39 research outputs found

    Explaining the use of cryptographic API in Android malware

    No full text
    Cryptography allows for guaranteeing secure communications, concealing critical data from reverse engineering, or ensuring mobile users’ privacy. Android malware developers extensively leveraged cryptographic libraries to obfuscate and hide malicious behavior. Various system-based and third-party libraries provide cryptographic functionalities for Android, and their use and misuse by application developers have already been documented. This paper analyzes the use of cryptographic APIs in Android malware by comparing them to benign Android applications. In particular, Android applications released between 2012 and 2020 have been analyzed, and more than 1 million cryptographic API expressions have been gathered. We created a processing pipeline to produce a report to reveal trends and insights on how and why cryptography is employed in Android malware. Results showed that the usage of cryptographic APIs in malware differs from that made in benign applications. The different patterns in the use of cryptographic APIs in malware and benign applications have been further analyzed through the explanations of Android malware detectors based on machine learning approaches, showing how crypto-related features can improve detection performances. We observed that the transition to more robust cryptographic techniques is slower in Android malware than in benign applications

    A Longitudinal Study of Cryptographic API: a Decade of Android Malware

    No full text
    Cryptography has been extensively used in Android applications to guarantee secure communications, conceal critical data from reverse engineering, or ensure mobile users' privacy. Various system-based and third-party libraries for Android provide cryptographic functionalities, and previous works mainly explored the misuse of cryptographic API in benign applications. However, the role of cryptographic API has not yet been explored in Android malware. This paper performs a comprehensive, longitudinal analysis of cryptographic API in Android malware. In particular, we analyzed 603937603\,937 Android applications (half of them malicious, half benign) released between 20122012 and 20202020, gathering more than 1 million cryptographic API expressions. Our results reveal intriguing trends and insights on how and why cryptography is employed in Android malware. For instance, we point out the widespread use of weak hash functions and the late transition from insecure DES to AES. Additionally, we show that cryptography-related characteristics can help to improve the performance of learning-based systems in detecting malicious applications.Comment: Fix processing time dat

    A traffic flow with a bottelneck

    No full text
    Title: A traffic flow with a bottelneck Author: Adam Kovařík Department: Department of Numerical Mathematics Supervisor: prof. RNDr. Vladimír Janovský, DrSc. Supervisor's e-mail address: [email protected] Abstract: In this paper we study a microscopic follow-the-leader traffic model on a circu- lar road with a bottleneck. We assume that all drivers are identical and overtaking is not permitted. We sketch a small part of the rich dynamics of the model including Hopf and Neimark-Sacker bifurcations. We introduce so called POM and quasi-POM solutions and an algorithm how to search them. The main goal of this work is to investigate how the optimal velocity model with a bottleneck deals with so called aggressive behavior of dri- vers. The effect of variable reaction time and a combination of both named factors is also tested. Using numerical simulations we'll find out that aggressiveness and faster reactions have positive effect on traffic flow. In the end we discuss models with two bottlenecks and with one extraordinary driver. Keywords: dynamical systems, ODEs, traffic flow, bottleneck, aggressiveness.

    Challenges of virtual team leadership: Cisco systems case

    No full text
    In recent decades, a powerful trend has emerged in teams across organizational boundaries, as well as a dramatic change to the face-to-face aspects of common work relationships. The Internet and a quick development in electronic technologies have created an unprecedented ability to work together from a distance. In the conditions of every time more tough competition internationally, Cisco Systems, a multinational company of the US origin, acting in the area of networking equipment, is constantly striving to excel its performance via improving the technology, processes and investing into its human capital. Being one of the market leaders in the development of hardware and software enabling distant, or virtual, team work - Cisco itself has been largely using a model of virtual networks and virtual teams in various business units. In this thesis, the author explores the concept of a virtual team and conducts a study of sixteen virtual teams at Cisco Systems to evaluate the state of their current functioning, identify strengths and challenges, revise the existing managerial solutions and suggest improvements. As a result of the research, the author proposes a model of successful virtual team tailored for the environment of Cisco Systems accompanied with a series of recommendations, which could also be useful for other multinational companies.Durante as últimas decadas tem-se revelado uma forte tendência para a gestão das equipas para além das fronteiras organizacionais, dando origem a uma alteração profunda das relações de trabalho orientadas essencialmente para a componente presencial. A Internet e a rápida evolução das tecnologias de informação criaram uma oportunidade única para o trabalho à distância. Num cenário cada vez maior de competitividade internacional, a Cisco Systems, uma empresa multinacional de origem norte-americana, focada na área dos equipamentos de rede e comunicações, na sua constante procura da excelência de desempenho, apostou na melhoria contínua da tecnologia, dos processos e do investimento no seu capital humano. Sendo um dos líderes do mercado no desenvolvimento de hardware e software, que possibilita o trabalho à distância, ou o trabalho virtual – a própria Cisco tem recorrido largamente ao modelo de redes virtuais e equipas virtuais nos seus diversos departamentos. Na presente tese, o autor explora o conceito da equipa virtual e elabora um estudo baseado em 16 equipas virtuais da Cisco Systems, por forma a avaliar a prática atual, identificando os pontos fortes e os desafios, revendo as soluções existentes de gestão e propondo melhorias. Como resultado da pesquisa, o autor sugere um modelo de sucesso assente em equipas virtuais adequada ao ambiente da Cisco Systems, lançando um conjunto de recomendações, que possam ser úteis a outras empresas multinacionais

