Romulus

Wapiti presented at VI OWASP Spain Chapter Meeting

2010-06-21T10:23:43Z

Last Friday Informática Gesfor made a presentation of Wapiti in the VI OWASP Spain Chapter Meeting which took place in Barcelona. OWASP (Open Web Application Security Project) is one of the most important organizations in the field of security. David del Pozo González (Informatica Gesfor), as developer of Wapiti, made a presentation about Wapiti and Romulus Project. He talked about Romulus Project which has the important goal of securize the web applications built with Roma Metaframework, and it has been acomplished in a great part thanks to Wapiti. The presentation also showed the features of Wapiti, how it works, the way to extend it and a practice case of use. But the most important is that we offered to the OWASP community the opportunity of knowing Wapiti and the participation in its evolution and event attendees had a good impression of Wapiti.

The event was attended among others by Richard Stallman who presented the "Free Software, Your Freedom"; Fabio Cerullo who presented "OWASP: The most important risk in web applications 2010"; David del Pozo González who presented "Wapiti: Security for web developers in Romulus Project"; and Christian Martorella who presented "2010 y yet using brute force: Webslayer". Vicente Aguilera Díaz, as president of the OWASP Spanish Chapter, made the introduction and close of the event.

Roma Workshop in Madrid

2010-02-10T17:23:47Z

Date: 18th of February 2010, 15.30 h - 19:00h

Place: Escuela de Ingeniería de Telecomunicación (Auditorio, Building C), UPM, Madrid

Registration: http://www.amiando.com/romaworkshop

Software, documents and other stuff, ready for download!

2010-01-08T11:56:24Z

Today, we are excited to announce that a new section of downloads is available. In this section, users can find all the software developed within the project as well as public documents and dissemination material of Romulus.

From the software page, users can download different products developed within Romulus:

Roma Framework and IDE4Romulus allow developers to increase the productivity of the web software development, focused on Java, based on a domain driven design, MDA techniques and a metaframework.
MyCocktail and DERI Pipes improve the software productivity by using mashup oriented development.
Wapiti and ATP4Romulus help to enhance the quality of software development.

Also, all the public documents of the project can be downloaded from the documents section. These documents contain information and the results of the research realized within the project. This section is organized by the different topics of the project:

Publications, presentations and other dissemination material of Romulus are also available to be downloaded from this section.

We encourage you to enjoy with this new download section.

New version (2.2.1) of Wapiti

2010-01-07T16:24:31Z

A new version (2.2.1) of Wapiti is now available for download. In this release, identified bugs have been fixed and some improvements have been performed. The most important of them are:

Nikto attack: This new attack checks the security of the page by using the Nikto database.
Internationalization: Now, Wapiti is available in three languages: English, French and Spanish.

Wapiti is a black-box testing tool that allows you to audit the security of your web applications. It does not study the source code of the application, it scans the web pages of the deployed web applications, looking for scripts and forms where it can inject data. Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable.

Download the last version of Wapiti

Released TevereFlow, the first workflow engine with a Web Editor

2009-12-24T11:34:08Z

Starting from December 22nd 2009 is available the new version of TevereFlow.

Tevere Flow is a light-weight Workflow engine built using the Java® technology. Just download it and create your process using the Web interface. You can use Tevere as embedded or as external engine by using the provided Web Services API.

Tevere was built using Roma Framework under the Romulus consortium an it's currently used in several production systems.

Main features:

Open Source Apache 2.0 license
Web User Interface using the Ajax technology
Stand-alone application: just download and start it
Fully Transactional supporting any RDBMS or db4o ODBMS
Set of built-in commands available (email, web service invocation, etc.)
Auto-resume of failure activities
User and profile management
Activities can be written in Java or using any supported scripting language such as Javascript and Ruby
Integration via Java APIs or WebService

New brochure about Wapiti

2009-10-23T08:00:44Z

A new brochure about Wapiti Security Testing Tool is now available. Gesfor has just launched this brochure that contains information about this open source project for marketing purposes. Wapiti allows to audit the security of web applications and detect potencial vulnerabilities with a black box approach (launching attacks in the same way as a real attacker would do). Open Web Application Security Project (OWASP) has recognized the usefulness of this tool including Wapiti as Alpha OWASP Project and distributing Wapiti in the OWASP Live CD Project .

