Elml 2013, the Fifth International Conference on Mobile

Total Page:16

File Type:pdf, Size:1020Kb

Elml 2013, the Fifth International Conference on Mobile eLmL 2013 The Fifth International Conference on Mobile, Hybrid, and On-line Learning ISBN: 978-1-61208-253-0 February 24 - March 1, 2013 Nice, France eLmL 2013 Editors Stephen White, The University of Huddersfield - Queensgate, UK 1 / 66 eLmL 2013 Forward The fifth edition of the International Conference on Mobile, Hybrid, and On-line Learning (eLmL 2013), held in Nice, France, February 24 - March 1, 2013, focused on the latest trends in e- learning and also on the latest IT technology alternatives that are poised to become mainstream strategies in the near future and will influence the e-learning environment. eLearning refers to on-line learning delivered over the World Wide Web via the public Internet or the private, corporate intranet. The goal of the eLmL 2013 conference was to provide an overview of technologies, approaches, and trends that are happening right now. The constraints of e-learning are diminishing and options are increasing as the Web becomes increasingly easy to use and the technology becomes better and less expensive. eLmL 2013 provided a forum where researchers were able to present recent research results and new research problems and directions related to them. The topics covered aspects related to tools and platforms, on-line learning, mobile learning, and hybrid learning. We take this opportunity to thank all the members of the eLmL 2013 Technical Program Committee as well as the numerous reviewers. The creation of such a broad and high-quality conference program would not have been possible without their involvement. We also kindly thank all the authors who dedicated much of their time and efforts to contribute to the eLmL 2013. We truly believe that, thanks to all these efforts, the final conference program consists of top quality contributions. This event could also not have been a reality without the support of many individuals, organizations, and sponsors. We are grateful to the members of the eLmL 2013 organizing committee for their help in handling the logistics and for their work to make this professional meeting a success. We hope that eLmL 2013 was a successful international forum for the exchange of ideas and results between academia and industry and for the promotion of progress in eLearning research. We also hope that Côte d’Azur provided a pleasant environment during the conference and everyone saved some time for exploring the Mediterranean Coast. eLmL 2013 Chairs Herwig Mannaert, University of Antwerp, Belgium Dumitru Dan Burdescu, University of Craiova, Romania 2 / 66 Bernd Krämer, FernUniversität in Hagen, Germany Stephen White, The University of Huddersfield - Queensgate, UK Maiga Chang, Athabasca University - Edmonton, Canada Adam M. Gadomski, Università degli Studi di Roma La Sapienza, Italy 3 / 66 eLmL 2013 Committee eLmL Advisory Chairs Herwig Mannaert, University of Antwerp, Belgium Dumitru Dan Burdescu, University of Craiova, Romania Bernd Krämer, FernUniversität in Hagen, Germany Stephen White, The University of Huddersfield - Queensgate, UK Maiga Chang, Athabasca University - Edmonton, Canada Adam M. Gadomski, Università degli Studi di Roma La Sapienza, Italy eLmL 2013 Technical Program Committee Koumpis Adamantios, ALTEC SA Research, Greece Ignacio Aedo, Universidad Carlos III de Madrid, Spain Luis Alberto Álvarez-González, Universidad Austral de Chile - Valdivia, Chile Tomaz Amon, Amnim, center for scientific visualization (CSV) – Ljubljana, Slovenia Trish Andrew, The University of Queensland-Brisbane, Australia Theodoros N. Arvanitis, The University of Birmingham, UK Sergio Assis Rodrigues, Federal University of Rio de Janeiro, Brazil Karla Bastos Guedes, Universidade Federal Fluminense, Brazil Ilham Benyahia, Université du Québec en Outaouais, Canada Werner Beuschel, Institute of Business Application Systems, Brandenburg, Germany Christos Bouras, University of Patras, Greece Maria Helena Braz, Technical University of Lisbon, Portugal Julien Broisin, IRIT, France Dumitru Dan Burdescu, University of Craiova, Romania Egle Butkeviciene, Kaunas University of Technology, Lithuania Vanco Cabukovski, Ss. Cyril and Methodius University in Skopje, Republic of Macedonia Maria-Dolores Cano, Universidad Politécnica de Cartagena, Spain Alex Canovas, Universidad Politecnica de Valencia, Spain Maiga Chang, Athabasca University - Edmonton, Canada Olga Cherednichenko, National Technical University “KhPI” - Kharkiv, Ukraine Bee Bee Chua, University of Technology, Sydney, Australia Lorraine Cleeton, Walden University, USA Andre Constantino, Federal de São Paulo – Hortolândia | PG-IC - UNICAMP, Campinas, Brazil Gabriella Dodero, Free University of Bozen-Bolzano, Italy Roza Dumbraveanu, State Pedagogical University "Ion Creanga", Chisinau, Moldova Martin Ebner, Graz University of Technology, Austria Bekim Fetaji, South East