An Overview of the Arcgis API for Flex

Total Page:16

File Type:pdf, Size:1020Kb

An Overview of the Arcgis API for Flex An Overview of the ArcGIS API for Flex Antony Jayaprakash Björn Svensson Agenda • Introduction to the Adobe Flex framework • Introduction to the ArcGIS API for Flex • Building your first applications with Flex API • We will answer questions at the end ArcGIS API for Flex • Released in October 2008 • Well Adopted Solar Boston • Community support • ESRI solutions – Business Analyst Online – GeoPortal toolkit – StatestatStatestat,, BroadbandStatBroadbandStat,, etc. District of North Vancouver Auckland Region Viewer ArcGIS A Complete Geographic Information System Use Serve ArcGIS Author Server ArcGIS Desktop . For Authoring, Serving & Using Geographic Knowledge ArcGIS Server Web API’s Flex JavaScript REST Silverlight Java web ADF SOAP ArcGIS Server .Net Web ADF Adobe Flex Framework Adobe Flash • Flash is everywhere • Evolved from annoying banner ads to Enterprise applications • Preferred environment for RIA Adobe Flash Platform & ArcGIS Rich Internet Applications Applications ArcGIS API for Flex Client Framework Flex MXML ActionScript Flash Player ActionScript Runtimes AIR MXML ActionScript JavaScript HTML, CSS Operating Systems Mac, Windows, Linux, etc Client JSON, SOAP, AMF, etc. HTTP, HTTPS, etc. Server ArcGIS Server Why Flex Framework? • Create applications that are, – Interactive, responsive – Easy to extend – Simple, yet powerful – CrossCross--platformplatform • Ric h se t of component s • IDE – Flash Builder – FlashDevelop – FDT – In te lliJ IDEA – Amethyst ((VisualVisual Studio plugin)plugin) • Stronggp developer community – http://www.adobe.com/devnet/flex ActionScript • Based on ECMAScript language specification • Similar in syntax to Java, C# • Object Oriented (extends, implements) • Garbage Collection • Type safe • Introspection ActionScript Data Types • Primitive types – Boolean, int, Null, Number, String, uint, void • Complex types – Object, Array, Date, Error, function, RegExp, XML, XMLList MXML • ActionScript in XML format • Mostly for UI Component / Layout • mxmlc compiler converts MXML to ActionScript • MXML attributes – property – style – event handlers <?xml version="1.0" encoding="utf-8"?> <mx:Button xmlns:mx="http://www. adobe. com/2006/mxml" label="Hello" color="0xFF0000" clic k= "trace ('c lic k')"/k')"/> MXML to ActionScript • MXML <esri:Map id=“map” alpha=“0.5” > <esri:ArcGISTiledMapServiceLayer id=“tiledLyr” url=“http://arcgisserver/mapservice/Parcels”/> </esri:Map> • ActionScript var map : Map = new Map(); map.alpha = 0.5; var tiledLyr:ArcGISTiledMapServiceLayer = new ArcGISTiledMapServiceLayer(); tiledLyr.url = http://arcgisserver/mapservice/Parcels; Map.addLayer(tiledLyr); Life cycle of a Flex Application Development MXML ActionScript SWF Deployment Web Server Browser SWF System Requirements • Required – Flex SDK 4.0 – Flash Player 10.0 – IDE (Flash Builder 4) • Optional – Flash Catalyst – Adobe Creative Suite ArcGIS API for Flex Map • Main component of the Flex API. • Mouse & keyboard navigation. • Scale bar, pan arrows, cross hair, rubberband can be styled. • Spatial reference & scale levels – determined by the first visible layer – or can be set explicitly Layers • Tiled (cached) • Created dynamically: – Dynamic – Image Service – ArcIMS • ClientClient--sideside features: – Graphics Layer – Feature Layer • Custom layers ArcGIS Tiled Layer • Used as base maps • tileInfo: Information on the tiling scheme • Multiple tiled layers in a map: – Same spatial reference required – Different tiling schemes allowed (scale levels, image format et)tc). – Layers only display at created scale levels Demo – First application • Getting Started – Resource Center • Our first application • Flash Builder 4 ArcGIS Dynamic Layer • Server generates images on the fly • Limit dynamic layers to frequently changing data • “disableClientCaching” prevents browser caching • Since 9.3.1 – optimized map services Demo – Service Directory • Service Directory – tiled and dynamic services ImageService Layer • ReadRead--onlyonly access to a mosaicked collection of images or a raster data set • New in 10: RasterFunction • Service Properties such as: – Service description – Service name – Description – Extent – Pixel sizes – Band counts ArcIMS Layer • All versions of ArcIMS services are supported • Requirements: – crossdomain. xml file on the ArcIMS server or use a proxy page. – ArcIMS service needs to contain FEATURECOORDSYS and FILTERCOORDSYS id 's . Graphics Layer • Graphics are geometry + attributes + symbols • Draw query results as graphics layers • Rich symbolization – Points, Lines, Polygons – Pictures – TextSymbol, InfoSymbol • Event driven model – Mouse, keyboard • Native flex properties • alpha, visible, .. • New in 2.0: clustering FeatureLayer • New in 