230 research outputs found
Agenti antinfiammatori di derivazione vegetale nella terapia di supporto delle patologie infiammatorie croniche intestinali
No full text
SUSPENDED MATTER PROPERTIES AND ITS ROLE IN POLLUTANT TRANSFER FROM THE RIVER TO THE SEA - CASE-STUDY - ADIGE RIVER ADRIATIC SEA
No full textSuspended matter and bottom sediments have been investigated in the Adige River estuary (Northern Adriatic Sea) and their role in the heavy metals transfer from land to sea. The observed similarity of the geochemical and mineralogical composition between the riverine suspended matter and the marine sediments just at the Adige mouth reveals that most of the riverborne suspended particles settle in the prodelta area together with the associated heavy metals. Among the various toxic elements examinated, chromium has a peculiar behaviour, which indicates the man's influence on its biogeocycle. © 1986
A tale of two headers: A formal analysis of inconsistent click-jacking protection on the web
No full textClick-jacking protection on the modern Web is commonly enforced via client-side security mechanisms for framing control, like the X-Frame-Options header (XFO) and Content Security Policy (CSP). Though these client-side security mechanisms are certainly useful and successful, delegating protection to web browsers opens room for inconsistencies in the security guarantees offered to users of different browsers. In particular, inconsistencies might arise due to the lack of support for CSP and the different implementations of the underspecified XFO header. In this paper, we formally study the problem of inconsistencies in framing control policies across different browsers and we implement an automated policy analyzer based on our theory, which we use to assess the state of click-jacking protection on the Web. Our analysis shows that 10% of the (distinct) framing control policies in the wild are inconsistent and most often do not provide any level of protection to at least one browser. We thus propose recommendations for web developers and browser vendors to mitigate this issue. Finally, we design and implement a server-side proxy to retrofit security in web applications
The Security Lottery: Measuring Client-Side Web Security Inconsistencies
No full textTo mitigate a myriad of Web attacks, modern browsers support client-side security policies shipped through HTTP response headers. To enforce these defenses, the server needs to communicate them to the client, a seemingly straightforward process. However, users may access the same site in variegate ways, e.g., using different User-Agents, network access methods, or language settings. All these usage scenarios should enforce the same security policies, otherwise a security lottery would take place: depending on specific client characteristics, different levels of Web application security would be provided to users (inconsistencies). We formalize security guarantees provided through four popular mechanisms and apply this to measure the prevalence of inconsistencies in the security policies of top sites across different client characteristics. Based on our insights, we investigate the security implications of both deterministic and non-deterministic inconsistencies, and show how even prominent services are affected by them
Pilotversuch zur Akzeptanz von mit Algen angereicherten Crackern bei Kindern‐ länderübergreifende Studie
No full textCommissione Europea e Autorità nazionale: l’applicazione decentrata del diritto comunitario
No full textA hard lesson: Assessing the HTTPS deployment of Italian university websites
No full textIn this paper we carry out a systematic analysis of the state of the HTTPS deployment of the most popular Italian university websites. Our analysis focuses on three different key aspects: HTTPS adoption and activation, HTTPS certificates, and cryptographic TLS implementations. Our investigation shows that the current state of the HTTPS deployment is unsatisfactory, yet it is possible to significantly improve the level of security by working exclusively at the web application layer. We hope this observation will encourage site operators to take actions to improve the current state of protection
- …
