title: An Extensible Web Application Vulnerability Assessment and Testing Framework

authors: Delamore, Baden

abstract: The process of identifying vulnerabilities in web services plays an integral role in reducing risk to an organisation that seeks to protect their intellectual property and data. The process itself generally involves an automated scan that looks for software misconfigurations, outdated services and exposures that may lead to defacement, data loss or system compromise. However, even with myriad open-source and commercial applications that provide automated vulnerability assessments, the frequency of large scale data breaches and exploitation by adversaries is continuing to increase. This thesis presents a framework that enables not only the skilled security professional to accurately assess the risk of vulnerabilities in web servers, but also empowers non-technical users to scan their web servers and find out the implications of vulnerabilities in their systems. This is achieved by building a user-centric solution which addresses the gaps identified in previous work, and focuses on the most critical vulnerabilities outlined by two major security research organisations.

text: An Extensible Web Application Vulnerability Assessment and Testing Framework The process of identifying vulnerabilities in web services plays an integral role in reducing risk to an organisation that seeks to protect their intellectual property and data. The process itself generally involves an automated scan that looks for software misconfigurations, outdated services and exposures that may lead to defacement, data loss or system compromise. However, even with myriad open-source and commercial applications that provide automated vulnerability assessments, the frequency of large scale data breaches and exploitation by adversaries is continuing to increase. This thesis presents a framework that enables not only the skilled security professional to accurately assess the risk of vulnerabilities in web servers, but also empowers non-technical users to scan their web servers and find out the implications of vulnerabilities in their systems. This is achieved by building a user-centric solution which addresses the gaps identified in previous work, and focuses on the most critical vulnerabilities outlined by two major security research organisations.

year: 2014

title: Integrating technology in tertiary level English Language programmes: Case studies of Moodle learning environments

authors: Ramanair, Joseph

subjects: Technology

abstract: While the potential of technology to enhance language pedagogy has been realised in some English language learning environments, there are contexts in which its use has failed to achieve its promise. Teachers’ use of technology has also often been described as uneven or limited with the tendency of technology to be used on the periphery or on an ‘ad hoc’ basis. These gaps have provided the basis for this doctoral level study to investigate the integration of Moodle into English language programmes offered at two tertiary institutions in New Zealand. This study adopted the concept of “normalisation” (Bax, 2000, 2003) as the research perspective. 

The conceptual framework for the research was developed based on five areas that explored teacher learning and thinking, and how these processes interacted with the complexities in the educational environment. The framework consists of technological pedagogical content knowledge (TPACK), sociocultural theory as applied to teacher learning, Activity Theory, language pedagogy, and the challenges of integrating technology in the context of tertiary-level English language classrooms.

The research followed a qualitative case study design. The English language programme was planned as the boundary for each case. Data collection involved the use of semi-structured interviews, classroom observations, and work-together sessions, which were conducted at the two case study sites. The main participants included teachers, with participation from students and other key informants.  Data were collected over a period of twelve weeks in case study site one and eighteen weeks at site two.  All data were thematically analysed using an inductive approach.

The findings from each case study were reported based on three categories in the Activity Theory framework: the object of the activity (its purpose), division of labour, and rules. The analysis of the findings in case study site one revealed one purpose (object) for using Moodle in the tertiary level English language programme, which was to use text-based, asynchronous activities to prepare the students to speak in the classroom and develop their speaking skills. However, at case study site two, two purposes (objects) for Moodle use were identified. These were to use text-based, asynchronous activities to prepare the students to speak in the classroom to develop their speaking skills and to provide them with a bank of text-based resources for language learning. This unanticipated finding challenged the notion of the language programme as the boundary for a case and resulted in each purpose (object) functioning instead as a boundary for a case study. The result was that the single case study at site two was analysed and is reported as two case studies. The findings also revealed how the teachers interacted with their students and the relationships between the teachers (division of labour). The teachers experienced tensions within the existing practices and policies (rules) at each case study site.

Three key themes emerged from the findings. The first was that the teachers lacked a valid and clear conceptualisation of the purpose (object) for using Moodle. This theme illustrates the importance of a language syllabus, teachers’ pedagogical content knowledge for effective language pedagogy, and task-based language learning. The second theme concerned the teachers’ conceptualisation of the role of technology in realising the purpose (improvement of speaking competence and availability of resources for language learning). The role of Moodle in scaffolding students’ learning to realise the object and the misconception that teaching in the online environment is the same as teaching in the face-to-face in the classroom are discussed. The third theme related to the individual teacher in the context of a learning community, especially the teacher’s responsiveness to innovation and the uptake of opportunities for professional learning.

This research suggests three important factors that should be explicitly considered when integrating technology into tertiary English language programmes: teacher development, the language syllabus, and the learning community. All of these factors relate, are interconnected, and need to be considered in order for technology to be normalised in English language programmes and for the potential of technology to be realised in practice.

text: Integrating technology in tertiary level English Language programmes: Case studies of Moodle learning environments While the potential of technology to enhance language pedagogy has been realised in some English language learning environments, there are contexts in which its use has failed to achieve its promise. Teachers’ use of technology has also often been described as uneven or limited with the tendency of technology to be used on the periphery or on an ‘ad hoc’ basis. These gaps have provided the basis for this doctoral level study to investigate the integration of Moodle into English language programmes offered at two tertiary institutions in New Zealand. This study adopted the concept of “normalisation” (Bax, 2000, 2003) as the research perspective. 