Brochure of Wapiti

"Semantic Powered Development tools" document is now released

2009-10-02T12:53:19Z

In the last months our work about Semantic aspects has been focused on the development of the methodology called Linked Data Driven Software Development (LD2SD).It is a light-weight Semantic Web methodology to turn software artefacts such as data from version control systems, bug tracking tools and source code into linked data. Once available as linked data, the related information from different sources is made explicit, allowing for a uniform query and integration.

The purpose of this research has been to carry out semi-automated annotation of resources and issues related to the development process. The goal is to provide added value regarding the software development process in order to make
it more effective and efficient. The main input data sources (Software artefacts) that are managed are bug reports (via JIRA),
contributions and dependencies (via Subversion), the source code (in Java), developer information and other related artefacts.

We have just released the results of our work in the document "Semantic Powered Development tools". It contains all the information related to the LD2SD that has been developed within the project.

European Commision Presidents application demo

2009-10-01T13:54:21Z

The European Commision Presidents application is a demonstration of what is possible to do with Roma Metaframework and the new version of Janus Wizard. This wizard generates automatically the code necessary (with the information extracted from a domain POJO) to create a Rich Client Application communicated with the server side though REST Services or DWR.

An important functionality, that also is generated automatically, is a faceted search thanks to the integration of Exhibit library. This search is performed completely in the client side and it allows users to search through many criteria. Besides the library provides an excellent rendering extensions, Janus automatically configures it and if the POJO contains dates, they will be rendered in a timeline, and if the POJO has addresses, in a Google Maps component.

From the point of view of the visual aspect, the application uses YAML which is a powerful (X)HTML/CSS Framework for creating modern and flexible floated layouts, with it, the developer can change the layouts of the pages from the initial configuration made by Janus. But Janus has also thought in the users with no knowledge of HTML and CSS and provides the JQuery UI ThemeRoller tool, which allows users to change on the fly the visual aspect of the application in a graphical way and then you can download the new theme and put it in the application easily.

The Romulus developer team encourage you to see the European Commision Presidents application and to download the Roma MetaFramework in order to you can try the benefits of develop with Roma Framework & Janus Wizard.

Eclipse Plugin version 1.4.1 released

2009-09-04T15:34:03Z

Eclipse Plugin 1.4.1 released

New Features

Roma <Meta> Framework v.2.0.2 supported
ATP4Romulus Integration

EclipsePlugin-1.4.1-linux.jar

EclipsePlugin-1.4.1-win32.jar

Released MyCocktail Module and a new version of Service Registry Module

2009-08-07T11:36:51Z

MyCocktail and Roma Metaframework are more integrated than ever. MyCocktail has been packed as Roma Module and now can be installed in Roma applications in order to consume the REST services published in them through the Roma Service Registry module. Once a REST service is registered, automatically is imported in MyCocktail and its data will be available to build mashups.

The Registry Module has been improved and now can register REST Services, the module also produces a subset of WADL which defines the service in machine-readable format. This WADL format can be read from MyCocktail to import new services. MyCocktail now have two different distributions, the standalone version and the Roma module version. The Roma module version of MyCocktail is available in Romulus repositories and can be installed using the Roma Wizard.

NetbeasPlugin 1.1 beta released

2009-08-04T10:44:21Z

NetbeansPlugin 1.1 beta has been released

New Features:

Generate Default Persistence
Generate Default I18N Entries
Extension-By-Composition Hierarchy View
- Class Refactoring Support
- Field Refactoring Support
- Method Refactoring Support

Netbeans Plugin 1.0 beta released

2009-07-13T14:58:42Z

NetbeansPlugin 1.0 beta has been released

Roma framework developement plugin is now available for netbeans 6.5.1 ide.

Features already implemented:

- Roma projects Generation
- Add Modules on Roma Projects
- Multi-editor tab for Roma Project Classes

Eclipse Plugin version 1.3.2 released

2009-07-06T10:54:02Z

New features:

Refactoring Support:

• if a rename, of a domain class, is performed, it will perform the renaming of the CRUD classes associated with domain classes.

Default Class Persistence Generator:

• new command able to generate default entries on the file package.jdo that contains a default persistence description of the domain class on which the command is applied.

Defauls I18N Entries Generator:

• new command able to generate default entries on the I18N files in order to automatic internationalizate fields and methods of the domain class on which the command is applied.

