81 research outputs found
VULNERABLE WEB APPLICATIONS AND HOW TO AUDIT THEM : Use of OWASP Zed Attack Proxy effectively to find the vulnerabilities of web applications
No full textOulu University of Applied Sciences
Degree programme in Information Technology
Author: Samir Kumar Paudel
Title of the bachelor’s thesis: Vulnerable Web Applications and How to Audit Them
Supervisor: Lauri Pirttiaho
Term and year of completion: Spring 2016 Number of pages: 59
This thesis work was done as a private project for completing a Bachelor’s De-gree in Information Technology. The main objective of this work was to find out the effectiveness of OWASP Zed Attack Proxy, an open source and free inte-grated penetration testing tool for finding vulnerabilities in web applications. Besides that, the secondary objectives were to learn how to make web applica-tions and try to find out the security loopholes of them.
For this project, Notepad++, Localhost, and OWASP Zed Attack Proxy were used as tools, PHP, HTML, JavaScript, and CSS as languages, and MySQL Database for making a prototype web application. Notepad++ is a text editor and it supports various programming languages for writing programs or edit files. Localhost was used as a web host. And OWASP Zed Attack Proxy was used as a testing tool. The reason for using OWASP ZAP is that it is an open source and free application and it is a very popular tool among all available web application penetration testing tools either commercial or open source.
Some vulnerabilities were successfully found by the application (OWASP Zed Attack Proxy). Besides that, the developed prototype web application is a simple one. To test the effectiveness of OWASP Zed Attack Proxy in more detail, the web application should be more complex with various features. Being a prototype, it has limitations regarding its full intended features. As only few features were implemented in the prototype, there is a possibility to add more features to the web application as well as testing it in the future
A tiny island and a giant beetle: A fight to save coconut palms in Vanuatu
No full textVanuatu, a picturesque island nation in the South Pacific, is facing a dire threat to its beloved coconut palms—the coconut rhinoceros beetle (CRB), Oryctes rhinoceros (L.) (Fig. 1). Since its arrival in 2019, this invasive pest has wreaked havoc on the coconut plantations and coastline landscape on the island of Efate (Fig. 2), a small yet significant landmass spanning approximately 900 km2. This pest is posing a significant ecological and economic crisis (Paudel et al. 2023); therefore, the island nation has taken determined actions, from the immediate declaration of an emergency to an ongoing initiative, the Cash for Beetle program. The stakes are high because coconut palms are not just an economic mainstay but also hold deep cultural significance for the island nation.This is a pre-copyedited, author-produced version of an article accepted for publication in American Entomologist following peer review. The version of record is available online at: https://doi.org/10.1093/ae/tmae004</p
Effects of vegetation on gravel-bed river channel formation
No full textGreen Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.Environmental Fluid MechanicsWater Resource
Temporal Analysis of SARS-CoV-2 Variants during the COVID-19 Pandemic in Nepal
No full textNepal has suffered two waves of SARS-CoV-2 infections, one in the year 2020 and another in the year 2021. Although the government of Nepal keeps a detailed record of daily coronavirus infections and deaths throughout the country, and publishes the result every day, genomic surveillance of mutants in the country has lagged behind. Sequencing of COVID-19 samples has been conducted sporadically during the pandemic. From the GISAID database, 127 high-quality sequences deposited by different health authorities in Nepal were collected and analyzed. From the analysis, it can be concluded that at least two variants of concern, alpha and delta, and one variant of interest, kappa, were detected in Nepal in 2021. As in other countries, the delta variant outcompeted the kappa and alpha variants and by July 2021 had established itself as the dominant variant. It can be hypothesized that the second wave in Nepal was primarily caused by the delta variant. Further, phylogenetic tree analysis suggests cases of local transmission and global transmission of coronavirus. This analysis reveals the global nature of the disease, where variants arising in one part of the world can quickly spread to other parts of the world and can also spread through individual communities. This paper highlights a need to structure public policy of Nepal to target the delta variant since it has become the predominant variant in Nepal. A further policy suggestion is to appropriately sample and sequence genomes of SARS-CoV-2 at regular intervals to understand the dynamics of variants in the population
Lambretta: Learning to Rank for Twitter Soft Moderation
No full textTo curb the problem of false information, social media platforms like Twitter started adding warning labels to content discussing debunked narratives, with the goal of providing more context to their audiences. Unfortunately, these labels are not applied uniformly and leave large amounts of false content unmoderated. This paper presents LAMBRETTA, a system that automatically identifies tweets that are candidates for soft moderation using Learning To Rank (LTR). We run Lambretta on Twitter data to moderate false claims related to the 2020 US Election and find that it flags over 20 times more tweets than Twitter, with only 3.93% false positives and 18.81% false negatives, outperforming alternative state-of-the-art methods based on keyword extraction and semantic search. Overall, LAMBRETTA assists human moderators in identifying and flagging false information on social media.Green Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.Organisation & Governanc
