102 research outputs found

    Practical least privilege for cross-origin interactions on mobile operating systems

    Get PDF
    Mobile operating systems (i.e., mobile platforms) favor flexibility and re-usability as design principles and provide mobile applications with channels for establishing cross-origin interactions in an effort to realize these principles. Under this cross-origin scheme, applications accomplish tasks collaboratively with other principals, such as the web, other applications, and system components, by relying on them for certain functionality and data, considerably saving platform resources as well as the programming efforts of application developers. While clearly helping to provide a captivating mobile experience, this rich set of interactions within mobile platforms unfortunately also create significant attack vectors and pose notable security risks that need to be carefully taken into account to ensure the security of the platform. In this thesis, we focus on the security of cross-origin interaction channels on mobile operating systems. We choose Android as a use case due to its popularity and open source and show that cross-origin interactions constitute a significant impediment to establishing least privilege on Android. More specifically, we show that there are severe issues in the security mechanisms that are put in place by Android or even a lack of adequate mechanisms to protect these interactions, which enable adversaries to stealthily obtain sensitive user data, high-risk platform resources, and application functionalities. We demonstrate the severity of these vulnerabilities by our measurement studies and showcases of exploits on popular real-world applications with millions of downloads on Google Play and show that a majority of Android users are rendered vulnerable due to these critical issues. As a remedy, we propose practical designs that strive to make Android more robust and secure by addressing the problems with cross-origin channels in a systematic, effective, and efficient manner. In particular, we show that mobile applications that utilize embedded web browsers are under the risk of inadvertently exposing critical resources to untrusted web domains and we propose a systematic and practical access control mechanism to address this issue. Additionally, we disclose serious vulnerabilities in Android's permission framework that put inter-process communication and platform resources at severe risk and we redesign Android permissions to systematically resolve the issues. Finally, we present new attacks on Android's runtime permissions which proves that this new permission model cannot satisfy its key security guarantees due to design issues and vulnerabilities, jeopardizing the security of platform resources. We discuss the current approach taken by Android to mitigate these issues and demonstrate how this mechanism, although seemingly an ideal solution, is still intrinsically broken due to the existing vulnerabilities that we discovered. All in all, this thesis aims to identify issues that threaten least privilege on mobile platforms and strives to provide practical mitigation solutions to resolve such issues. Our work has influenced the design and implementation of some of the critical security mechanisms in Android and has consequently led to changes in the official Android releases by Google. Even though we used Android as a use case here, the issues we disclosed in this thesis can also be encountered on other mobile platforms that utilize cross-origin interactions and our methodologies and designs go beyond Android to the design of mobile operating systems more generally.Submission published under a 24 month embargo labeled 'Closed Access', the embargo will last until 2021-08-01The student, Guliz Tuncay, accepted the attached license on 2019-07-10 at 14:16.The student, Guliz Tuncay, submitted this Dissertation for approval on 2019-07-10 at 14:33.This Dissertation was approved for publication on 2019-07-10 at 16:04.DSpace SAF Submission Ingestion Package generated from Vireo submission #14248 on 2019-11-26 at 14:03:41Made available in DSpace on 2019-11-26T20:59:44Z (GMT). No. of bitstreams: 5 TUNCAY-DISSERTATION-2019.pdf: 2434972 bytes, checksum: db6fc3ccb31e3150fdb5f9f5978f9890 (MD5) UIUC Thesis.zip: 8003616 bytes, checksum: 2075ac203dc5affe0148e5ba7ca72885 (MD5) LICENSE.txt: 4209 bytes, checksum: f984b9c329e6358d2015ccfa0d43c18a (MD5) Tuncay Permission letter 2.pdf: 957084 bytes, checksum: a44a5fee7337cd7a607dbda966c913fd (MD5) Tuncay Permission letter.pdf: 19532 bytes, checksum: 5c64e90218dbaf18e11e50dc4ab1110e (MD5) Previous issue date: 2019-07-10Embargo set by: Seth Robbins for item 113076 Lift date: 2021-11-26T20:59:54Z Reason: Author requested closed access (OA after 2yrs) in Vireo ETD systemOpen Restriction set for Item 113076 on 2020-10-30T15:38:01Z with date null by [email protected] Restriction set for Item 113076 on 2020-10-30T15:38:03Z with date null by [email protected] Restriction set for Item 113076 on 2020-10-30T15:43:36Z with date 2021-08-01 by [email protected] Restriction set for Item 113076 on 2020-10-30T15:43:39Z with date 2021-08-01 by [email protected] Restriction set for Item 113076 on 2020-12-17T14:13:57Z with date null by [email protected] Restriction set for Item 113076 on 2020-12-17T14:14:03Z with date null by [email protected]

