, ITS has to write them as a collection of independent queries, which can be tedious. Further, the DBMS has no way to recognize and exploit optimization opportunities arising from excuting many related queries together. Because many of the analyses performed are recurrent and predictable. Data warehouse provides access to data for complex analysis, knowledge discovery and decision making. This report describes the development of financial aid data warehouse, especially the activities performed in each stages, data warehouse design and data dictionary, the challenges encountered, issues, current status of the project, limitation and possible improvement. Mon, 29 Oct 2007 22:58:59 GMT http://digital.library.wisc.edu/1793/34214 Tool support for the prevention of family violence system (Master of Software Engineering) Hundt, Jami. Family violence is very prevalent in the State of Wisconsin. Family violence is classified into two types of violence: domestic violence or sexual assault. The Prevention of Family Violence System (PFV) was first developed in 2000 by the PKSoftware Company. The system is currently used by ten different agencies throughout the State of Wisconsin to record family violence cases. After long-term use of this application, it was determined that the application needed a renovation. The purpose of this project is to reengineer the PFV system. The new system contains all current functionality as well as new enhancements as specified by the sponsor. In addition, the data for the system was converted from Microsoft Access databases to Microsoft SQL databases and normalized. Sun, 29 Oct 2006 22:58:59 GMT http://digital.library.wisc.edu/1793/34212 TripLogic: a demand-response dispatching system (Master of Software Engineering) Molstad, Phillip James. It is common in practice that many companies build complex and highly delicate business processes around their legacy (existing software) systems making it extremely difficult and costly to switch software systems or to change their business processes. Software re-engineering is an approach that takes legacy software that has become expensive to maintain or whose implementation is obsolete, and reconstructs it with current software technologies. The software re-engineering approach is important for recovering and reusing existing software assets, putting high software maintenance costs under control, and establishing a base for future software development. Top Hat, Inc. started developing its demand-response transportation software in 1994. Today, it is a vital part of their business. Unfortunately, it has become increasingly expensive to enhance its features and compete against their competitors. The design structure, code organization, and development platform of the legacy system make it difficult to debug, modify, and distribute to the end-user community. This report discusses the techniques and methodologies used to re-engineer Top Hat's demand-response transportation software. It also describes the benefits, challenges, and issues encountered while introducing good software development techniques, maintaining required functionality, and applying new technologies to the Top Hat's demand-response transportation software. Sun, 29 Oct 2006 22:58:59 GMT http://digital.library.wisc.edu/1793/34210 Project Manager 2007 (Master of Softwware Engineering) Tuzmen, Metin Every software employs certain level of project management system. Irrespective of the size of the team that builds the software, good project management skills and tools will always make developing the software easier, maintainable and within the proposed budget. However, when project management fails to perform the right tasks, the software development process results increasing costs, and serious problems, and fails in its promised value. This could even lead to the project being abandoned and resources being demoralized. Many tools have been developed to streamline project management. Some of them help project managers control project schedule, others do budget controls, and yet others allow addition of other components such as requirements management and/or code management. Project Management 2007 is a project which realizes the importance of project management, not just as a place to control a certain project, but as a place where software engineering activities can be managed and learned for better performance and refining these activities to fit the real world. Project Manager 2007 manages projects at an organizational level, where each project is defined in qualitative details based on the organization's structure and software engineering techniques. Project managers as well as other mid-high level managers can learn about their organization, software development capacities and can give direction to new initiatives to improve quality of the software. Project Manager 2007 addresses project management, organization management, resource management, risk management, skill management, document management, metrics management and requirements management. Sun, 29 Oct 2006 22:58:59 GMT http://digital.library.wisc.edu/1793/34207 Web application tool (Master of Software Engineering) Ghode, Aditi A. Web site development is a difficult endeavor due to the complexities of programming languages and maintenance cost, especially for those who do not have sufficient computer background. This project was to develop a tool that makes web site management more convenient for non-sophisticated users. With the help of this tool anyone can create web pages and manage a website with no technical expertise or knowledge of HTML. The specific purpose of the work was to make the web more accessible to the people who work for non-profit organization, to allow them to publish websites without knowledge of HTML tools and to broaden the base of their work on the web. The project started with the aim to develop an "Easy to Use - WYSIWYG" tool. This manuscript describes the development process for the tool including the activities performed in each phase of the development process, the challenges encountered, the issues that arose, the current status of the project, and its features with continuing work. An important part in the design of the GUI for this tool is that it be easily used by those familiar with Microsoft Word. Sun, 29 Oct 2006 22:58:59 GMT http://digital.library.wisc.edu/1793/22323 Intramural sport management system (Master of Software Engineering) Johnson, Christopher M. In today's world, software development can be complex and highly competitive. Several factors add to the complexity, particularly if the software has a web-based user interface and is a distributed application. In addition to the complexities involved during development, additional complexities arise in maintenance. For example, the software product may need to be modified to match with changing technology such as newer versions of operating systems and hardware. Software developers are thus forced to choose the right development approach while designing and implementing the software. This document describes the development of a web-based intramural sport management system. The product will be used by the Recreational Sports Department at the University of Wisconsin-La Crosse and hence has some features specific to the Recreational Sports Department. However, the product is easily extendible and modifiable in order to suit other sports management activities. This report describes the various activities in the life cycle of this software. It also includes the challenges faced during the development, the current status, and future work on the software. Wed, 28 Apr 2004 22:58:59 GMT http://digital.library.wisc.edu/1793/21448 Application to provide UNIX performance analysis, bottleneck determination and resolution (Master of Software Engineering) Speier, Guy Performance analysis is a critical, yet often overlooked part of System Administration. Not only is there a substantial amount of data to interpret, but the guidelines for determining a performance problem are often complex and can vary between different UNIX operating systems. This manuscript describes the development of FIREpower, an application that is able to analyze UNIX performance statistics. The tool provides a graphical representation of the data, reports potential bottlenecks on the machine, as well as dynamically creates scripts that will alter the machine configuration in an attempt to increase system performance. This tool is designed to run on any UNIX server and addresses operating system dependencies by way of an expert system. Fri, 29 Jul 2005 22:58:59 GMT http://digital.library.wisc.edu/1793/18757 Feature rules in TOPSS tm (Master of Software Engineering, unofficial) Ingalls, Linda Kay This document describes the development of a new data maintenance tool and the enhancement of a product selection tool at Trane, a subsidiary of American Standard Companies, in LaCrosse, Wisconsin. The product selection tool uses several business rule types that assist a salesman to configure a product. The enhancement adds two new rule types to the existing rule base. The data maintenance tool allows input and maintenance of the two new rule types along with supporting data elements which may be used independent of or in conjunction with the two new rule types. These data items are cached and used as input to the product selection tool. Mon, 28 Nov 2005 22:58:59 GMT http://digital.library.wisc.edu/1793/18755 A Web-based application to support the La Crosse Wellness project (Master of Software Engineering, unofficial) Than, Nhan V. The purpose of the La Crosse Wellness Project is to promote optimal wellness by focusing on health promotion as a process that is learned and ongoing. The La Crosse Wellness Project is comprised of two components: The La Crosse Wellness Inventory (LWI) for individual assessment purposes, and the Wellness Development Process (WDP) for the development of individualized plans of action. In this project, the LWI and WDP are developed as web-based applications which provide participants mobility, flexibility, convenience and data security. Moreover, security of personal information and extended database design are required to be investigated and implemented to provide a more secure transaction and meet the major requirements of this project. Tue, 28 Nov 2006 22:58:59 GMT