Genotype and nitrogen effects on grain yield and yield-related traits of maize (Zea mays L.) hybrids
No full textSaabunud / Received 01.11.2021 ; Aktsepteeritud / Accepted 17.12.2021 ; Avaldatud veebis / Published online 18.12.2021 ; Vastutav autor / Corresponding author: Ganga Paudel [email protected] and nitrogen application are important determinants of grain yield in maize. This experiment was carried out in split-plot design with two factors (maize hybrids as the main factor and nitrogen rates as the sub factor) arranged in randomized complete block design (RCBD) with three replications. The maize hybrids including Rampur Hybrid-2, Rampur Hybrid-4 and Rampur Hybrid-6 were main plots, and four nitrogen rates of 0, 140,160, and 180 kg N ha–1 were sub-plot. Results revealed that hybrids had significant effects on the days to 50% tasselling, cob circumference, number of kernel rows per cob and grain yield. Similarly, nitrogen rates had significant effects on all parameters except on the days to 50% tasselling and silking. The highest values of cob length (18.31 cm), no of kernel rows per cob (13.22), no of kernels per cob (33.36), cob circumference (13.90 cm) was recorded from the plot fertilized with 180 kg N ha–1. Rampur Hybrid-2 produced the highest yield (6.19 t ha–1), whereas the lowest yield was found in Rampur Hybrid-6. Similarly, 180 kg N ha–1 produced a significantly higher yield (7.06 t ha–1) which was followed by 160 kg ha–1 (6.71 t ha–1), 140 kg ha–1 (6.30 t ha–1) and the lowest yield (3.93 t ha–1) with 0 kg N ha–1. Therefore, among the hybrids evaluated, Rampur Hybrid-2 could be an appropriate hybrid variety for the cultivation at Dang district and similar conditions in Nepal. This study suggests that maize production can be maximized by cultivating Rampur Hybrid-2 with the use of 180 kg N ha–1 in the inner Terai region of Nepal
Replication data for: Nepal (2007): Malaria TRaC and Net Coverage Survey in Five Districts of Nepal - Phase II of the Malaria Prevention Program
No full textThe purpose of the TRaC Malaria Phase II was to answer the question: Among the target population living in the malaria affected districts of Nepal, what determines the use of LLINs in terms of opportunity, ability and motivation? Specifically, the research objectives were to identify and describe one or more target groups in terms of: a. Risk; b. Behavior (Use of LLINs); c. Behavioral determinants (opportunity, ability and motivational(OAM) characteristics); and d. Population characteristics, including media habits; TRaC Malaria Phase II was conducted in July-September 2007 with a total of 2,200 respondents in five malaria prone districts in Nepal, via a structured questionnaire interview process. A multi-stage cluster sampling approach was used to draw a sample of households with children under five years of age living in the program area of five malaria affected districts. The five districts include: Jhapa, Kanchanpur, Kavre, Mahottari, and Sindhuli. PSI/Nepal used the PSI TRaC methodology, which is designed to provide actionable evidence for decision making. The TRaC survey systematically and repeatedly measures levels and trends of indicators such as behaviors, behavioral determinants and population characteristics. The framework for development and construction of the variables for the behavioral determinants is based on the PSI Behavi
or Change Framework (Annex 2)
Effects of initial and boundary conditions on gravel-bed river morphology
No full textAssuming that the equilibrium geometry of river channels does not depend on their initial state but solely on boundary conditions, several formulas have been derived that relate the channel depth and width to the river bankfull discharge and bed material. However, due to the existence of a threshold for sediment motion and the strong non-linearity between sediment transport and flow rate, this assumption might not be generally valid for gravel-bed rivers. This research clarifies the role of the initial conditions, more specifically the initial channel width, on the geometry of gravel-bed rivers considering a variety of boundary conditions. The approach includes laboratory experiments and two-dimensional modeling, reproducing the evolution of alluvial channels with different starting widths, discharge regimes and sediment input rates. The experiments represent the Arc River (France). Thus, the characteristics of this river were used in the numerical model to obtain a realistic virtual case complementing the experiments. Different boundary and starting conditions resulted in either braided or single-thread channels. We found that the initial width strongly influences the evolution process and leaves a footprint on the river braid-belt extension. The active width of braided systems and the width of single-thread channels do not depend on the starting condition. They depend on sediment input rather than on discharge variability. Different initial widths result in different final bed levels. This indicates that the initial channel width may affect the degree of channel incision or aggradation. The results of this study justify the use of equilibrium formulas for single-thread rivers.Green Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.Environmental Fluid MechanicsRivers, Ports, Waterways and Dredging Engineerin
Recommended from our members