    The relationship between early maladaptive schemas and interpersonal problems - Dataset

    No full text
    <b>Funding Source</b><br/>Australian Government Research Training Program ScholarshipThis dataset is based on series of three studies conducted as part of a PhD thesis for the award of Doctor of Philosophy (Clinical Psychology). The thesis investigated the relationship between early maladaptive schemas (EMS) from the schema therapy model and their relationship with interpersonal problems. The dataset for study one is based on a metaanalysis investigating the correlations between early maladaptive schemas and measures of interpersonal relationship problems from the available research as systematically reviewed in 2019. The remaining two datasets were sampled from a first-year psychology student participant pool at the University of New England. The dataset from study two is based on a repeated measures experiment which assessed participant responses and EMS scores following a series of interpersonal vignettes depicting acceptance, ambiguous rejection and rejection. The responses from study two included measures of perceived emotional distress and negative cognitions measured quantitatively and a series of written actions coded qualitatively using inductive content analysis. The dataset from study three consists of crosssectional survey data including measures for EMSs, cognitive emotion regulation strategies, trait-mindfulness and trait-tendencies for problematic interpersonal behaviour patterns. Together these datasets found support for a link between EMSs and low trait-mindfulness, increased emotional distress, negative cognitions and trait-tendencies for problematic interpersonal behaviour patterns

    Bringing Kleptography to Real-World TLS

    No full text
    Part 2: Real WorldInternational audienceKleptography is a study of stealing information securely and subliminally from black-box cryptographic devices. The stolen information is exfiltrated from the device via a backdoored algorithm inside an asymmetricaly encrypted subliminal channel. In this paper, the kleptography setting for the TLS protocol is addressed. While earlier proposals of asymmetric backdoors for TLS lacked the desired properties or were impractical, this work shows that a feasible asymmetric backdoor can be derived for TLS. First, the paper revisits the existing proposals of kleptographic backdoors for TLS of version 1.2 and lower. Next, advances of the proposal by Gołębiewski et al. are presented to achieve better security and indistinguishability. Then, the enhanced backdoor is translated both to TLS 1.2 and 1.3, achieving first practical solution. Properties of the backdoor are proven and its feasibility is demonstrated by implementing it as a proof-of-concept into the OpenSSL library. Finally, performance of the backdoor is evaluated and studied as a tool for side-channel detection

    The relationship between early maladaptive schemas and cognitive, emotional and behavioural responses in interpersonal relationships