2.0 • Can be used for MapService • Extends GraphicsLayer – Selections – isEditable • Mode – Automatically caching upup--front,front, or as yypou pan and zoom Symbol • Graphics are rendered using symbols • Uses Flash graphics • The symbol of a graphic is determined by (in order of preference): – The graphic’s defined symbol – The renderer defined in the layer – The symbol defined in the layer – The default symbol defined by our API Renderers • SimpleRenderer • ClassBreaksRenderer – array of ClassBreakInfo • UniqueValueRenderer – array of UniqueValueInfo – New in 2.0: support for multiple attributes • New 2.0: TemporalRenderer – any renderer, plus aging and grouping by track Demo • FeatureLayer – connecting to one MapService layer – instead of QQyuery + GGpraphicsLay er – class breaks renderer – FB: FeatureLayerBasedOnMapServerLayer Tasks Classes and methods for common GIS tasks • Query • Locate addresses • Search attributes • Identify features • Geoprocessing • Routing Query Task • Returns a set of features • Set criteria with “where” • Filter returned fields • Set spatial relationship (e.g. “intersects”) • Applied on one layer at a time • Searches are case sensitive • New in 2.0: – reltdlated record s – Objectids – StandStand--alonealone tables Identify Task • Executed in response to user interaction • Works on multiple layers in one request. • Can specify the layers to search • Cannot specify the fields to return Find Task • Specify which fields in the layer(s) to search for. • Works on multiple layers in one request. • Case sensitive search by default, unless contains is true (which will be much slower) • Cannot specify the fields to return Summary: Identify vs. Query vs. Find • Find – searches attributes based on a string literal (“searchText(“searchText”)”) – works on a service ((pspecific lay ers can be sp ecified) • Identify – works on a service (specific layers can be specified) – can query a subset of(f layers (all, top, visible ) – is typically used for selecting a feature and returning its attributes • Query – works on one layer – has spatial relationship filtering capabilities (i .e . “intersects” ) – can filter based on geometry, WHERE clause or search text. Demo • Query: – FeatureSet has Graphics. – Graphics have geometries, attributes and symbols. – Attributes in DataGrid • Query Related Records – objectIDs – relationships Locator Task • Finds matching locations to an address • Finds matching address to a location • New in 2. 0: output spatial reference Useful Geoprocessing Task • Input parameters determined by the GP service • Execute = synchronous • SubmitJob = asynchronous • Use a status callback function for checking the progress of a job Geometry Service • A processing and algorithmic resource • Supports operations related to geometries • Project • Areas and lengths • Buffer • Label points • Lengths • RlRelat ion • Simplify • New in 2. 0: Lots for editing Demo • Chaining tasks: – Buffer with GeometryService – GGpeoprocessing Network Analyst • Routing • Closest Facility • Service Area Demo – Network Analyst • Closest Facility • Service Area Time • TimeTime--awareaware layers • Time Slider • Temporal Renderer – observationRenderer – latestObservationRenderer – trackRenderer – observationAger Demo Time • Temporal Renderer Editing • FeatureService • Feature Templates • EditTool • Components – TemplatePicker – AttributeInspector – AttachmentInspector – Editor Demo Editing • Service Directory • Samples – EditTool – AttributeInspector – Editor – “Working with” sample Demo – Localization and DrawTips • DrawTool with DrawTips New REST features in ArcGIS Server 10 • Editing (FeatureService) • TimeTime--awareaware layers • Stand-alone tables • Related records • Features with attachments • AMF (faster queries) • More GeometryService operations • Networ k Ana lyst: c losest fac ility and servi ce area • Layer Definitions for Identify & Find • Geocode service: outSR • wkt – spatial reference wellwell--knownknown text • Image Server: mosaicRulemosaicRule,, download raster, identify New features in ArcGIS API for Flex 2. 0 • Everything on last slide ☺ • FeatureLayer – Selections – Editable layers • Editing: – EditTool, Editor, TemplatePicker, AttributeInspector, AttachmentInspector • TimeSlider • Clustering • Localization Deployment Deployment • Project properties – Flash pl ayer versi on – Turn off “enable integration with browser navigation” – Use Runtime Shared Library (RSL) • Release build – Default build is debug • UseUfldUR output folder URL • Cross domain access – crossdomain.xml – proxy page Looking ahead • ArcGIS API for Flex 2.0 – Public Beta in April – CCpompatible with Flex 4 and Flash Builder 4 Summary • Today we covered – UUgnderstanding Adobe Flex framework – Introduction to ArcGIS API for Flex – Writing your first few applications Still have questions?