In-stream habitat availability for river dolphins in response to flow: Use of ecological integrity to manage river flows
No full textPopulation decline and extinction risk of river dolphins are primarily associated with flow alteration. Previous studies predominantly highlighted maintenance of adequate flow for low water seasons when habitats contract and the risk of local extinction escalates. Although river dolphins are sensitive to reduction in river flow, no studies quantify the relationships between flow and ecology of river dolphins to mitigate the potential adverse impacts of flow alteration. We quantify the relationships between flow and the ecology of river cetaceans concerning Ganges River dolphins (GRD; Platanista gangetica gangetica) usable area availability (AWS) for the low water season at wider flows (50-575 m3/s) at finer spatial and temporal scales. This study reveals that distribution of area usable to GRD is highly regulated by the adequate flow and river attributes (velocity and depth) interactions that likely offer energetically efficient modes of locomotion to GRD, suggesting the hydro-physical environment as a major determinant of river dolphin distribution and abundance. Flow and AWS relationships indicate that the flow during the dry season negatively contributed to AWS, whereas that of pre-monsoon maximized the AWS, suggesting that modifying flow regimes does alter in-stream habitats at varying spatial scales and may influence life-history strategies. Substantial fragmentation in suitable pool availability and loss of longitudinal connectivity exhibited by dry season flow suggested a higher risk of adverse biological effects during the dry season, which may reduce population viability by reducing survivorship and reproduction failure. Owing to river dolphins' dependence on the attribute of freshwater flow, they can be expected to be more affected by flow regulations as interactive effects. Considering the seasonal effects and changes in the availability of usable areas by flow alteration, adopting effective habitat retention plans by water-based development projects appears critical to avoid further ecological risks in aquatic species conservation. Identifying priority riverscapes for river cetaceans and prioritizing investment opportunities is an essential first step towards effective riverine cetacean conservation. © 2021 Paudel et al. This is an open access article distributed under the terms of the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original author and source are credited.Open access journalThis item from the UA Faculty Publications collection is made available by the University of Arizona with support from the University of Arizona Libraries. If you have questions, please contact us at [email protected]
Implementation of Wireless Network in Nepal : a case study
No full textIn recent years, the Nepali government and development organizations have taken their keen interest in the questions related to access of ICT and digital exchange. Although several discussions, determinations, and promises have been made, it is difficult to determine whether any tangible development has been accomplished. The Network project in Nepal has seriously examined similar issues along with addressing all the challenges from ground level. Starting from 2002, its commitments have been made to close the digital divide in Nepal by increasing access to ICT in rural areas through wireless technology. To understand the basic procedure of the project from its root level to point of success, this thesis goes through its levels.
The Nepal Wireless Networking project discussed in this thesis is currently running as a social enterprise that provides connections to rural villages in Nepal through the community Wi-Fi project. The main purpose of thesis was to understand the implementation process of the wireless network in rural parts of Nepal. The thesis aims to clarify the need for wireless network, wireless equipment and protocols, challenges and finally outcomes of the wireless network.
To understand how this kind of project is implemented, the author studied other similar type of projects which were implemented in other parts of the world where there is similar type of geographical condition. To be more clear, the author carried out a case study about the Nepal Wireless Networking project which was successfully implemented. The author studied the report papers of volunteers and workers who were directly involved in the project during the initial phase of implementation. Since 2001, it has joined more than 200 rural villages in Nepal to the Internet. By the end of 2015, the team helped connect 12 earthquake-striken villages and is currently providing the various benefits of connectivity such as easy access to online education, government services and so on. The Nepal Wireless Networking project conducted a pilot project to distribute a community-based hybrid wireless network and Wi-Fi spectrum in remote districts around Mt. Manaslu and the Mt. Dhaulagiri region in 2016.
Despite the lack of access to proper equipment, lack of technical competence and the difficult terrain in the Himalayan mountains, the Wireless Networking project succeeded in bringing the Internet access to villages, contributing to improvements in education, health services, and income-generating activities.
Low-cost wireless networks can be used in remote locations to provide Internet access to communities scattered across mountainous regions of Nepal. Wireless networking highly demands social support for its sustainability and strong local capacity-building efforts in ICT have resulted in a group of local experts who can provide technical assistance to maintain the network in the long term
- …