European University - Tetovo, Republic of Macedonia Joseph Finkelstein, The Johns Hopkins Medical Institutions, USA Adam M. Gadomski, ENEA, Italy Ivan Ganchev, University of Limerick, Ireland 4 / 66 Leonardo Garrido, Tecnológico de Monterrey, Mexico David Guralnick, Kaleidoscope Learning - New York, Columbia University - New York, USA Imed Hammouda, Tampere University of Technology, Finland Felix Hamza-Lup, Armstrong Atlantic State University - Savannah, USA Maurice Hendrix, Coventry University, UK Carmen Holotescu, "Politehnica" University of Timisoara, Romania Naxhije Jakupi, South East European University Ilindenska - Tetovo, Macedonia Mike Joy, University of Warwick, UK Michail Kalogiannakis, University of Crete, Greece Keiichi Kaneko, Tokyo University of Agriculture and Technology, Japan Charalampos Karagiannidis, University of Thessaly, Greece Surya Bahadur Kathayat, Norwegian University of Science and Technology (NTNU), Norway Cristian Kop, Alpen-Adria-Universitaet Klagenfurt, Austria Bernd Krämer, FernUniversität in Hagen, Germany Cerstin Mahlow, Institute of Computational Linguistics | University of Zurich, Switzerland Katherine Maillet, Institut Mines-Telecom | Telecom Ecole de Management, France Stefania Manca, Istituto per le Tecnologie Didattiche | Consiglio Nazionale delle Ricerche – Genova, Italy Herwig Mannaert, University of Antwerp, Belgium Natarajan Meghanathan, Jackson State University, USA Peter Mikulecky, University of Hradec Králové, Czech Republic Francisco Montero, University of Castilla-La Mancha, Spain Rafael Morales, Universidad de Guadalajara, Mexico Karsten Morisse, University of Applied Sciences - Osnabrück, Germany Mara Nikolaidou, Harokopio University of Athens, Greece Masaya Okada, Shizuoka University - Hamamatsu-city, Japan Lynn M. Patterson, Kennesaw State University, USA Jari Palomäki, Tampere University of Technology - Pori, Finland Vladimir Peschanenko, Kherson State University, Ukraine Michael Piotrowski, University of Zurich, Switzerland Tamara Powell, Kennesaw State University, USA Francesca Pozzi, Istituto Tecnologie Didattiche - CNR, Italy Yannis Psaromiligkos, Technological Education Institute of Piraeus, Greece Jaime Ramirez, Universidad Politécnica de Madrid, Spain Rosabel Roig-Vila, University of Alicante, Spain Barbara Sabitzer, Alpen-Adria-Universität Klagenfurt, Austria Demetrios G. Sampson, University Piraeus & CERTH, Greece Jesús Sánchez Allende, Universidad Alfonso X el Sabio - Villanueva de la Cañada, Spain Sandra Sendra, Universidad Politecnica de Valencia, Spain Alexander Spivakovsky, Kherson State University, Ukraine Monika Steinberg, Leibniz University of Hanover, Germany Boštjan Šumak, University of Maribor, Slovenia Katya Toneva, Mirandanet, UK Guglielmo Trentin, CNR, Italy Thrasyvoulos Tsiatsos, Aristotle University of Thessaloniki, Greece George Tsihrintzis, University of Piraeus, Greece Doru Ursutiu, University "Transilvania" of Brasov, Romania Amali Weerasinghe, University of Canterbury, New Zealand Genny Villa, Université de Montreal, Canada 5 / 66 Steve Wheeler, University of Plymouth, UK Stephen White, The University of Huddersfield - Queensgate, UK Nicola Whitton, Manchester Metropolitan University, UK Penne L. Wilson, Ralph J. Bunche Academy Charter, USA Martin Wolpers, Fraunhofer-Institut für Angewandte Informationstechnik FIT - Sankt Augustin, Germany Lung-Hsiang Wong, Nanyang Technological University, Singapore Mudasser F. Wyne, National University, - San Diego, USA Miguel Zapata Ros, Universidad de Alcalá, Spain Grygoriy Zholtkevych, V.N. Karazin Kharkiv National University, Ukraine Leyla Zhuhadar, Western Kentucky University, USA Vaiva Zuzeviciute, Vytautas Magnus University, Lithuania 6 / 66 Copyright Information For your reference, this is the text governing the copyright release for material published by IARIA. The copyright release is a transfer of publication rights, which allows IARIA and its partners to drive the dissemination of the published material. This allows IARIA to give articles increased visibility via distribution, inclusion in libraries, and arrangements for submission to indexes. I, the undersigned, declare that the article is original, and that I represent the authors of this article in the copyright release matters. If this work has been done as work-for-hire, I have obtained all necessary clearances to execute a copyright release. I hereby irrevocably transfer exclusive copyright for this material to IARIA. I give IARIA permission or reproduce the work in any media format such as, but not limited to, print, digital, or electronic. I give IARIA permission to distribute the materials without restriction to any institutions or individuals. I give IARIA permission to submit
Recommended publications
  • E-Learning Materials in Gis-Technology and Cartography – Towards an Open-Content Solution