Recommended publications
  • Flex and Object-Oriented Programming
    06_287644-ch01.qxp 6/23/08 11:28 PM Page 3 About Flex 3 lex 3 is the most recent version of a platform for developing and deploying software applications that run on top of the Adobe Flash IN THIS CHAPTER FPlayer. While such tools have existed for many years, the most recent Understanding the fundamentals toolkit from Adobe Systems allows programmers with object-oriented back- of Flex grounds to become productive very quickly using the skills they already have learned in other programming languages and platforms. Getting to know Flex applications Since the release of Flex 2, the Flex development environment has encour- aged a development workflow similar to that used in other desktop develop- Developing in Flex versus Flash ment environments such as Visual Studio, Delphi, and JBuilder. The Using Flex with object-oriented developer writes source code and compiles an application locally and then programming uploads the finished application to a Web server for access by the user. That isn’t how Flex started, however. Understanding the Flash Player Flex was originally released by Macromedia as a server-based application Learning the history of the Flash deployment and hosting platform. In the early versions of the Flex product Player line, an MXML/ActionScript compiler was included in a Java-based Web Making the most of Flex 3 application hosted on a Java 2 Enterprise Edition (J2EE) server. Application development tools source code was stored on the server. When a user made a request to the server, the application was compiled “on request” and delivered to the user’s Getting help browser, and hosted by the FlashCOPYRIGHTED Player.
    [Show full text]
  • Flash®, Flex®, and Air® Development for Mobile Devices
    ffirs.indd ii 12/09/11 7:52 PM BEGINNING FLASH®, FLEX®, AND AIR® DEVELOPMENT FOR MOBILE DEVICES INTRODUCTION . xxi CHAPTER 1 An Introduction to Flash, Flex, and AIR . .1 CHAPTER 2 Getting Started . 35 CHAPTER 3 Building AIR Applications for Android, BlackBerry, and iOS Devices . 67 CHAPTER 4 Touch, Multitouch, and Gestures . .101 CHAPTER 5 Developing for Multiple Screen Sizes . 131 CHAPTER 6 Debugging Applications . .177 CHAPTER 7 Working with the Filesystem . 199 CHAPTER 8 Working with Data . 239 CHAPTER 9 Working with Audio and Video . 289 CHAPTER 10 Utilizing Device Features . 315 INDEX . 359 ffirs.indd i 12/09/11 7:52 PM ffirs.indd ii 12/09/11 7:52 PM BEGINNING Flash®, Flex®, and AIR® Development for Mobile Devices ffirs.indd iii 12/09/11 7:52 PM ffirs.indd iv 12/09/11 7:52 PM BEGINNING Flash®, Flex®, and AIR® Development for Mobile Devices Jermaine G. Anderson John Wiley & Sons, Inc. ffirs.indd v 12/09/11 7:52 PM Beginning Flash®, Flex®, and AIR® Development for Mobile Devices Published by John Wiley & Sons, Inc. 10475 Crosspoint Boulevard Indianapolis, IN 46256 www.wiley.com Copyright © 2012 by John Wiley & Sons, Inc., Indianapolis, Indiana Published simultaneously in Canada ISBN: 978-0-470-94815-6 ISBN: 978-1-118-19334-1 (ebk) ISBN: 978-1-118-19335-8 (ebk) ISBN: 978-1-118-19336-5 (ebk) Manufactured in the United States of America 10 9 8 7 6 5 4 3 2 1 No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600.
