Napad ubacivanjem SQL izraza jedna je od najozbiljnijih prijetnji sigurnosti aplikacija zasnovanih nad bazom podataka. Ona omogućuje napadaču da stekne kontrolu nad bazom podataka aplikacije, čime napadač dobiva mogućnost izmjene podataka. Mnoga se istraživanja usmjeravaju na ovaj problem. Brojni su autori predložili različite pristupe za otkrivanje i sprječavanje ove ranjivosti, no koliko je ovaj problem i dan danas prisutan govori i činjenica da ni ti pristupi ne predstavljaju u potpunosti uspješno rješenje. U ovom radu opisano je nekoliko vrsta napada ubacivanjem SQL izraza te različiti alati i metode koji mogu pružiti određenu prevenciju i obranu od tih napada. Predložene su različite metode za rješavanje problema napada ubacivanjem SQL izraza u obliku opsežnih pregleda varijacija napada ubacivanjem SQL izraza te njihovih opisa i primjera, kako bi se bolje spoznao njihov štetan utjecaj i krajnje posljedice. Štoviše, u radu je dan i kratak pregled prijedloga pojedinih autora vezanih uz prevenciju i obranu od napada ubacivanjem SQL izraza. Na kraju je iznesen zaključak uz objektivan pregled i analizu cjelokupnog istraživanja. Glavni doprinos rada je pregled dosadašnjih istraživanja i pristupa vezanih uz: a) prevenciju napada ubacivanjem SQL izraza i b) obranu od napada ubacivanjem SQL izraza.
对SQL的攻击是对基于数据库的应用程序安全最严重的威胁之一。它使攻击者能够控制应用程序数据库,并使攻击者能够更改数据。Mnoga se istraživanja usmjeravaju na ovaj问题。许多作者提出了不同的方法来检测和预防此漏洞,但目前存在多少问题和事实,以及您的访问不是一个完整的解决方案。在这项工作中,描述了针对SQL表达式的几种类型的攻击,以及不同的工具和方法可以提供特定的预防和防御攻击。通过注入SQL表达式提出了不同的方法来解决问题,形式是全面回顾变量攻击的注入SQL表达式及其描述和示例,以更好地识别其有害影响和后果。此外,对个人作者关于防止和防御攻击SQL表达式的建议的日常和短期审查正在发挥作用。最后,对整体研究进行了客观的回顾和分析。这项工作的主要贡献是回顾了现有的研究和访问:(a)通过引入SQL表达式来防止攻击;(b)通过引入SQL表达式来预防攻击。
{"title":"Napadi ubacivanjem SQL izraza – prevencija i obrana","authors":"Nikolina Ljubičić, Danijela Jakšić, Patrizia Poščić","doi":"10.31784/zvr.8.1.10","DOIUrl":"https://doi.org/10.31784/zvr.8.1.10","url":null,"abstract":"Napad ubacivanjem SQL izraza jedna je od najozbiljnijih prijetnji sigurnosti aplikacija zasnovanih nad bazom podataka. Ona omogućuje napadaču da stekne kontrolu nad bazom podataka aplikacije, čime napadač dobiva mogućnost izmjene podataka. Mnoga se istraživanja usmjeravaju na ovaj problem. Brojni su autori predložili različite pristupe za otkrivanje i sprječavanje ove ranjivosti, no koliko je ovaj problem i dan danas prisutan govori i činjenica da ni ti pristupi ne predstavljaju u potpunosti uspješno rješenje. U ovom radu opisano je nekoliko vrsta napada ubacivanjem SQL izraza te različiti alati i metode koji mogu pružiti određenu prevenciju i obranu od tih napada. Predložene su različite metode za rješavanje problema napada ubacivanjem SQL izraza u obliku opsežnih pregleda varijacija napada ubacivanjem SQL izraza te njihovih opisa i primjera, kako bi se bolje spoznao njihov štetan utjecaj i krajnje posljedice. Štoviše, u radu je dan i kratak pregled prijedloga pojedinih autora vezanih uz prevenciju i obranu od napada ubacivanjem SQL izraza. Na kraju je iznesen zaključak uz objektivan pregled i analizu cjelokupnog istraživanja. Glavni doprinos rada je pregled dosadašnjih istraživanja i pristupa vezanih uz: a) prevenciju napada ubacivanjem SQL izraza i b) obranu od napada ubacivanjem SQL izraza.","PeriodicalId":40998,"journal":{"name":"Zbornik Veleucilista u Rijeci-Journal of the Polytechnics of Rijeka","volume":"1 1","pages":""},"PeriodicalIF":0.4,"publicationDate":"2020-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.31784/zvr.8.1.10","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"69398182","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
The purpose of this paper is to design an artificial neural network in the attempt to define the data generating process of the number of German tourist arrivals in Croatia considering the strong seasonal character of empirical data. The presence of seasonal unit roots in tourism demand determinants is analysed using the approach developed by Hylleberg, Engle, Granger and Yoo – Hegy test. The study is based on seasonality analysis and Artificial Neural Networks approach in building a model which intend to describe the behaviour of the German tourist flows to Croatia. Different neural network architectures were trained and tested, and after the modelling phase, the forecasting accuracy and model performances were analysed. Model performance and forecasting accuracy evaluation was tested using the mean absolute percentage error. Based on the augmented HEGY test procedure it can be concluded the German tourist arrivals to the Republic of Croatia have nonstationary behaviour associated with the zero frequency and seasonal frequency. Taking this into consideration, in the analysis of the phenomenon it is necessary to consider its seasonal character. Given the importance of the tourism for Croatian economic development, the research results could be useful, for both, researchers and practitioners, in the process of planning and routing the future Croatian hotel industry development and improvement of business performances.