    Get PDF
    Abstrak Sastra adalah seni yang ditulis oleh seorang pengarang sesuai dengan hal yang dialami oleh pengarang, dan juga ditulis dengan rasa serta sentuhan jiwa seorang pengarang. Ada berbagai macam karya sastra yaitu puisi, film, novel, lagu dan cerita pendek. Pada penelitian kali ini peneliti menganalisis sebuah film yang berjudul The Untamed : Fatal Journey dengan fokus analisis teori maskulinitas menurut Tuncay dan teori maskulinitas menurut Debora S. David dan Robert Branno. Teknik analisis data yang digunakan pada penlitian ini yaitu menggunakan teknik analisis data deskriptif kualitatif dengan pengolehan data menggunakan teknik menyimak dan mencatat. Tujuan dari penelitian ini yaitu untuk mengetahu seberapa maskulin tokoh utama Nie Mingjue dengan fokus teori menurut Tuncay dan teori menurut Debora S. David dan Robert Branno. Penelitian ini juga menghasilkan hasil yang signifikan bahwa tokoh utama Nie Mingjue dapat dibilang sebagai tokoh dengan karakter yang maskulin. Kata Kunci: maskulinitas, sastra, the untamed Abstract Literature is an art written by an author in accordance with the things experienced by the author, and also written with the feeling and touch of an author's soul. There are various kinds of literary works, namely poetry, films, novels, songs and short stories. In this study, researchers analyzed a film entitled The Untamed: Fatal Journey with a focus on analyzing masculinity theory according to Tuncay and masculinity theory according to Debora S. David and Robert Branno. The data analysis technique used in this research is using qualitative descriptive data analysis techniques with data collection using listening and note-taking techniques. The purpose of this study is to find out how masculine the main character Nie Mingjue is with a theoretical focus according to Tuncay and theory according to Debora S. David and Robert Branno. This research also produces significant results that the main character Nie Mingjue can be said to be a character with a masculine character. Keywords: masculinity, literature, the untamed

    Influence of technological synthesis conditions on corrosion behaviour and mechanical properties for NiTi alloys

    No full text
    PurposeThis study aims to investigate NiTi alloys' characterization and corrosion behaviour produced by two different powder metallurgy (PM) methods. Design/methodology/approachIt was pre-formed under a protective atmosphere at 900 & DEG;C under a force of 45 MPa and sintered for 1 h under 10-6 Mbar in an atmosphere-controlled heat treatment furnace at 1,100 & DEG;C. The relationship between microstructural properties, SEM, XRD, density, microhardness and corrosion behaviour of pre-alloyed NiTi alloys produced by two different methods with the production method was investigated. FindingsAs a result of the studies, TiO, NiTi, NiTi2 and Ni3Ti intermetallics were determined in XRD examinations. The best surface roughness was observed in the mechanically milled (MM'ed) pre-alloyed NiTi alloy compared to the pre-alloyed NiTi alloy mixed with turbula. The corrosion tests performed in 3.5% NaCl solution determined that the MM'ed pre-alloyed NiTi alloy had better corrosion resistance than the pre-alloyed NiTi alloy mixed with turbula. Pitting corrosion was visualized in the SEM images taken from the corrosion surfaces. Originality/valueTwo different PM methods produced pre-alloyed NiTi powders, and the effects of these methods on the mechanical and corrosion resistance of NiTi alloys were systematically investigated for the first time.Karabuk University Science Research Department; Council of Higher Education (YOK) within 100/2000 Programme; [KBUBAP-23-DR-053]The author gratefully wishes to acknowledge the financial support of the Karabuk University Science Research Department (KBUBAP-23-DR-053). Badegul Tuncay is a PhD scholarship holder from the Council of Higher Education (YOK) in the field of smart and innovative materials, which is one of the 100 national priority areas determined by YOK within the scope of the 100/2000 Programme

    Resource allocation using ANN in LTE

    No full text

    The study of İbrahim Yıldırım's stories and novels in terms of form

    No full text
    Bu çalışma İbrahim Yıldırım’ın yazdığı bütün öykü ve romanlarının detaylı incelemesini içermektedir. Yazarın sanat anlayışını ortaya koymak adına yapılan çalışma, yazarın bütün eserlerinin incelenmesi bakımından önem taşımaktadır. Çalışmanın giriş bölümünde 1980 dönemi Türk romanı hakkında bilgilere yer verilmiş; 1980 askerî darbesinin Türk toplumu ve Türk romanına olan etkisi incelenmiştir. İlk bölümünde yazarın hayatı, sanatı ve eserleri konusuna değinilmiştir. Daha sonra ise yazarın sanat anlayışı Öykü ve roman olarak ikiye bölünerek açıklanmaya çalışılmıştır. Üçüncü ve dördüncü bölümlerde de yazarın Öykü ve romanlarındaki materyal ve teknik unsurlar ayrı ayrı ele alınmıştır. Günümüz romancıları arasında popüler bir yer edinen İbrahim Yıldırım’ın tüm öykü ve romanlarını incelenmesinin edebiyat dünyamıza da önemli bir katkı sunacağı inancındayız.This study includes a detailed examination of all the stories and novels written by İbrahim Yıldırım. The study carried out in order to reveal the author's understanding of art is important in terms of examining all the works of the author. In the introduction part of the study, information about 1980s Turkish novel is given; The effect of 1980 military coup on Turkish society and Turkish novel is examined. In the first part, the life, art and works of the author are mentioned. Then, the author's understanding of art was divided into two as story and novel. In the third and fourth chapters, the material and technical elements in the stories and novels of the author are discussed separately. We believe that examining all the stories and novels of İbrahim Yıldırım, who has gained a popular place among contemporary novelists, will also make an important contribution to our literary world

