Rich Web Applications: the business benefits of Web-enabled application development.

MANAGEMENT SUMMARY

CATALYST

Rich Web Applications (RWAs) are browser-based, Rich Internet Applications (RIAs). They exploit new Application Programming Interfaces (APIs) in browsers that allow users to interact with a page on the Web as they would a desktop application. The conjunction of RWA, Web 2.0 for business (or Enterprise Web 2.0), and evolutionary changes in IT infrastructure like Service Oriented Architecture (SOA), are creating new opportunities for business. Note on terminology: The IT industry uses the terms RIA and RWA interchangeably; however, we make a technical distinction in this Report. RIA applies to any client-server system connected by the Internet, whereas RWA covers a sub-set of RIA that is World Wide Web browser-based.

Key Findings

* RIA will be the default mode in application development as the Internet further progresses its transition from technology to part of the fabric of everyday society.

* RWA and Web 2.0 ideas are being transferred to Enterprise Web 2.0, opening up new business opportunities, such as rapid business process development and reuse.

* Security deficiencies mean that mixing Web services (or mashing) in Enterprise Web 2.0-type applications cannot yet extend safely beyond the firewall.

* Currently, businesses need separate security policies for Internet and Intranet Web services. Intranet Web services must never be risked beyond the firewall and therefore need to be governed.

* The progress of SOA and Business Process Management (BPM) into the enterprise will require presentation-layer applications, for which RWA are ideal.

* RIA will feed into other areas of IT, so that Web-enabled IT products will have richer user interfaces; for example, in Business Intelligence.

* Software-as-a-Service (SaaS) will be given a significant technology enhancement by RWA, making it more attractive to customers.

* RWAs are now on the boundary between early adopter and early mainstream stages.

The Internet is transforming society and business. The current wave of this technology revolution, called Web 2.0, followed the initial wave (Web 1.0) that collapsed with the dot.com boom and bust. Today, 'always-on', pervasive broadband is making access to the Internet easy enough for it to be no longer considered as a 'technology' but a part of the fabric of modern living, like the telephone or television. The key advantages of using the Internet can be summed up as 'always on and everywhere', reachable from mobile devices, laptops, and desktop machines.

Innovations in modern browsers allowed vendors to build the first RWA: applications which could split the application logic between presentation logic that runs on the client-side and business logic and data models that run on the server-side. The rich Web application User Interface (UI) is as 'rich' as in desktop applications, and runs in the browser using a combination of languages. One of the pioneering vendors--Adaptive Systems--called this approach Asynchronous JavaScript And XML (AJAX--although the preferred naming culture is now just Ajax). All modern browsers support JavaScript and this means that with Ajax there is just a small JavaScript rendering engine which is downloaded and held in memory while the application is running.

Today, additional technologies compete with Ajax to provide a similar concept of desktop-like behaviour, but with superior multimedia capabilities--browser plug-ins such as Adobe Flash Player and, the recent entrant to the market, Microsoft Silverlight. In addition, RWA solutions are also possible with the Java platform and with Microsoft .NET Framework version 3.

Business Issues

The Web is increasingly important for business. A measure of how business has turned to this medium is revealed by the latest advertising expenditure figures. They show that for the first time, on-line advertising in the UK has exceeded that of national newspapers, at UK[pounds sterling]2 billion. It is also the fastest growing at 41%, when TV, the highest sector, is showing a small decline. This level of advertising is rewarding UK business with on-line retail revenue earnings of UK[pounds sterling]3.6 billion in 2006 (according to IMRG). Furthermore, the Web is almost the equal to TV in holding on to peoples' time, making it the place to reach out to new and existing consumers. This business activity is just one indication of why the Web is important for business. Businesses need to devise a Web strategy, and the question of using RWA, as well as experimenting with Web 2.0 concepts, should be part of the consideration process. The implications of RWA for business are multi-fold and can be summarised as follows:

* Internal use of RWA for providing the presentation layer to SOA.

* Internal use of RWA for providing the presentation layer in composite applications, such as mixing Web services and other data sources, including enterprise applications and legacy systems.

* Helping re-engineer business processes for rapid reaction to business opportunities.

* Moving application development from silo, departmental activity, to a Web-based one with greater potential for reuse. For example, an internal Software-as-a-Service model.

* New security risks related to RWA that need addressing.

The drivers behind consumer-led Web 2.0 are also relevant to businesses: these concepts are being transferred to what is called 'Enterprise Web 2.0'. Table 1 shows the distinguishing features of Web 2.0, compared with the first wave of Web development, and these include:

* Multimedia content in contrast with document-centric HyperText Markup Language (HTML).