    [Show full text]
  • Flex Resources*
    OpenStax-CNX module: m34542 1 Flex Resources* R.G. (Dick) Baldwin This work is produced by OpenStax-CNX and licensed under the Creative Commons Attribution License 3.0 Abstract The purpose of this document is to provide a list of links to online Flex and ActionScript resources to supplement the other lessons in the series. 1 Table of Contents • Preface (p. 1) • Resources (p. 1) • Miscellaneous (p. 3) 2 Preface This tutorial lesson is part of a series of lessons dedicated to programming using Adobe Flex. The purpose of this document is to provide a list of links to online Flex and ActionScript resources to supplement the other lessons in the series. note: The material in these lessons is based on Flex version 3 and Flex version 4. 3 Resources • Baldwin's Flex programming website 1 • Baldwin's ActionScript programming website 2 • Adobe Flex Home 3 • Download free open-source Adobe Flex 3.5 SDK 4 · Adobe Flex SDK Installation and Release Notes 5 · Application Deployment 6 • Download free open-source Adobe Flex 4 SDK 7 *Version 1.2: Jun 8, 2010 3:07 pm -0500 http://creativecommons.org/licenses/by/3.0/ 1http://www.dickbaldwin.com/tocFlex.htm 2http://www.dickbaldwin.com/tocActionScript.htm 3http://www.adobe.com/products/ex/?promoid=BPDEQ 4http://www.adobe.com/cfusion/entitlement/index.cfm?e=ex3sdk 5http://www.adobe.com/support/documentation/en/ex/3/releasenotes_ex3_sdk.html#installation 6http://livedocs.adobe.com/ex/3/html/help.html?content=Part3_deploy_1.html 7http://opensource.adobe.com/wiki/display/exsdk/Download+Flex+4 http://cnx.org/content/m34542/1.2/
    [Show full text]
  • Introduction to Flex and Air
    Introduction to Flex and Air CS174 Chris Pollett Nov. 24, 2008. Outline • Flash, Flex, and Adobe Air • Installation • Simple Program • Components Flash • Flash was originally a product to make it easy to produce vector based animations on the web created around 1996 based on technology purchased by Macromedia (now Adobe) from Futurewave. • Flash programs are typically executed by the Flash player plug-in which is (Sep 2008) available in some browser on 99% of desktops (Flash >7, for Flash 9 is 98%). • It is used to create Rich Internet Applications (RIA) and competes against AJAX, Silverlight (Windows), Applets (Java), etc. • It can also be used to do tracking (PIE -- Persistent Identification Elements -- not turned off as often as cookies) • It has the advantage over AJAX that as the plug-in is produced by one source, it runs the same in any browser. It also supports richer kinds of media like Video. (YouTube). Flex • The main authoring tool for Flash is Flash Professional, which is GUI IDE designed to make it easy to create Flash. • Flex is an Adobe product which gives a more programmatic way to create Flash files. • There is a Flex IDE, Flex Builder, which can also be used, however, the basic SDK is open sourced under the Mozilla License (can mix proprietary and open source code). • We will only look at the basic SDK which we will access mainly from the command line. • There are other open-source tool chains which can be used to create .swf files, notably, OpenLaszlo. Adobe Air • Air is a product released by Adobe in Feb, 2008 to make it easy to convert Flash programs into stand- alone applications.
    [Show full text]
  • Sample Chapter
    Sample Chapter Hello Flex 4 Peter Armstrong MANNING Hello! Flex 4 by Peter Armstrong Chapter 3 Copyright 2010 Manning Publications Brief contents 1GETTING STARTED 1 2ACTIONSCRIPT 3, XML, AND E4X 25 3HELLO SPARK: PRIMITIVES, COMPONENTS, FXG AND MXML GRAPHICS, AND EVEN VIDEO 50 4SPARK CONTAINERS, VIEW STATES, EFFECTS, AND STYLING 89 5HALO FLEX 4: USING DATAGRID, NAVIGATOR CONTAINERS, AND POPUPS 121 6BUILDING USER-FRIENDLY FORMS USING FLEX FORMATTERS AND VALIDATORS 136 7CAIRNGORM IN ACTION: SOCIALSTALKR (TWITTER + YAHOO! MAPS)157 3 Hello Spark: primitives, components, FXG and MXML graphics, and even video n this chapter, you’ll start learning Spark, which is the new set of components, containers, and I graphics primitives in Flex 4. This will be a “how- to” chapter: we’ll save diving into the Spark component model until the next chapter (which discusses view states, containers, CSS styling, and skinning). This chapter provides enough examples of using Spark that when it comes time to tackle the theory you’ll have plenty of examples in your head. In four of the five workshop sessions in this chap- ter, we’ll build a fairly small, self-contained Tes- ter.mxml app that has all the code in the example. In session 14, however, I’ll mix things up a little: we’ll build an “Only Connect” game (that bears strong resemblance to a certain trademarked game). We’ll start with a game board that I drew in Adobe Illustrator and saved as FXG. (I’m pro- viding the FXG file I created, so you don’t need to have Adobe Illustra- tor.) We’ll then build a fully functioning game based on this FXG, before 50 SESSION 11 Spark primitives 51 refactoring it and then adding logic for detecting victory.