    E-LEARNING MATERIALS IN GIS-TECHNOLOGY AND CARTOGRAPHY – TOWARDS AN OPEN-CONTENT SOLUTION 1 2 3 Marion Werner , Susanne Bleisch , Joël Fisler 1 Institute of Cartography, Swiss Federal Institute of Technology (ETH) CH-8093 Zürich, Switzerland – [email protected] 2 Department of Geomatic Engineering, Basel University of Applied Sciences (FHBB), CH-4132 Muttenz, Switzerland – [email protected] 3 Department of Geography, University of Zürich (UNIZH), CH-8057 Zurich, Switzerland – [email protected] ABSTRACT Today there is an increasing importance and demand for spatial information with rising tendency. Staying abreast of technical changes we have the need to undertake the creation of apprenticeship, dealing with Geographic Information Studies and Cartography. The laptop is a quasi standard for today’s students. Taking this into account we can also benefit from new web technologies in the apprenticeship. With this prevision we started generating a multimedia enriched course in 2001, named GITTA [Geographic Information Technology Training Alliance]. With the upcoming year 2004 we got granular to GITTA’s potential and could formulate far-reaching development targets to make the course even more attractive. The main development targets now concentrate on enhancing the didactical XML framework and realising a concept towards offering the GITTA materials to an interested community as open-content. 1 GITTA – STATE OF AFFAIRS GITTA, initiated by the Swiss Virtual Campus in 2001, is an interactively programmed, IT-based and multilingual pool of learning materials that can be used for different courses within Geomatic- and Cartography Studies, Environmental- or GI Sciences. The course has a modular structure with two levels and case studies in addition.
    [Show full text]
  • Elml, the E-Lesson Markup Language: Developing Sustainable E-Learning Content Using an Open Source XML Framework
    Zurich Open Repository and Archive University of Zurich Main Library Strickhofstrasse 39 CH-8057 Zurich www.zora.uzh.ch Year: 2006 eLML, the e-Lesson Markup Language: Developing sustainable e-Learning content using an open source XML framework Fisler, Joël ; Bleisch, Susanne Abstract: eLML, the open source “eLesson Markup Language”, is an XML framework allowing authors of e-Learning lessons to create structured and sustainable content. eLML is based on the pedagogical concept ECLASS (adapted from Gerson, 2000), standing for entry, clarify, look, act, self-assessment and summary. Each lesson is divided into units that contain a number of smaller learning objects. To allow different teaching and learning scenarios most of the structure elements are optional or canberepeated several times and different orders. Lessons written with eLML can be transformed into HTML orPDF or be imported into a learning management system (LMS) using the SCORM or IMS Content Packaging format. The paper presents experiences from the development of eLML itself, the design of e-Learning content based on the eLML-structure, and the use of eLML-based content in conjunction with a LMS. Posted at the Zurich Open Repository and Archive, University of Zurich ZORA URL: https://doi.org/10.5167/uzh-77757 Conference or Workshop Item Published Version Originally published at: Fisler, Joël; Bleisch, Susanne (2006). eLML, the e-Lesson Markup Language: Developing sustainable e-Learning content using an open source XML framework. In: WEBIST 2006 International Conference on Web
    [Show full text]
  • PDF Document (Only Available in German)
    Geographic Information Technology Training Alliance (GITTA) presents: GITTA - Geographic Information Technology Training Alliance Responsible persons: Anna Leonowicz, Samuel Wiesmann, Thomas Grossmann GITTA - Geographic Information Technology Training Alliance Table Of Content 1. GITTA - Geographic Information Technology Training Alliance .......................................................... 2 1.1. More Information about GITTA ...................................................................................................... 3 1.1.1. The idea behind GITTA ............................................................................................................ 4 1.1.2. The pedagogical concept ECLASS ........................................................................................... 5 1.1.3. Technical implementation of GITTA using XML .................................................................... 7 1.1.4. GITTA consortium: Partner institutes and staff list ................................................................ 10 1.1.5. Users' feedback ........................................................................................................................ 13 1.1.6. Important links about GIS and e-Learning .............................................................................. 13 1.1.7. Conferences where GITTA was presented .............................................................................. 15 1.1.8. GITTA News-Archive 2004-2013 ..........................................................................................