{"title":"Artificial neural networks in modelling seasonal tourism demand - case study of Croatia","authors":"M. Gregorić, T. Baldigara","doi":"10.31784/zvr.8.1.2","DOIUrl":"https://doi.org/10.31784/zvr.8.1.2","url":null,"abstract":"The purpose of this paper is to design an artificial neural network in the attempt to define the data generating process of the number of German tourist arrivals in Croatia considering the strong seasonal character of empirical data. The presence of seasonal unit roots in tourism demand determinants is analysed using the approach developed by Hylleberg, Engle, Granger and Yoo – Hegy test. The study is based on seasonality analysis and Artificial Neural Networks approach in building a model which intend to describe the behaviour of the German tourist flows to Croatia. Different neural network architectures were trained and tested, and after the modelling phase, the forecasting accuracy and model performances were analysed. Model performance and forecasting accuracy evaluation was tested using the mean absolute percentage error. Based on the augmented HEGY test procedure it can be concluded the German tourist arrivals to the Republic of Croatia have nonstationary behaviour associated with the zero frequency and seasonal frequency. Taking this into consideration, in the analysis of the phenomenon it is necessary to consider its seasonal character. Given the importance of the tourism for Croatian economic development, the research results could be useful, for both, researchers and practitioners, in the process of planning and routing the future Croatian hotel industry development and improvement of business performances.","PeriodicalId":40998,"journal":{"name":"Zbornik Veleucilista u Rijeci-Journal of the Polytechnics of Rijeka","volume":"1 1","pages":""},"PeriodicalIF":0.4,"publicationDate":"2020-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.31784/zvr.8.1.2","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"69397966","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
The growth of tourism in Portugal allowed leveraging the economy on the last decade more than any other economic activity. The positive results in many indicators, such as the contribution to GDP, exports and revenues, show that it has been considered an engine of the economy that has produced effects in all the regions of the country. Also contributing to these results were the various strategies that the government has continually defined over the past two decades. This paper starts with a brief literature review and presents a descriptive analysis of the main long-term instruments that feature the Portuguese strategy for tourism, showing the important role that planning can have on the management of the impacts that come from the implementation of these activities. Also, the results of the main indicators (published by several different sources) are presented. The results reveal that there are still several issues that need addressing, so the main challenges for tourism development in Portugal are exposed.
{"title":"Strategic\u0000tourism planning in Portugal","authors":"S. Bailoa, P. Cravo","doi":"10.31784/zvr.8.1.23","DOIUrl":"https://doi.org/10.31784/zvr.8.1.23","url":null,"abstract":"The growth of tourism in Portugal allowed leveraging the economy on the last decade more than any other economic activity. The positive results in many indicators, such as the contribution to GDP, exports and revenues, show that it has been considered an engine of the economy that has produced effects in all the regions of the country. Also contributing to these results were the various strategies that the government has continually defined over the past two decades. This paper starts with a brief literature review and presents a descriptive analysis of the main long-term instruments that feature the Portuguese strategy for tourism, showing the important role that planning can have on the management of the impacts that come from the implementation of these activities. Also, the results of the main indicators (published by several different sources) are presented. The results reveal that there are still several issues that need addressing, so the main challenges for tourism development in Portugal are exposed.","PeriodicalId":40998,"journal":{"name":"Zbornik Veleucilista u Rijeci-Journal of the Polytechnics of Rijeka","volume":"1 1","pages":""},"PeriodicalIF":0.4,"publicationDate":"2020-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.31784/zvr.8.1.23","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"69398050","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}