    SABAHATTİN ALİ’NİN “BEYAZ BİR GEMİ” VE “BAHTİYAR KÖPEK” HİKÂYELERİNE YANSIYAN SANAT ANLAYIŞI

    Get PDF
    Bir yazarın sanat görüşünün doğru kavranması, eserlerinin anlaşılmasında büyük öneme sahiptir. Yazarlar, sanat görüşlerini doğrudan ve dolaylı biçimlerde ifade ederler. Kimi kurmaca eserler, yaratıcısının sanat görüşünü yansıtma noktasında diğer eserlerinden daha önde durabilir. Türk edebiyatının en çok okunan yazarlarından olan Sabahattin Ali’nin birçok hikâyesinde toplumsal duyarlılık başlangıçtan itibaren belirleyici bir unsur olmuştur. Yazar 1944’ten sonra kaleme aldığı eserlerinde belirgin biçimde politik meselelere yoğunlaşmıştır. Yazarın bu tavrı 1948’deki ölümüne dek devam etmiştir. Sırça Köşk (1947) kitabı, onun son ve en muhalif dönemine ait hikâyelerden oluşmaktadır. Bu kitaptaki hikâyeler, yazarın sanatının ulaştığı nihai noktayı göstermesi bakımından önemlidir. Daha önce romantizmin ve eleştirel gerçekçiliğin etkisi altındaki yazar, bu kitabında büyük oranda toplumcu gerçekçi bir sanatçı tavrı sergilemiştir. Her zaman sanatta toplumsal fayda fikrinden yana olan Sabahattin Ali, Sırça Köşk’te eleştirinin ötesine geçerek sınıfsız toplum yapısını idealize eder. Adı geçen kitaptaki “Beyaz Bir Gemi” ve “Bahtiyar Köpek” hikâyeleri, onun karşı olduğu ve savunduğu sanat anlayışlarını temsil eden metinler olarak öne çıkarlar. Bu yazıda, toplumcu gerçekçiliğin kavram ve yöntemlerinden faydalanılarak söz konusu iki hikâye analiz edilmiştir. Sonuç olarak, bu çalışmada resim ve edebiyat odaklı kurmaca metinlerinden hareketle yazarın sanat görüşü hakkında çıkarımlarda bulunulmuşturThe accurate understanding of an author’s sense of art has a great importance in terms of understanding his works. Authors express their sense of art in direct or indirect ways. Some fictions may become prominent regarding the reflection of authors’ sense of art. Social sensitivity has been a determining factor in many of the stories of Sabahattin Ali, one of the most widely read authors in Turkish literature. The author focused on political issues in his works written after 1944. This attitude of the author continued until his death in 1948. The book Sırça Köşk (1947) consists of stories from his last and most opposing period. The stories in this book are significant as reflecting the ultimate point that the author’s art has reached. The author, who was previously under the influence of romanticism and critical realism, exhibited a socialist realist artist attitude to a large extent in this book. Sabahattin Ali goes beyond criticism and idealizes the classless social structure in Sırça Köşk, who has always been in favor of the idea of social benefit in art before. The stories “Beyaz Bir Gemi” and “Bahtiyar Köpek” in this book stand out as texts representing the sense of art he opposes or defends. In this article, these two stories are analyzed with concepts and methods of socialist realism. As a result, in this study, inferences were made about the author’s sense of art, based on the fictional texts focused on painting and literature

    Grain-scale investigations of deformation heterogeneities in aluminum alloys

    No full text
    The an isotropic deformation of Aluminum alloys at micron scale exhibits localized deformation, which has negative implications on the macroscale mechanical and forming behavior. The scope of this work is twofold. Firstly, micro-scale deformation heterogeneities affecting forming behavior of aluminum alloys is investigated through experimental microstructure analysis at large strains and various strain paths. The effects of initial texture, local grain misorientation, and strain paths on the strain localizations are established. In addition to uniaxial tension condition, deformation heterogeneities are also investigated under equibiaxial tension condition to determine the strain path effects on the localization behavior. Secondly, the morphology and the crystallographic data obtained from the experiments is transferred to Abaqus software, in order to predict both macroscopic response and the microstructure evolution though crystal plasticity finite element simulations. The model parameters are identified through the comparison with experiments and the capability of the model to capture real material response is discussed as well
    corecore