    No full text
    Interpersonal problems are broadly defined as chronic interpersonal performance issues which can comprise of interpersonal distress, unhelpful cognitive appraisals and behavioural responses to interpersonal situations and negative interpersonal outcomes (e.g. divorce). These are distinguished from interpersonal skills deficits which presume a person simply lacks the ability to act appropriately in interpersonal situations (Leising et al., 2011). Interpersonal problems can have adverse impacts on psychological wellbeing and are some of the most common reasons people present for psychological treatment (Mckay et al., 2012). This thesis investigated Young et al's (2003) early maladaptive schemas (EMS) from the schema therapy model and their relationship with interpersonal problems. In particular, this thesis attempted to clarify the existing evidence available for the relationship between EMS and interpersonal problems and develop a greater understanding for how EMS might be associated with interpersonal problems. Study one aimed to assess the magnitude of the association and potential moderators on the relationship between EMS and interpersonal problems. A total of 49 empirical studies were systematically reviewed and a meta-analysis was performed on reported correlations between EMSs and interpersonal problems using the PRISMA guidelines for systematic reviews. Study one found EMS to have a moderate positive association with interpersonal problems with EMS in the rejection and disconnection domain having the highest correlations with interpersonal problems. The strength of the association between EMS and interpersonal problems was found to be weaker in intimate relationships, when assessed by significant others and when assessing more specific types of interpersonal behaviour (e.g. aggression versus general problematic trait interpersonal tendencies). Limited experimental or longitudinal studies were found supporting a causal relationship between EMS on interpersonal problems. Study two designed a novel experimental paradigm for assessing the relationship between EMS and interpersonal problems. Study two consisted of 168 university students where degree of rejection was manipulated in a series of interpersonal vignettes. Study two aimed to assess if EMS moderated the casual relationship between different interpersonal contexts and the emotional, cognitive and behavioural responses to those contexts. Rejection was found to predict emotional, cognitive and behavioural responses and people reporting higher EMS reported higher levels of emotional distress and negative cognitions but no differences in behavioural responses. People reporting higher EMS also reported increased emotional distress and select negative cognitions as the degree of rejection in the interpersonal situation increased. Study three aimed to assess whether EMS are associated with trait tendencies to selectively attend to our environment and whether this was associated with increased interpersonal problems. This aim was achieved by assessing whether trait-mindfulness mediated the relationship between EMS and interpersonal problems. Utilising a sample of 117 university students, study three found both EMS and interpersonal problems to be negatively associated with trait-mindfulness. Decreases in select facets of trait-mindfulness were found to mediate the relationship between EMS and interpersonal problems including reduced tendencies to objectively describe and accept events in our environment without passing judgement. Together the findings of this thesis present consistent support for an association between EMS and interpersonal problems but find that the strength of this association might vary based on types of interpersonal relationships, measures of interpersonal problems and reporters used to assess interpersonal problems. This thesis provides one of the first experimental methods for assessing the relationship between EMS and interpersonal problems by manipulating the interpersonal situation (e.g. degrees of rejection) and assessing the changes in interpersonal responses to that situation. This thesis also argues that EMS might be associated with interpersonal problems by restricting attention, increasing emotional distress and negative cognitive reactions to interpersonal situations. This thesis found that EMS might be less likely to predict interpersonal behaviour and that interpersonal behaviour is more likely to vary based on the interpersonal situation

    Trait mindfulness mediates the relationship between early maladaptive schema and interpersonal problems

    No full text
    Objective:This study investigated whether early maladaptive schemas (EMSs) are associated with interpersonal problems and whether this relationship is mediated by trait mindfulness.Method:One hundred and seventeen participants (M = 34.66, SD = 17.14) were recruited and completed measures of EMSs (Young Schema Questionnaire, Short Form, Version 3; YSQ-SF-3), trait mindfulness (Kentucky Inventory of Mindfulness Skills; KIMS) and interpersonal problems (Inventory of Interpersonal Problems-32; IIP-32).Results:The number of EMSs endorsed by an individual at a clinically significant level was negatively associated with trait mindfulness and positively associated with interpersonal problems. Trait mindfulness was negatively associated with interpersonal problems. Only the describing and accepting without judgement facets of trait mindfulness were found to mediate the relationship between EMS endorsement and interpersonal problems.Conclusions:The relationship between EMSs and interpersonal problems may partially operate through some facets of trait mindfulness. Implications for future research and clinical practice are discussed

    What Do Chemical Engineers Do, Exactly?

    No full text
    abstract: When it comes to the topic of chemical engineering, the general public has a set of neutral, if slightly uninformed perceptions that are largely tempered by the initial emotional responses to the field and its associated topics. These topics include the differentiation between chemical engineers and chemists, the importance and potential danger of the products they produce, as well as the association of the subject matter with less than favorable secondary education experiences. This thesis consists of first assessing the opinions of a population meant to represent the general public regarding these subjects, then exploring the potential improvements of opinion and understanding that may be yielded from presenting the subject matter by way of a concise learning tool, such as a video. The results of this effort showed that factual understanding can be at least incrementally improved for 18% of participants through this method, while the effect on opinions can range from being improved to maintaining an enduring indifference, with an average of 17% of participants seeing improvement. Further iteration of this methodology with more consistent, impartial survey methods and refined questions could potentially yield more noteworthy improvements within the subjective domain, with the resultant learning tool of that iteration being applicable as not only an instrument of educating the general public, but also as a means to recruit potential students to the ASU chemical engineering degree program

    Does fiscal decentralization improve health outcomes? - evidence from a cross-country analysis

    No full text
    Decentralization of fiscal responsibilities has emerged as a primary objective on the agendas of national governments, and international organizations alike. Yet there is little empirical evidence on the potential benefits of this intervention. The authors fill in some quantitative evidence. Using panel data on infant mortality rates, GDP per capita, and the share of public expenditures managed by local governments, they find greater fiscal decentralization is consistently associated with lower mortality rates. The results suggest that the benefits of fiscal decentralization are particularly important for poor countries. They suggest also that the positive effects of fiscal decentralization on infant mortality, are greater in institutional environments that promote political rights. Fiscal decentralization also appears to be a mechanism for improving health outcomes in environments with a high level of ethno-linguistic fractionalization, however, the benefits from fiscal decentralization tend to be smaller.National Governance,Health Economics&Finance,Banks&Banking Reform,Economic Theory&Research,Municipal Financial Management
    corecore