    [Show full text]
  • Creating, Handling and Implementing E-Learning Courses and Content Using the Open Source Tools Olat and Elml at the University of Zurich
    CREATING, HANDLING AND IMPLEMENTING E-LEARNING COURSES AND CONTENT USING THE OPEN SOURCE TOOLS OLAT AND ELML AT THE UNIVERSITY OF ZURICH Joël Fisler a, Franziska Schneider a a University of Zurich, IT-Services, Winterthurerstr. 190, 8057 Zurich, Switzerland (joel.fisler, franziska.schneider)@id.uzh.ch, Phone +41446355252, Fax +41446354505 KEY WORDS: Internet/Web, Education, Learning, Teaching, Open Systems, Platforms, Software, Content-based ABSTRACT: This paper presents two open source e-learning tools developed at the University of Zurich: eLML (eLesson Markup Language), an XML framework allowing authors of e-learning lessons to create structured and sustainable content and OLAT (Online Learning And Training), a learning management system (LMS) used by universities to manage e-learning courses, to provide collaborative tools for student groups and to run e-assessments. These tools work hand-in-hand since eLML is used to create and OLAT to present, discuss and assess e-learning content. After an introduction, the author presents both eLML and OLAT, its features but also its limitations. eLML was originally started in 2002 by the Swiss GIS-project “GITTA” and is now used by many universities or universities of applied sciences in Switzerland, Germany or Austria. OLAT was originally started as a student project in 1999 and became the strategic LMS of the University of Zurich in 2003. One year later – after a complete rebuild based on the programming language Java – OLAT was released under the Apache Open Source license and thus made available to a worldwide audience. Today OLAT is used by over 30’000 students at the University of Zurich, OLAT servers are running in over 30 countries and OLAT has been translated to 17 languages.
    [Show full text]
  • Open Universiteit the RAGE Software Asset Model and Metadata Model
    The RAGE Advanced Game Technologies Repository for Supporting Applied Game Development Citation for published version (APA): Georgiev, A., Grigorov, A., Bontchev, B., Boytchev, P., Stefanov, K., Westera, W., Prada, R., Hollins, P., & Moreno, P. (2016). The RAGE Advanced Game Technologies Repository for Supporting Applied Game Development. In R. Bottino, J. Jeuring, & R. C. Veltkamp (Eds.), Games and Learning Alliance: 5th International Conference, GALA 2016, Utrecht, The Netherlands, December 5–7, 2016, Proceedings (pp. 235-245). Springer. Document status and date: Published: 08/12/2016 Document Version: Version created as part of publication process; publisher's layout; not normally made publicly available Document license: CC BY-NC-ND Please check the document version of this publication: • A submitted manuscript is the version of the article upon submission and before peer-review. There can be important differences between the submitted version and the official published version of record. People interested in the research are advised to contact the author for the final version of the publication, or visit the DOI to the publisher's website. • The final author version and the galley proof are versions of the publication after peer review. • The final published version features the final layout of the paper including the volume, issue and page numbers. Link to publication General rights Copyright and moral rights for the publications made accessible in the public portal are retained by the authors and/or other copyright owners and it is a condition of accessing publications that users recognise and abide by the legal requirements associated with these rights. • Users may download and print one copy of any publication from the public portal for the purpose of private study or research.
