Detecting Symbian OS malware through static function call analysis

Smartphones become very critical part of our lives as they offer advanced capabilities with PC-like functionalities. They are getting widely deployed while not only being used for classical voice-centric communication. New smartphone malwares keep emerging where most of them still target Symbian OS. In the case of Symbian OS, application signing seemed to be an appropriate measure for slowing down malware appearance. Unfortunately, latest examples showed that signing can be bypassed resulting in new malware outbreak. In this paper, we present a novel approach to static malware detection in resource-limited mobile environments. This approach can be used to extend currently used third-party application signing mechanisms for increasing malware detection capabilities. In our work, we extract function calls from binaries in order to apply our clustering mechanism, called centroid. This method is capable of detecting unknown malwares. Our results are promising where the employed mechanism might find application at distribution channels, like online application stores. Additionally, it seems suitable for directly being used on smartphones for (pre-)checking installed applications.

Smartphone malware evolution revisited : Android next target?

Smartphones started being targets for malware in June 2004 while malware count increased steadily until the introduction of a mandatory application signing mechanism for Symbian OS in 2006. From this point on, only few news could be read on this topic. Even despite of new emerging smartphone platforms, e.g. android and iPhone, malware writers seemed to lose interest in writing malware for smartphones giving users an unappropriate feeling of safety. In this paper, we revisit smartphone malware evolution for completing the appearance list until end of 2008. For contributing to smartphone malware research, we continue this list by adding descriptions on possible techniques for creating the first malware(s) for Android platform. Our approach involves usage of undocumented Android functions enabling us to execute native Linux application even on retail Android devices. This can be exploited to create malicious Linux applications and daemons using various methods to attack a device. In this manner, we also show that it is possible to bypass the Android permission system by using native Linux applications.

Steps towards the validation of the Trendelenburg test : The effect of experimentally reduced hip abductor muscle function on frontal plane mechanics

Introduction: The Trendelenburg Test (TT) is used to assess the functional strength of the hip abductor muscles (HABD), their ability to control frontal plane motion of the pelvis, and the ability of the lumbopelvic complex to transfer load into single leg stance. Rationale: Although a standard method to perform the test has been described for use within clinical populations, no study has directly investigated Trendelenburg’s hypotheses. Purpose: To investigate the validity of the TT using an ultrasound guided nerve block (UNB) of the superior gluteal nerve and determine whether the reduction in HABD strength would result in the theorized mechanical compensatory strategies measured during the TT. Methods: Quasi-experimental design using a convenience sample of nine healthy males. Only subjects with no current or previous injury to the lumbar spine, pelvis, or lower extremities, and no previous surgeries were included. Force dynamometry was used to evaluation HABD strength (%BW). 2D mechanics were used to evaluate contralateral pelvic drop (cMPD), change in contralateral pelvic drop (∆cMPD), ipsilateral hip adduction (iHADD) and ipsilateral trunk sway (TRUNK) measured in degrees (°). All measures were collected prior to and following a UNB on the superior gluteal nerve performed by an interventional radiologist. Results: Subjects’ age was median 31yrs (IQR:22-32yrs); and weight was median 73kg (IQR:67-81kg). An average 52% reduction of HABD strength (z=2.36,p=0.02) resulted following the UNB. No differences were found in cMPD or ∆cMPD (z=0.01,p= 0.99, z=-0.67,p=0.49). Individual changes in biomechanics show no consistency between subjects and non-systematic changes across the group. One subject demonstrated the mechanical compensations described by Trendelenburg. Discussion: The TT should not be used as screening measure for HABD strength in populations demonstrating strength greater than 30%BW but reserved for use with populations with marked HABD weakness. Importance: This study presents data regarding a critical level of HABD strength required to support the pelvis during the TT.

Learning the learning rate for prediction with expert advice

Most standard algorithms for prediction with expert advice depend on a parameter called the learning rate. This learning rate needs to be large enough to fit the data well, but small enough to prevent overfitting. For the exponential weights algorithm, a sequence of prior work has established theoretical guarantees for higher and higher data-dependent tunings of the learning rate, which allow for increasingly aggressive learning. But in practice such theoretical tunings often still perform worse (as measured by their regret) than ad hoc tuning with an even higher learning rate. To close the gap between theory and practice we introduce an approach to learn the learning rate. Up to a factor that is at most (poly)logarithmic in the number of experts and the inverse of the learning rate, our method performs as well as if we would know the empirically best learning rate from a large range that includes both conservative small values and values that are much higher than those for which formal guarantees were previously available. Our method employs a grid of learning rates, yet runs in linear time regardless of the size of the grid.

Efficient minimax strategies for square loss games

We consider online prediction problems where the loss between the prediction and the outcome is measured by the squared Euclidean distance and its generalization, the squared Mahalanobis distance. We derive the minimax solutions for the case where the prediction and action spaces are the simplex (this setup is sometimes called the Brier game) and the \ell_2 ball (this setup is related to Gaussian density estimation). We show that in both cases the value of each sub-game is a quadratic function of a simple statistic of the state, with coefficients that can be efficiently computed using an explicit recurrence relation. The resulting deterministic minimax strategy and randomized maximin strategy are linear functions of the statistic.

