Project Description

Domain Driven Design and Mashup Oriented Development based on Open Source Java Metaframework for Pragmatic, Reliable and Secure Web Development

 

Introduction


The main concept of ROMULUS is researching on novel methods for increasing productivity and reliability of web software development, in particularly, focused on Java web development.

 

ROMULUS proposal is based on recognising some of the deficiencies of standard Java Enterprise Edition, and proposing a new paradigm for developing web applications taking advantage of new trends in software engineering, such as domain driven design combined with agile development methodologies, and some of the principles from Ruby on Rails.

 

In order to have a serious impact, the project does not start from scratch, it is based on two mature open source projects, Roma and LIFERAY, which will be extended according to this proposal needs and following an open source project development methodology, in order to disseminate and exploit the results of the project. The idea of using these projects is to solve the former problems, with Roma will get to make Java application development easy, integrate frameworks and tools using a metaframework and decreasing the implementation time. While with LIFERAY, we are integrating the leading enterprise open source portal framework, with relevant industrial references.

  

Technical Approach

 

  • Defining an innovative development framework for Java Web development based on a combination of Domain Driven Design (DDD) and the application of Model Driven  Architecture (MDA) techniques to a metaframework of Web Applications, derived from previous mature experiences. In addition, the project will provide integration with standard development tool, and semi-automated semantic annotation of relevant software assets, such as bugs and feature requests.
  • Integrating a “Mash-up oriented development” in the process. The integration of mashup web services based on REST APIs is showing its agility for increasing productivity and promoting reusability. ROMULUS will go a step further and will research on:
    • Web Services Mashups, such as Google Maps or Yahoo Pipes. The project will research on how these mashups can be integrated in the software development life cycle.
    • Data-level mashup for integrating heterogeneous data systems based on semantic technologies.
    • Portal-level mashups, or ‘micro-portal-mashups’, a novel extension of current portal frameworks for providing common services to the web components reducing itsdevelopment effort.
    • Enterprise mashups, modelling of enterprise systems as mashup services to speed up their integration
  • Integrating soft goals, such as reliability, scalability and security in the domain description, and integrating automatic generation of tests.
  • Researching on the balance between client and server technologies, and on providing an active role to the end-users for its customisation.

 

Impact / Exploitation objectives

 

  • Promote development of an open source user community
  • Develop vertical solutions
  • Evaluate the project results and assess on their progress
  • Disseminate results in industrial and academic forums

 

 

Blog
Wapiti presented at VI OWASP Spain Chapter Meeting

Last Friday Informática Gesfor made a presentation of Wapiti in the VI OWASP Spain Chapter Meeting which took place in Barcelona. OWASP (Open Web Application Security Project) is one of the most important organizations in the field of security. David del Pozo González (Informatica Gesfor), as developer of Wapiti, made a presentation about Wapiti and Romulus Project. He talked about Romulus Project which has the important goal of securize the web applications built with Roma Metaframework, and it has been acomplished in a great part thanks to Wapiti. The presentation also showed the features of Wapiti, how it works, the way to extend it and a practice case of use. But the most important is that we offered to the OWASP community the opportunity of knowing Wapiti and the participation in its evolution and event attendees had a good impression of Wapiti.

The event was attended among others by Richard Stallman who presented the "Free Software, Your Freedom"; Fabio Cerullo who presented "OWASP: The most important risk in web applications 2010"; David del Pozo González who presented "Wapiti: Security for web developers in Romulus Project"; and Christian Martorella who presented "2010 y yet using brute force: Webslayer". Vicente Aguilera Díaz, as president of the OWASP Spanish Chapter, made the introduction and close of the event.

Promedio (1 Votar)
Estrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadas
292 Accesos, 0 Comentarios
Roma Workshop in Madrid

 

  

Date: 18th of February 2010, 15.30 h - 19:00h

Place: Escuela de Ingeniería de Telecomunicación  (Auditorio, Building C), UPM,  Madrid

Registration:  http://www.amiando.com/romaworkshop

 

Promedio (0 Votos)
Estrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadas
1357 Accesos, 0 Comentarios
Software, documents and other stuff, ready for download!

Today, we are excited to announce that a new section of downloads is available. In this section, users can find all the software developed within the project as well as public documents and dissemination material of Romulus.

From the software page, users can download different products developed within Romulus:

  • Roma Framework and IDE4Romulus allow developers to increase the productivity of the web software development, focused on Java, based on a domain driven design, MDA techniques and a metaframework.
  • MyCocktail and DERI Pipes improve the software productivity by using mashup oriented development.
  • Wapiti and ATP4Romulus help to enhance the quality of software development.


Also, all the public documents of the project can be downloaded from the documents section. These documents contain information and the results of the research realized within the project. This section is organized by the different topics of the project:

 

Publications, presentations and other dissemination material of Romulus are also available to be downloaded from this section.

We encourage you to enjoy with this new download section.

Promedio (0 Votos)
Estrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadas
991 Accesos, 0 Comentarios
New version (2.2.1) of Wapiti

A new version (2.2.1) of Wapiti is now available for download. In this release, identified bugs have been fixed and some improvements have been performed. The most important of them are:

  • Nikto attack: This new attack checks the security of the page by using the Nikto database.
  • Internationalization: Now, Wapiti is available in three languages: English, French and Spanish.

 

Wapiti is a black-box testing tool that allows you to audit the security of your web applications. It does not study the source code of the application, it scans the web pages of the deployed web applications, looking for scripts and forms where it can inject data. Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable.

Download the last version of Wapiti

Promedio (0 Votos)
Estrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadas
1058 Accesos, 0 Comentarios
Released TevereFlow, the first workflow engine with a Web Editor
Etiquetas: roma, tevere, workflow

Starting from December 22nd 2009 is available the new version of TevereFlow.

Tevere Flow is a light-weight Workflow engine built using the Java® technology. Just download it and create your process using the Web interface. You can use Tevere as embedded or as external engine by using the provided Web Services API.

Tevere was built using Roma Framework under the Romulus consortium an it's currently used in several production systems.

Main features:

  • Open Source Apache 2.0 license
  • Web User Interface using the Ajax technology
  • Stand-alone application: just download and start it
  • Fully Transactional supporting any RDBMS or db4o ODBMS
  • Set of built-in commands available (email, web service invocation, etc.)
  • Auto-resume of failure activities
  • User and profile management
  • Activities can be written in Java or using any supported scripting language such as Javascript and Ruby
  • Integration via Java APIs or WebService
Promedio (1 Votar)
Estrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadasEstrellas apagadas
1313 Accesos, 0 Comentarios
Mostrando el intervalo 1 - 5 de 39 resultados.
Página de 8