    [Show full text]
  • Building Glancer
    Building RIAs with Flex & OL My Experiences Nirav Mehta RIA? What's RIA? Why RIA? Why Flash? Why not AJAX? What's OpenLaszlo? Flex? XML based languages / platforms for RIA development Flex – from Adobe / Macromedia OpenLaszlo – from Laszlo Inc – open source / GPL Glancer Friend Finder & Scheduler app Used in foss.in/2005 PF Admin Pressfile – award winning RIA PFAdmin – experiment with Flex 2 Tech Choices Cutting edge technology Flash vs Flex vs OpenLaszlo PHP vs Mono vs ColdFusion OpenLaszlo & Flex <canvas> <mx:application> XML Based, SWF output Eclipse connection Attributes, Events, Fundamentals Speed! Workflow LaszloIDE / FlexBuilder LZX / MXML SWF Solo / Server / FDS Glancer - WSDL Blues Mono / PHP Webservices WSDL Generation Security Glancer - Map Plotting Logic Trigonometry? x = r cos θ, y = r sin θ Shift of origin, shift of quadrants PFA - DataGrid Editing in place Synchronizing the data with backend Focus issues – SelectedIndex etc Version mismatches null is undefined Flex 2 – beta 1 vs beta 2 vs beta 3 OpenLaszlo – 3.1 vs 3.2 vs 3.3 Debugging Laszlo's Debug window Flex - ? You will hit bugs! I am not talking about bugs in your app! It may bleed if you are on the cutting edge Difficulties will come You may not be able to solve them Glancer Response Cool, Amazing Talk of the town You should take this to more people What I am not happy with Speed Uncertainty What I am happy about Ease / Power Coolness / UI Coders can do RIA now! Ecosystem / Community is building Thank you Nirav Mehta [email protected] www.magnet-i.com www.mehtanirav.com www.glancer.net.
    [Show full text]
  • Graphs in Flash Using the Graph Template Language Himesh Patel, SAS Institute Inc., Cary, NC David Kelley, SAS Institute Inc
    Graphs in Flash Using the Graph Template Language Himesh Patel, SAS Institute Inc., Cary, NC David Kelley, SAS Institute Inc., Cary, NC Dan Heath, SAS Institute Inc., Cary, NC ABSTRACT The Graph Template Language (GTL) offers many opportunities for application developers to package simple or complex custom-designed graphs into stand-alone template libraries. In SAS ® 9.2, users can generate static output only through Java rendering. Let’s take a peek into future rendering through the use of Adobe ® Flash. You will be able to use your current GTL code to generate interactive graphs using Flash technology. Once data is visually analyzed, you will be able to publish the graphs in presentations or reports. INTRODUCTION This video poster assumes that users are familiar with the SAS ® Output Delivery System (ODS) and SAS/GRAPH ® software. Because most of the work involves Adobe Flash and Adobe ® Flex ®, it is critical to understand the technology on the surface. Adobe Flash Player is a run-time application that is written in ActionScript, or in the Flex markup language MXML, using Flex SDK. Flex is a collection of technologies that allow developers to develop cross- platform, rich Internet content. Running a Flash application requires a one-time Flash Player download. The Player can be downloaded for free from the Adobe Web site at www.adobe.com . You can define the required content as MXML, which is similar to XML, by creating a new ODS destination using a tagset. One caveat for using this method is that MXML must be compiled into an SWF file before it can be executed by Flash Player.