* Facilities for users to upload as well as download; for example, the growth of Flickr, Friends Reunited, MySpace, Wikipedia, and YouTube are all due to user-added content.

* The Internet becomes the 'platform' with mashups that combine Web services to create new applications; for example, Bikely mashes Google maps to help plan bicycle routes, and Zillow mashes maps and real-estate information.

* Applications are no longer constrained by HTML and single-channel response/request; with RIAs a second channel can be used to work in the background, managing data more efficiently between client and server, while the user interacts with the UI.

* Web 2.0 allows a Web strategy to go beyond simply exploiting reach; now Web services and Web applications can be used in unforeseen ways, leading to emergent value.

The move within enterprises to SOA and internal Web services creates opportunities for Intranet mashups, exploiting reuse to good effect and allowing business power users to rapidly respond to business opportunities. With Enterprise Web 2.0, power users can transform and re-combine internal business processes in new ways.

The use of RWA is already evident within the IT industry as, for example, Business Intelligence vendors provide the option of Web access to applications with rich UIs. RWA also improves the SaaS proposition, as application interfaces become comparable to those on the desktop; Butler Group expects to see SaaS adoption increase as a result. SaaS is a software delivery model where the provider offers a hosted application across the Internet. Customers access the application using a Web interface and pay for usage according to various licensing models: per instance use, per allocated time, or on a subscription basis. The use of RWA for the UI offers a considerable way to improve the user experience, making SaaS a more attractive proposition.

The concept of mixing Web services, or mashups, is also an important part of Web 2.0; for example, geo-mapping information is combined with other specialist information to create a new service (e.g. www.housingmaps.com combines Google maps and Craigs List rented accommodation information to visually show rental availability).

However, addressing security is important if these types of applications are to succeed. Businesses need to implement separate policies for Internet and Intranet RWA; Internet exposure of Web services should not take place without strong security and governance in place.

Technology Issues

Software application development is currently going through a transition, extending the most common architecture of multi-tier client/server, to composite applications and RIA. Of course the idea of 'client-side' and 'server-side' remains unchanged in RIA, but the distinction is that traditional client/server systems are separated by Local Area Networks and/or Wide Area Networks, whereas with RIA the Transmission Control Protocol/Internet Protocol (TCP/IP) protocol is used, whether on the Internet or Intranet. Composite applications are built from components, objects, and Web services within a loosely-coupled, standardised application environment created by SOA. RIAs provide a natural presentation layer for applications built within SOA.

The types of RIA fall into three main categories: browser-based with no plug-ins; browser-based with plug-ins; and out-of-browser. Butler Group uses the term 'RWAs' to refer to browser-based RIAs. The open literature uses RIA and RWA interchangeably in an unclear manner without distinguishing the possibility for non-Web-related protocols that could be used on TCP/IP. However, the market at the moment is active mainly with RWA.

Browser-based Applications

Browser-based applications connect to the World Wide Web (Web) using the Hypertext Transfer Protocol (HTTP). Most Internet activity today revolves around Web sites and Web applications. RWAs using Ajax render the presentation in HTML within the browser. Although such applications are rich in the UI interaction, they are limited in richness of multimedia content.

Browser Plug-ins

Browser plug-ins enhance the functionality available in the browser and especially so for multimedia content; examples are Adobe Flash, Java Runtime Engine and Applets, and Microsoft Silverlight.

Out-of-browser RIA

The third category of RIA takes the application out of the browser. It is possible to build applications that connect via the Internet outside the browser using a number of protocols, not just HTTP (the Web protocol), and for custom, in-house applications this is an option to be considered. There is another mode of use where applications can be taken off-line when the user is away from an Internet connection--for example, when working in the field with a customer--and then re-connect later to synchronise with the back-end.

Some of the benefits of working with RIA, explored in greater depth in this Report, include:

* Ease of application administration, maintenance, and update through a centralised server-side point.

* Ease of application delivery via Internet/Intranet.

* Complements Web services, composite applications, and SOA.

* Encourages reuse through a clear separation of presentation layer, business logic, and data model.

* Makes it easy to create a single application with multiple presentation client-sides: mobile devices or fixed machines.

* Reduces spread of application viruses through centralised control of application on the server-side.

* Can cater for a range of thin to fat options on the client-side.