Romulus in the JITEL conference

2009-06-22T12:11:22Z

We are glad to notice that two articles about our research have been accepted to be presented and published in the next JITEL (Symposium on Telematics Engineering, 8th edition).
This conference will take place in Cartagena (Spain) from 15 to 17 September 2009 where new researches and advances will be presented.
The first article that we are going to present has been written by Pablo Martín, Guillermo Hernández, Carlos Ángel Iglesias, Luca Garulli and Giordano Maestro. It is about Janus, the new View Generator of Roma Framework that allows user to create new views based on templates.
The other article is focused on Semantic description of Web applications through microservices explaining our research about this topic. It explains the research realized by José Fernández-Villamor, Mercedes Garijo Ayestarán and Carlos Ángel Iglesias.

For more details, visit the official page of the Symposium (Spanish)
JITEL (Symposium on Telematics Engineering, 8th edition)

Romulus Demonstration at Internet of Services Collaboration Meeting

2009-06-16T14:19:45Z

Last week Romulus was present at Internet of Services Collaboration Meeting. The project was presenteat in serveral Collaboration working groups of this meeting (Service Engineering and Data Management) and also during the first day of the meeting, a Romulus Demonstration was shown to the participants. This demo showed how to create a Roma Application in a few minutes and then how to extend it with REST services in order to make mashups with MyCocktail tool. The demo has been uploaded to YouTube and it is accessible through the following link.

Eclipse Plugin version 1.3.1 released

2009-06-16T10:43:45Z

The Eclipse 1.3.1 comprehends:
- Refactor Support: it provides the refactoring of linked resources in a Roma projects

- class rename

renaming of associated files in the project and i18n files

- field rename

renaming of fields present on annotations, xml files, i18n files

- method rename

renaming of methods present on annotations, xml files, i18n files

- ATP4Romulus integration

- generate tests, previous configuration

- clean tests

- run tests

- i18n tab included in the multi-editor

- insert, edit, delete i18n fields

Presentation of Romulus in the INFODAY CHALLENGE 1

2009-06-03T14:52:15Z

This thurdsay, 4th June, Romulus will be presented in the INFODAY Challenge 2 at the E.T.S.I. Telecomucniación (Universidad Politécnica de Madrid), Spain. The INFODAY ICT Challenge 1 is organised by CDTI, the Spanish NCP.

Technical meeting in Madrid / Segovia (Spain)

2009-05-22T07:12:32Z

On 22^th , 23^rdand 24^th of April took place a technical meeting in Spain. This meeting was celebrated in two places. On 22^th and 24^th, all the partners met in the UPM University (Madrid) and on 23^rd in Segovia, a historical town close to Madrid declared Patrimony of Humanity by UNESCO.

In this meeting, some important topics about the Romulus project were discussed. The meeting was divided in different bilateral sessions between the related partners upon the subject. One of the principal topics was Janiculum, the new implementation of the View Aspect of Roma Framework based on JSPs that allows a new powerful way to customize user interfaces. Also, the integration between the different technologies of the project as Roma with Liferay and the other developed tools was a hot spot. The current status of the demonstrators development was evaluated and the next steps were defined to integrate the different parts and technologies.

At the end of the meeting, an action list was defined in order to accomplish the objectives of the project in the next months.

romulus in lankibide

2009-06-24T14:13:01Z

On April 28, 2009 has been a presentation of the "Contenidos a la Carta" project in Bilbao, within LANKIBIDE Day, a Basque Technology Forum to promote cooperation between SMEs, and that comes with the support of the Program Bultzatu de la Diputación Foral de Bizkaia. Its main objective is to create a Basque Technological Forum, whose mission is to promote new practices of collaboration and interoperability among SMEs, in order to provide an environment of cooperation among organizations, to promote innovation and development of Bizkaia, by promoting a cohesive and sustainable development.

The conference was organized by ESI-Tecnalia under the Project LANKIBIDE, and aims to publicize the progress of research on the practices of collaboration and interoperability for SMEs.

The presentation can be downloaded here

New release of Wapiti

2009-04-08T11:55:22Z

The version 2.1.0 of Wapiti has been released and is avaliable from Wapiti Web Site. The new main features are:

Web pages scanner is faster with the httplib2 library.
Blind SQL Injections detection was implemented.
Addition of more patterns for detecting file handling vulnerabilities in PHP.

On the other hand, we are glad to announce that Wapiti reached 20,000 downloads from SourceForge a few days ago. This encourages us to further improve the application. Thank you everyone for downloading Wapiti.