    [Show full text]
  • Adobe Flex 4.5 Fundamentals Training from the Source
    Adobe® Flex® 4.5 Fundamentals Training from the Source Michael Labriola Jeff Tapper Matthew Boles Foreword by Adam Lehman, Adobe Flash Builder Product Manager Adobe® Flex® 4.5 Fundamentals: Training from the Source Michael Labriola/Jeff Tapper/Matthew Boles This Adobe Press book is published by Peachpit. For information on Adobe Press books, contact: Peachpit 1249 Eighth Street Berkeley, CA 94710 510/524-2178 510/524-2221 (fax) For the latest on Adobe Press books, go to www.adobepress.com To report errors, please send a note to [email protected] Copyright © 2012 by Michael Labriola and Jeffrey Tapper Adobe Press Editor: Victor Gavenda Project Editor: Nancy Peterson Development Editor: Robyn G. Thomas Technical Editor: Steve Lund Production Coordinator: Becky Winter Copy Editor: Jessica Grogan Compositor: Danielle Foster Indexer: Emily Glossbrenner Cover Design: Peachpit Press Notice of Rights All rights reserved. No part of this book may be reproduced or transmitted in any form by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of the publisher. For infor- mation on getting permission for reprints and excerpts, contact [email protected]. Notice of Liability The information in this book is distributed on an “As Is” basis, without warranty. While every precaution has been taken in the preparation of the book, neither the authors, Adobe Systems, Inc., nor the publisher shall have any lia- bility to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the instructions contained in this book or by the computer software and hardware products described in it.
    [Show full text]
  • USING FLASH BUILDER Iv Contents
    Using ADOBE® FLASH® BUILDER TM 4.6 Legal notices Legal Notices For legal notices, see http://help.adobe.com/en_US/legalnotices/index.html. Last updated 12/7/2011 iii Contents Chapter 1: About Flash Builder Applications you can build with Flash Builder . 1 Features that accelerate application development . 2 Features for running and debugging projects . 2 Flash Builder versions . 3 Flash Builder configurations . 3 Adobe Community Help Client (CHC) . 4 Chapter 2: Getting Started With Flash Builder Flash Builder workbench . 5 Flash Builder perspectives and views . 6 Flash Builder editors . 18 Projects in Flash Builder . 30 Project resources . 37 Chapter 3: Code Development Tools in Flash Builder Content Assist . 44 Quick Assist . 47 Override or implement methods . 51 Code templates . 52 Metadata code completion . 55 Customize file templates . 57 Generate from usage . 64 Generate get and set accessor functions . 66 Syntax error checking . 67 Unidentified reference error highlighting . 68 Find references and refactor code . 69 Format, navigate, and organize code . 70 Chapter 4: Using Projects in Flash Builder Create projects in Flash Builder . 81 Export and import projects . 88 Build projects . 93 Run and debug applications . 110 Export a release version of an application . 117 Package AIR applications . 121 Chapter 5: Debugging Tools in Flash Builder The Flash Debug perspective . 124 How to debug your application . 127 Chapter 6: Profiling Tools in Flash Builder The Flash Profiling perspective . 133 Profiling an application . 146 Last updated 12/7/2011 USING FLASH BUILDER iv Contents How the profiler works . 147 Use the profiler . 149 Garbage collection . 154 Identify problem areas . 155 Profiler filters .
    [Show full text]
  • Testing and Exploiting Flash Applications
    Testing and exploiting Flash applications fukami @ Chaos Communication Camp, Finowfurt, 2007 Agenda • Introduction • Definitions • Flash and ActionScript Basics • Flash exploitation • Exploits and attacks using Flash • Security on AIR The speaker • works for SektionEins as security consultant and researcher. • deals with web security since 1998 (with interrupts). • recently started FlashSec, a project for documenting and developing methodologies for Flash security auditing. Motivation for this talk • Flash is widely used, the plugin is often activated • Flash has some very funny vectors in sense of security • Interesting bugs and design flaws in player and media servers :) • Start of a Flash security project - www.flashsec.org • Note: Many slides are taken from Stefano di Paolas excellent OWASP talk Some definitions • SWF: Small Web Format / ShockWave Flash • FLA: Proprietary Flash source files used by Adobe Flash IDE • FLV: Flash Video • AS: ActionScript AIR: Adobe Integrated Runtime, Flash/Flex/HTML Desktop • Client • Flex: Flash 9/ActionScript 3 IDE with interface libraries • MXML: XML Interface Markup Language • FDS/LiveCycle: J2EE Services for Flash Remoting • RTMP / RTMPT: Real Time Messaging Protocol (Tunneled) • ABC: ActionScript Byte Code Public Research • Eye On Security (Aug 02) The Flash! Attack Flash Movie with ActionScript function: getURL('javascript: evilcode; ') • Scan Security Wire (Apr 03) Misuse of Macromedia Flash Ads clickTAG getURL (clickTag,'_self'); • Amit Klein (Jul 06) Forging HTTP Request Headers with Flash ActionScript • Stefan Esser (Okt 06) Poking new holes with Flash Crossdomain Policy Files Public Research • Martin Johns, Kanatoko Anvil (Jan 07) Anti-DNS Pinning with AS3 Flash-based scanner (DNS rebinding) • Stefano di Paolo (Mai 07) Talk: Testing Flash Applications bei der OWASP Konferenz in Mailand • There are also quite some advisories regarding Flash Player, JRun, ColdFusion etc.