The versatility that RIAs provide, when combined with other trends in the IT infrastructure (such as SOA), will lead to a point, in Butler Group's opinion, when RIA will become the default mode of application delivery.

An issue of paramount importance is security. However, with RIA the onus has shifted back to the client-side, but this time to the application itself. In particular, Ajax-based RIAs introduce new attack possibilities through the use of malicious JavaScript--this is not a weakness of JavaScript or a problem inherent in Ajax, it is simply that browsers were built for a simpler, more constrained display of information, and writing secure RIA is difficult for new programmers. There are guidelines being published to help educate developers, and advanced Ajax frameworks also remove this threat by being built with security in mind. The other types of RIA also have robust security, including those based on Adobe Flash, the Java platform, and Microsoft .NET.

Butler Group advocates creating separate Web services and RIA policies for Intranet and Internet use; in particular, internally created Web services must not be accessed from the Internet without first passing through internal governance controls. The idea that Enterprise 2.0 mashups can be created by combining external Web services with internal ones is too early and currently unsafe.

Market Issues

The types of RIA vendors can be categorised as follows:

* Ajax toolkits and widget libraries: There are both open source software and commercially-priced examples. This category will be used by developers wishing to build RIA from the ground up as custom software. For general business use, this category is not relevant.

* Pure Ajax frameworks with light client-side footprints: In this category there are advanced Ajax frameworks that manage the communication between user interaction and widgets and application state synchronisation between the client- and server- sides. They also provide robust security measures, have compatible widget libraries out-of-the-box, and provide their own Integrated Development Environments (IDEs) or RIA builder plug-ins to standard IDEs.

* RIA with browser plug-ins: Whereas Ajax renders in HTML, a browser plug-in can provide a container for the rendering of advanced formats such as vector graphics. Examples are Adobe Flash player, Java Applets, and Microsoft Silverlight.

* RIA with heavy client-side application platforms: Applications built with the Java platform or Microsoft .NET Framework on the client-side fall into this category. These applications can connect to servers using the Internet outside the browser or combine with Ajax and use the browser.

* End-to-end application development environments: Whereas the other categories are tools designed for programmers, there are end-to-end development environments with advanced Graphical User Interface (GUI) drag-and-drop facilities for creating RIA. These tools can be used by power users, domain experts, and business analysts with limited programming skills.

* Rest of the market: A number of proprietary RIA solutions are still available (such as Curl), but given the move towards open standards, it is unlikely they will grow; rather we expect decrease in market share. Butler Group expects RIA vendor rationalisation to take place as market adoption increases. The greatest market adoption in RIA is currently in RWA, which is past the early adopter stage and into the early majority. The chief market trend in RWA is for existing Web development tools to add their own Ajax capability.

The larger vendors, such as Adobe, Microsoft, and TIBCO, are appealing to the developer mass market and offer free tools to grow the market for their premium, enterprise products. Sun is also appealing to the developer community by providing its tools as open source in order to grow the Java platform. IBM supports open source Eclipse and many Web 2.0 projects, including the DoJo Ajax toolkit provider. We believe it likely that IBM will make an acquisition in this space.

Smaller players have a more business-focused, go-to-market strategy, appealing to business needs rather than the IT department. Opportunities occur in the Small- to Medium-sized Enterprise (SME) market and at departmental levels within large organisations, where providing a solution that encompasses business requirements gathering, development processes and Agile methodologies, and with supporting development tools, will prove to be attractive.

The end-to-end, Web-based application development tool providers, notably edge IPK and OutSystems, enable power users and business analysts to create applications. For the right customer and business requirements these tools make a good choice.

The toolkit projects--many that are open source and appearing in our Vendor Profiles, in Section 8--are mainly aimed at the mass developer market and also feed into higher-value frameworks.

Conclusion As the Internet progresses in its transition from a 'technology' to part of the everyday fabric of society, then more business services and applications will be based on its presence. To be part of this trend, businesses need tostart an internal RWA investigation, if they have not already done so, to understand the skills they require and which applications they need to build. This Report will help in selecting the right technology, implementing the right roll-out strategy, and choosing an appropriate RWA development tool or tools.

www.butlergroup.com

Table 1.

Table 1: Characterising Web 2.0

                Web 1.0        Web 2.0

User Interface  HTML           Rich, multimedia
Data            User Consumes  User creates and consumes
Platform        Server-side    The whole Web
Applications    Constrained    Web services, mashups, RIAs
Strategy        Reach          Self-service, self-organised, emergent
                                 value

Source: Butler Group
DATAMONITOR