The conceptual framework for the research was developed based on five areas that explored teacher learning and thinking, and how these processes interacted with the complexities in the educational environment. The framework consists of technological pedagogical content knowledge (TPACK), sociocultural theory as applied to teacher learning, Activity Theory, language pedagogy, and the challenges of integrating technology in the context of tertiary-level English language classrooms.

The research followed a qualitative case study design. The English language programme was planned as the boundary for each case. Data collection involved the use of semi-structured interviews, classroom observations, and work-together sessions, which were conducted at the two case study sites. The main participants included teachers, with participation from students and other key informants.  Data were collected over a period of twelve weeks in case study site one and eighteen weeks at site two.  All data were thematically analysed using an inductive approach.

The findings from each case study were reported based on three categories in the Activity Theory framework: the object of the activity (its purpose), division of labour, and rules. The analysis of the findings in case study site one revealed one purpose (object) for using Moodle in the tertiary level English language programme, which was to use text-based, asynchronous activities to prepare the students to speak in the classroom and develop their speaking skills. However, at case study site two, two purposes (objects) for Moodle use were identified. These were to use text-based, asynchronous activities to prepare the students to speak in the classroom to develop their speaking skills and to provide them with a bank of text-based resources for language learning. This unanticipated finding challenged the notion of the language programme as the boundary for a case and resulted in each purpose (object) functioning instead as a boundary for a case study. The result was that the single case study at site two was analysed and is reported as two case studies. The findings also revealed how the teachers interacted with their students and the relationships between the teachers (division of labour). The teachers experienced tensions within the existing practices and policies (rules) at each case study site.

Three key themes emerged from the findings. The first was that the teachers lacked a valid and clear conceptualisation of the purpose (object) for using Moodle. This theme illustrates the importance of a language syllabus, teachers’ pedagogical content knowledge for effective language pedagogy, and task-based language learning. The second theme concerned the teachers’ conceptualisation of the role of technology in realising the purpose (improvement of speaking competence and availability of resources for language learning). The role of Moodle in scaffolding students’ learning to realise the object and the misconception that teaching in the online environment is the same as teaching in the face-to-face in the classroom are discussed. The third theme related to the individual teacher in the context of a learning community, especially the teacher’s responsiveness to innovation and the uptake of opportunities for professional learning.

This research suggests three important factors that should be explicitly considered when integrating technology into tertiary English language programmes: teacher development, the language syllabus, and the learning community. All of these factors relate, are interconnected, and need to be considered in order for technology to be normalised in English language programmes and for the potential of technology to be realised in practice.

year: 2014

title: Machine translation for te reo Māori

authors: Keegan, Te Taka Adrian Gregory

abstract: What is Machine Translation? Machine Translation (MT) is a process where computer software is used to translate texts from one natural (or spoken) language to another. Early research centred on two distinct approaches: Rules Based Machine Translation (RBMT) and Statistical Machine Translation (SMT). In simple terms RBMT makes use of large sets of linguistic rules that define languages whereas SMT uses statistical techniques to build language models from large language corpora. Increases in computing power and the amount of language corpora available has meant that SMT had become the preferred option with recent advances in neural networks also being applied to improve the accuracy of SMT. For commercial reasons, this is an area of research that has generated a lot of interest and funding support from some major international computer companies, including Google¹,Microsoft² and Facebook³.
Why is Machine Translation important for te reo Māori? A te reo Māori purist may argue that it is not important to focus activities on having a machine undertake translations for te reo Māori; if people want to understand te reo Māori then they should put in the effort to learn the language. This line of reasoning is difficult to argue with. But, from a Māori language activist perspective the value of MT is not so much in the translation of te reo Māori to (say) English, but rather the translation of English to te reo Māori. If this translation can be done efficiently, with low costs, it will assist in the proliferation of te reo Māori into new contexts, new environments and will assist its normalisation in New Zealand's society.
At this time, two of the major international companies, Google and Microsoft, have invested significantly in MT for te reo Māori. This paper summarises their endeavours and reports on the quality of translations they have been able to generate.

text: Machine translation for te reo Māori What is Machine Translation? Machine Translation (MT) is a process where computer software is used to translate texts from one natural (or spoken) language to another. Early research centred on two distinct approaches: Rules Based Machine Translation (RBMT) and Statistical Machine Translation (SMT). In simple terms RBMT makes use of large sets of linguistic rules that define languages whereas SMT uses statistical techniques to build language models from large language corpora. Increases in computing power and the amount of language corpora available has meant that SMT had become the preferred option with recent advances in neural networks also being applied to improve the accuracy of SMT. For commercial reasons, this is an area of research that has generated a lot of interest and funding support from some major international computer companies, including Google¹,Microsoft² and Facebook³.
Why is Machine Translation important for te reo Māori? A te reo Māori purist may argue that it is not important to focus activities on having a machine undertake translations for te reo Māori; if people want to understand te reo Māori then they should put in the effort to learn the language. This line of reasoning is difficult to argue with. But, from a Māori language activist perspective the value of MT is not so much in the translation of te reo Māori to (say) English, but rather the translation of English to te reo Māori. If this translation can be done efficiently, with low costs, it will assist in the proliferation of te reo Māori into new contexts, new environments and will assist its normalisation in New Zealand's society.
At this time, two of the major international companies, Google and Microsoft, have invested significantly in MT for te reo Māori. This paper summarises their endeavours and reports on the quality of translations they have been able to generate.

year: 2017