    [Show full text]
  • Elesson Markup Language (Elml) Workshop 26.3.08 Michael Ziege
    eLesson Markup Language (eLML) Workshop 26.3.08 eLML-Workshop 26.3.08, Vormittag Lernziele des Kurses 9:00-9:15 Kursübersicht & Einführung • Handhabung von eLML zur Erstellung und 9:15-10:00 XML Grundlagen Strukturierung von E-Learning Inhalten 10:00-10:30 XML Schema & Arbeitsumgebung • Umsetzung von visuellen, funktionellen und didaktischen Gestaltungsvorgaben 10:30-11:00 Pause • Verständnis für Zusammenspiel der 11:00-11:45 Übungen verschiedenen Komponenten bei der 11:45-12:30 eLML Grundlagen Produktion von E-Learning Inhalten eLML Workshop OLAT Konferenz 2008 26.3.08 / 1 eLML Workshop OLAT Konferenz 2008 26.3.08 / 2 Kursübersicht & Einführung Kursübersicht & Einführung XML-Struktur Teamwork Workflow und Kollaboration in grösseren E-Learning Projekten • Strukturierung von E-Learning Inhalten • Zentralisierung von Inhalt und Assets Autor Eclipse (IDE) Export LMS • Berücksichtigung didaktischer Konzepte oXygen (Editor) IMS CP (OLAT) SCORM CP HTML • Co-Produktionen in Partnerschaften PDF ODF • XML LCMS • Einheitliche Struktur: Wiedererkennbare Bedienung, gute Akzeptanz Projekt-Repository eml.uzh.ch eLML Distribution XML elml.cvs.sourceforge.net. (core) Assets Schematas • Überführung von einer Form in die andere XSL/CSS XSL • Standards eLML Workshop OLAT Konferenz 2008 26.3.08 / 3 eLML Workshop OLAT Konferenz 2008 26.3.08 / 4 Kursübersicht & Einführung eLML XML Grundlagen eLML als regelbasiertes Framework ("Expertensystem"): 9:00-9:15 Kursübersicht & Einführung • gewisse Annahmen über Aufbau einer E-Lektion 9:15-10:00 XML Grundlagen • Gewährleistung
    [Show full text]
  • Elesson Markup Language
    eLML - eLesson Markup Language Jo¨elFisler∗ Susanne Bleischy July 12, 2011 ∗UZH joel.fi[email protected], Overall yFHNW [email protected], Content 1 Contents Table Of Content2 eLML - eLesson Markup Language4 More Information about eLML....................6 ECLASS - The pedagogical concept behind eLML......8 The XML structure of eLML in detail............. 10 Newsletter............................. 13 How can I participate or contribute?.............. 14 Success Stories: Projects using eLML.............. 16 Download eLML: Difference between the stable and the developer release............................... 30 Installing the eLML Stable Release............... 31 Installing the eLML Developer Release............. 33 Installing Eclipse and oXygen or XMLSpy........... 36 The elml.uzh.ch content repository server for storing lessons. 38 How can I create a new eLesson with eLML and use it?... 45 Documentation: Background information about eLML....... 52 The structure of the eLML XML Schema........... 54 The eLML folder structure................... 57 Validating your eLML lesson.................. 62 The eLML content elements................... 64 The most common attributes in eLML............. 85 Using the glossary, bibliography, index, list of figures etc... 88 Output Formats: Transforming your XML file into various formats 91 Customize your transformation process............. 93 Creating courses that contain multiple lessons......... 100 The most important transformation: From XML to (X)HTML102 Custom Layouts: Create your own templates......... 106 Custom Layouts: Using the YAML CSS framework...... 112 The eLML CSS Guide...................... 116 2 3 Creating SCORM and IMS Content Package for LMS import 121 Create a PDF version of your lesson using XSL-FO...... 126 Creating eBooks with eLML using ePub Format....... 129 From XML to PDF via LaTeX................. 136 Open Document Format (ODF): Create an office document.