    [Show full text]
  • Based on Flash Technology
    (Based on Flash Technology) By Shikai Chen [email protected] www.csksoft.net Ver. 2009.3 What is RIA? R.I.A. = Rich Internet Application. Rich Internet applications (RIAs) are web applications that have some of the characteristics of desktop applications, typically delivered by way of an Ajax framework, proprietary web browser plug-ins, advanced javascript compiler technology, or independently via sandboxes or virtual machines. Wikipedia I •Video/Photo sharing & playback •Music mix, DJ software Introduction. •3d applications •Webgames •WebOS •B2C •Augmented Reality (AR) applications Web Photoshop (www.photoshop.com) Based on Flash(Flex) RIA frameworks Adobe AIR ( codename:Apollo ) Microsoft Silverlight Javascript + DHTML + XMLHttp + Opensource libs Sun JavaFX RIA platforms Ajax PC Mac Winmobile Iphone Android Mobiln Flashlite Flash Platform Flash is no longer just an animation software. Adobe Flash … is a multimedia platform created by Macromedia and currently developed and distributed by Adobe Systems. Wikipedia II Flash Player (VM & runtime) ActionSctipt 1/2/3 Flash & AIR Opensource Libs Tools & IDEs ( Flex, FlashIDE, … ) Arts & Media ( vector graph, sounds, video …) Current Version : 10 Flash Framework SWF .ABC ( Actionscript Byte Code) files ActionScript Runtime Flash AVM1/AVM2 Player OS Flash for different people Developer Designer/Artist Flex Builder Flash IDE Flex sdk Adobe Flash Catalyst* (free & Opensource) MXML[1] /FLA * http://labs.adobe.com/technologies/flashcatalyst/ [1] http://en.wikipedia.org/wiki/MXML Flash CS4 snapshot A.k.a.
    [Show full text]
  • Adobe Flash Builder 4.5 Telesales Guide
    Adobe Flash Builder 4.5 Telesales Guide Adobe® Flash® Builder™ 4.5 Rapidly develop cross-platform web, desktop, and mobile applications Adobe Flash Builder software is an Eclipse based IDE that accelerates web and mobile application development, testing, and deployment. Unlike other Flex and ActionScript® development tools, Flash Builder delivers a development environment that integrates with Adobe’s design tools, enabling more rapid design and development of applications. Customer profiles Java™ developers—Developers who use Java language to build core enterprise applications that leverage enterprise data. They solve tough technical problems and expect crisp, defining language to help them reach their own conclusions about the use of technology. Adobe Flash Builder 4.5 comes in four editions: Flash Builder 4.5 PHP developers—Developers who use PHP language, mainly those who work in the enterprise. Standard, Flash Builder 4.5 They solve departmental problems, often using data from other enterprise applications. Decision Premium, Flash Builder 4.5 for PHP support/data visualization is important, as is the ability to connect data from different departments. Standard, and Flash Builder 4.5 for PHP Premium. Upsell to Premium Adobe ColdFusion® developers—Developers who use ColdFusion application server and software to solve editions by explaining: departmental problems, often using data from other enterprise applications. Decision support/data Adobe Flash Builder 4.5 Premium visualization is important, as is the ability to connect data from different departments. edition adds professional testing tools, including profilers, network SAP developers—Developers who mostly use SAP’s ABAP programming language. They evolve their monitoring, an automated testing company’s SAP implementation to meet changing business needs.
    [Show full text]