TY - CHAP A1 - van Aerssen, Max A1 - Leich, Christian A1 - Schmidt, Holger A1 - Al Ali, Salar A1 - Benni, Abdulkader A1 - Tanz, Jakob T1 - CopypastaVulGuard - A browser extension to prevent copy and paste spreading of vulnerable source code in forum posts T2 - ARES '22: Proceedings of the 17th International Conference on Availability, Reliability and Security N2 - Forums such as Stack Overflow are used by many software developers to find a solution for a given coding problem. Found solutions, i.e. forum posts containing relevant source code, are utilized in a copy and paste manner. This behavior carries the risk that vulnerabilities contained in the source code of the forum posts are spread. Software developers should be able to identify vulnerable source code at an early stage, thereby preventing copying the corresponding source code. In this paper, we introduce the tool CopypastaVulGuard that identifies vulnerable source code in forum posts and allows software developers to omit the source code by marking the forum posts as dangerous. Our tool consists of a browser extension and a management application capable to address as examples SQL injections, remote code executions and deprecated functions based on a dump of the archive.org Stack Overflow data set. We present an evaluation of our tool's possible impact and relevance considering pros/cons and selected research questions. Y1 - 2022 U6 - https://doi.org/10.1145/3538969.3538973 SP - 1 EP - 8 PB - Association for Computing Machinery CY - New York ER - TY - GEN A1 - Mehlhorn, Nils T1 - Modern Cross-Platform Development for Mobile Applications N2 - While developing for multiple platforms at once seems like a convenient solution, there are several challenges arising when trying to abstract the entire mobile development. This paper is meant to evaluate current cross-platform development for mobile applications. The background for its necessity, its conceptual approach and the problems to face when developing cross-platform were determined and explained in detail. Afterwards, certain solutions were evaluated against the former insights. Based on the results, an informed discussion and conclusion was performed. The mobile environment consist of only two big players by now, Android and iOS. These operating systems differ in architecture, design and consequently in the way applications are developed for each of them. Therefore, high demands are made towards cross-platform solutions. Tools which allow for the creation of applications for multiple platforms at once have to match native applications in regard to user experience and performance. At the same time they need to be able to optimize developments with the goal of being cost efficient. Apache Cordova, Xamarin and NativeScript were selected for evaluation in regard to their ability to meet these requirements. Cordova acts as the comparison group of cross-platform tools. It is the big player in the field and there are reasons for this. However, aspiring solutions with higher nativity and ambitious approaches are emerging. Xamarin and NativeScript deliver top quality results while offering loosely coupled developments. Therefore it is possible to develop high quality applications and still benefit from the advantages of platform-independent solutions. As a consequence mobile development is about to change in the foreseeable future. More sophisticated approaches may lead to a higher number of developments done cross-platform, and rightfully so. KW - cross-plattform KW - mobile KW - Entwicklung KW - cross-platform KW - mobile KW - development KW - M Y1 - 2017 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:due62-opus-11276 CY - Düsseldorf ER - TY - RPRT A1 - Vogel, Peter T1 - Investing as Random Trial T2 - Trading N2 - We introduce an investment algorithm for a market of individual securities. The investment algorithm is derived from constraints depending on investment parameters in order to limit the risk and to take into account an individual investor. One constraint is devoted to trading costs. Purchased securities are selected randomly among securities that meet the buy condition, making trading a random trial. Simulations with historical price data are demonstrated for a simple example: The buy condition is evaluated on the basis of the price relationship for two subsequent trading days and the sales condition is defined by holding securities only for one day. A trading expert evaluates the expected return for the investment algorithm with respect to the random selection. Thus, the expert informs precisely on how many market players perform using the same investment algorithm. Its findings are for a parametrized set of buy conditions simultaneously, which makes a trading expert a valuable tool for theorists as well as for practitioners. In our example, the trading expert demonstrated clearly a significant mean reversion effect for a horizon of one day. T3 - Trading - 1 KW - investment constraints KW - investment algorithm KW - investing as random trial KW - trading expert KW - mean reversion Y1 - 2017 U6 - http://nbn-resolving.de/urn/resolver.pl?urn:nbn:de:hbz:due62-opus-11118 UR - https://opus4.kobv.de/opus4-hs-duesseldorf/1501 SN - 2567-2347 IS - 1 EP - 1 PB - Hochschule Düsseldorf CY - Düsseldorf ER -