    [Show full text]
  • A Formation Method of Flexible Learning Objects
    Informatics in Education, 2009, Vol. 8, No. 1, 49–68 49 © 2009 Institute of Mathematics and Informatics, Vilnius A Formation Method of Flexible Learning Objects Ramunas¯ KUBILIUNAS¯ Laboratory of Distance Learning Technologies, Kaunas University of Technology Student¸u 67-513, LT-51392 Kaunas, Lithuania e-mail: [email protected] Eduardas BAREIŠA Department of Software Engineering, Kaunas University of Technology Studentu 50-404, LT-51368 Kaunas, Lithuania e-mail: [email protected] Received: July 2008 Abstract. A brief overview of formation method of flexible learning objects is presented in this article. The basis of this method is e-learning material that is structured and separated from display rules. The learning objects that have such e-learning material may be adapted to individual needs and may be used in different learning contexts without changing e-learning material. To change the presentation form of e-learning material of such objects, it is enough to change display rules of this material. However, if the e-learning material must be adapted too, it is much easier to do this as the material is structured and contains less technical information of representation. The adaptation of such learning objects is more effective and needs less work time input, therefore they are called as flexible learning objects. Keywords: e-learning material, e-learning content, learning object, reusable learning object, reuse of learning object, flexible learning object. Introduction Distance learning is one of the widely used learning forms, which has already been started to legalize in higher education institutions. One of the most important elements in the pro- cess (in the preparation as well as in the delivery stages) of distance learning is learning material.
    [Show full text]
  • ELML, the E-LESSON MARKUP LANGUAGE Developing Sustainable E-Learning Content Using an Open Source XML Framework
    ELML, THE E-LESSON MARKUP LANGUAGE Developing Sustainable e-Learning Content Using an Open Source XML Framework Joël Fisler Geography Department, University of Zurich, Winterthurerstrasse 190, 8057 Zurich, Switzerland Susanne Bleisch Basel University of Applied Sciences (FHNW), 4132 Muttenz, Switzerland Keywords: e-Learning, XML, open source, sustainable content, Internet, web, SCORM, IMS, education, eLML. Abstract: eLML, the open source “eLesson Markup Language”, is an XML framework allowing authors of e-Learning lessons to create structured and sustainable content. eLML is based on the pedagogical concept ECLASS (adapted from Gerson, 2000), standing for entry, clarify, look, act, self-assessment and summary. Each lesson is divided into units that contain a number of smaller learning objects. To allow different teach- ing and learning scenarios most of the structure elements are optional or can be repeated several times and in different orders. Lessons written with eLML can be transformed into HTML or PDF or be imported into a learning management system (LMS) using the SCORM or IMS Content Packaging format. The paper pre- sents experiences from the development of eLML itself, the design of e-Learning content based on the eLML-structure, and the use of eLML-based content in conjunction with a LMS. 1 INTRODUCTION tions by a XML Schema and therefore all authors must create identically structured lessons. eLML was developed The launch of eLML came only after the official by the Swiss e-Learning ending of the GITTA project when the Swiss Virtual project GITTA (Fisler, Campus discovered the potential of GITTA’s XML 2004), a modular online structure. With minimal funding a consolidated, course in Geographic Information Science and server-independent and well-documented XML Technology.
    [Show full text]
  • Aplikacje Webowe
    Aplikacje webowe Bezpieczeństwo systemów komputerowych semestr zimowy, 2020/21 Przypomnieć - jak ktoś nie rozumie, niech pinguje, bo nie widzę twarzy Directory Traversal - co robić? ● opcja 1: whitelist znaków ([a-ZA-Z0-9]*) ● opcja 2: czy_plik_jest_w_katalogu() ● opcja 3: nie trzymać plików w systemie plików ○ dygresja: inne zalety, np. skalowalność Directory Traversal - co robić? File file = new File(BASE_DIRECTORY, userInput); if (file.getCanonicalPath().startsWith(BASE_DIRECTORY)) { ... } https://portswigger.net/web-security/file-path-traversal Rozgrzewka http://bsk2020.kazet.cc:8018/post/1137 Zadanie 6 … if (isset($_GET['manpage'])) { echo(system("man " . $_GET['manpage'])); } … http://bsk2020.kazet.cc:8006/ Gra w banowanie Blacklist nie działa (i to jest dość ogólna zasada security) Command Injection - co robić? ● opcja 0: biblioteka zamiast poleceń shellowych ● opcja 1: własne nazwy plików ● opcja 2: whitelist znaków ([a-ZA-Z0-9]*) ● opcja 3 wbudowane w język programowania mechanizmy zabezpieczeń (typu subprocess.call([‘ls’, …])) opinia (https://portswigger.net/web-security/os-command-injection): “Never attempt to sanitize input by escaping shell metacharacters. In practice, this is just too error-prone and vulnerable to being bypassed by a skilled attacker.” Bazy danych if (isset($_GET['username']) and isset($_GET['password'])) { $username = (string) $_GET['username']; $password = (string) $_GET['password']; $result = mysqli_query( $link, "SELECT * FROM users WHERE username='" . $username . "' AND password='" . $password . "';"); if (mysqli_num_rows($result) > 0) { echo "Logged in successfully. Flag is: (...)"; } } http://bsk2020.kazet.cc:8008/ SQL Injection ● Występuje coraz rzadziej ● Nie trzeba pisać ręcznie zapytań żeby zbudować formularz logowania… ● ...albo dowolny inny kawałek aplikacji webowej ● Ale nadal czasem trzeba napisać skomplikowane, ręcznie zoptymalizowane zapytanie do bazy na kilkadziesiąt linijek - i wtedy już SQLi jest możliwe Te same problemy co przy command injection - nie pisać samemu filtrowania, wykorzystać wbudowane w framework.