Drug accumulation into single drug-sensitive and drug-resistant prostate cancer cells conducted on the single cell bioanalyzer

Multidrug resistance (MDR) occurs in prostate cancer, and this happens when the cancer cells resist chemotherapeutic drugs by pumping them out of the cells. MDR inhibitors such as cyclosporin A (CsA) can stop the pumping and enhance the drugs accumulated in the cells. The cellular drug accumulation is monitored using a microfluidic chip mounted on a single cell bioanalyzer. This equipment has been developed to measure accumulation of drugs such as doxorubicin (DOX) and fluorescently labeled paclitaxel (PTX) in single prostate cancer cells. The inhibition of drug efflux on the same prostate cell was examined in drug-sensitive and drug-resistant cells. Accumulation of these drug molecules was not found in the MDR cells, PC-3 RX-DT2R cells. Enhanced drug accumulation was observed only after treating the MDR cell in the presence of 5 μM of CsA as the MDR inhibitor. We envision this monitoring of the accumulation of fluorescent molecules (drug or fluorescent molecules), if conducted on single patient cancer cells, can provide information for clinical monitoring of patients undergoing chemotherapy in the future.

On the biomechanical significance of inter-lamellar interfaces in the intervertebral disc

The intervertebral disc (IVD) is a unique soft tissue structure which provides structural support and flexibility in the axial skeleton of vertebrates. From a structural perspective, the disc behaves somewhat like a thick walled pressure vessel, where the walls are comprised of a series of composite annular rings (lamellae). However, a prior study (Marchand and Ahmed, 1990) found a high proportion of circumferentially discontinuous lamellae in human lumbar IVDs. The presence of these discontinuities raises important structural questions, because discontinuous lamellae cannot withstand high nucleus pressures via the generation of circumferential (hoop) stress. A possible alternative mechanism may be that inter-lamellar cohesion allows shear stress transfer between adjacent annular layers. The aim of the present study was therefore to investigate the importance of inter-lamellar shear resistance in the intervertebral disc. This work found that inter-lamellar shear resistance has a strong influence on the compressive stiffness of the intervertebral disc, with a change in interface condition from tied (no slip) to frictionless (no shear resistance) reducing disc compressive stiffness by 40%. However, it appears that substantial inter-lamellar shear resistance is present in the bovine tail disc. Decreases in inter-lamellar shear resistance due to degradation of bridging collagenous or elastic fibre structures could therefore be an important part of the process of disc degeneration.

Cues in the environment: A design principle for ambient intelligence

The aim of this paper is to propose design principles for ambient intelligence (AmI) environments. The question we are investigating is how these environments can be designed to support a group to be able to carry out common goal-oriented activities. The approach we are taking in answering this question is informed by the concept of collective intelligence (CI). We are applying the concept of CI to AmI as we have found it works well in biological and social systems. Examples from nature demonstrate the power of CI stimulated by implicit cues in the environment. We use these examples to derive design principles for AmI environments. By applying these design principles to a concrete scenario, we are able to propose ways to help decrease environmental pollution within urban areas.

Acceptance of prostitution and its social determinants in Canada

The nature of collective perception of prostitution is understudied in Canada. Except some rudimentary reports on the percentages of the key legal options, multivariate analysis has never been used to analyze the details of public opinion on prostitution. The current study explores the trend of public attitude toward prostitution acceptability in Canada over a 25-year span and examines the social determinants of the acceptability of prostitution, using structural equation modeling (SEM), which allows researchers to elaborate both direct and indirect effects (through mediating variables) on the outcome variable. Results show that the public has become more acceptant of prostitution over time. In addition, the less religious, less authoritarian, and more educated are more acceptant of prostitution than the more religious, more authoritarian, and less well educated. The effects of religiosity and authoritarianism mediate out the direct effects of age, gender, gender equality, marriage, marriage as an outdated institution, Quebec, race, and tolerance. The findings may serve as a reference point for the law reform regarding the regulation of prostitution in Canada.

Improving daylighting performance of mirrored light pipes

This paper assesses and compares the performances of two daylight collection strategies, one passive and one active, for large-scale mirrored light pipes (MLP) illuminating deep plan buildings. Both strategies use laser cut panels (LCP) as the main component of the collection system. The passive system comprises LCPs in pyramid form, whereas the active system uses a tiled LCP on a simple rotation mechanism that rotates 360° in 24 hours. Performance is assessed using scale model testing under sunny sky conditions and mathematical modelling. Results show average illuminance levels for the pyramid LCP ranging from 50 to 250 lux and 150 to 200 lux for the rotating LCPs. Both systems improve the performance of a MLP. The pyramid LCP increases the performance of a MLP by 2.5 times and the rotating LCP by 5 times, when compared to an open pipe particularly for low sun elevation angles.