    [Show full text]
  • Open Educational Resources (OER) Inspire Teaching and Learning
    Open educational resources (OER) inspire teaching and learning Bruno Wenk Institute of Information and Communications Technologies University of Applied Sciences, HTW Chur Chur, Switzerland [email protected] Abstract—Open educational resources (OER) can significantly The amount of work to develop educational resources (e.g. reduce the time required to prepare lectures. The prerequisites documents, graphics, images, videos, laboratory exercises, are that a desired resource can be found quickly and that its compatible learning units) is high. Moreover, all these adequacy for the intended purpose can be estimated easily. resources have to be maintained and to be developed further as Eventually, the resource should also be suitable for modification. technologies or curricula change. Unlike scientists, teachers are In the first part we outline the requirements for the sourcing, all too often “lone fighters”. They do not have many storing, retrieval and exchange of open educational resources opportunities to discuss their lectures and materials with considering technical and legal aspects. In the second part we colleagues, to exchange ideas or even to develop materials in a present a case study focusing on the user level perspective. We team. describe the searching for a particular OER (an online Moodle tutorial), the analysis of the resource found, its modification and This is where open educational resources (OER) come into the publishing of the modified resource on a repository. play. OER can help teachers to reduce their amount of work for the preparation of the lectures. Open educational resources can be modified to suit the specific didactical needs of a lecture and the “producers” and “consumers” can contact each other in Keywords-open educational resources; repositories; metadata; order to discuss modifications and extensions to existing OER.
    [Show full text]
  • 221 the International Archives of the Photogrammetry, Remote Sensing and Spatial Information Sciences
    CREATING, HANDLING AND IMPLEMENTING E-LEARNING COURSES AND CONTENT USING THE OPEN SOURCE TOOLS OLAT AND ELML AT THE UNIVERSITY OF ZURICH Joël Fislera,Franziska Schneidera aUniversity of Zurich, IT-Services, Winterthurerstr. 190, 8057 Zurich, Switzerland - (joel.fisler, franziska.schneider)@id.uzh.ch, Phone +41446355252, Fax +41446354505 KEY WORDS: Internet/Web, Education, Learning, Teaching, Open Systems, Platforms, Software, Content-based ABSTRACT: This paper presents two open source e-learning tools developed at the University of Zurich: eLML (eLesson Markup Language), an XML framework allowing authors of e-learning lessons to create structured and sustainable content and OLAT (Online Learning And Training), a learning management system (LMS) used by universities to manage e-learning courses, to provide collaborative tools for student groups and to run e-assessments. These tools work hand-in-hand since eLML is used to create and OLAT to present, discuss and assess e-learning content. After an introduction, the author presents both eLML and OLAT, its features but also its limitations. eLML was originally started in 2002 by the Swiss GIS-project “GITTA” and is now used by many universities or universities of applied sciences in Switzerland, Germany or Austria. OLAT was originally started as a student project in 1999 and became the strategic LMS of the University of Zurich in 2003. One year later – after a complete rebuild based on the programming language Java – OLAT was released under the Apache Open Source license and thus made available to a worldwide audience. Today OLAT is used by over 30’000 students at the University of Zurich, OLAT servers are running in over 30 countries and OLAT has been translated to 17 languages.
    [Show full text]