Context-sensitive analysis of obfuscated x86 executables

A method for context-sensitive analysis of binaries that may have obfuscated procedure call and return operations is presented. Such binaries may use operators to directly manipulate stack instead of using native call and ret instructions to achieve equivalent behavior. Since definition of context-sensitivity and algorithms for context-sensitive analysis have thus far been based on the specific semantics associated to procedure call and return operations, classic interprocedural analyses cannot be used reliably for analyzing programs in which these operations cannot be discerned. A new notion of context-sensitivity is introduced that is based on the state of the stack at any instruction. While changes in 'calling'-context are associated with transfer of control, and hence can be reasoned in terms of paths in an interprocedural control flow graph (ICFG), the same is not true of changes in 'stack'-context. An abstract interpretation based framework is developed to reason about stack-contexts and to derive analogues of call-strings based methods for the context-sensitive analysis using stack-context. The method presented is used to create a context-sensitive version of Venable et al.'s algorithm for detecting obfuscated calls. Experimental results show that the context-sensitive version of the algorithm generates more precise results and is also computationally more efficient than its context-insensitive counterpart. Copyright © 2010 ACM.

Context-sensitive analysis of x86 obfuscated executables

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Classificação de workflows baseados em web services

Over the last decades changes have occurred in communication within and between enterprises, made easier by technologies suchas E-commerce, Internet, ERP systems and remote meetings and there was a rapid progress in network technology, which has changed the way business is done. A standardized way to offer services over the internet is using web services. Web services are a kind of remote procedure call and are generally used to integrate systems, independent of language, both client and server. It is common to use several web services run in sequence to perform a business process. To this type of process, gives the name of workflow. Thus, Web services are the primary components of workflows. A tool that provides a way of visualizing the behavior of a workflow can assist the administrator and is required. The present work presents the development of a tool that allows the administrator to classify visually services components and evaluate their importance in the final performance of a workflow. As proof of concept we used several virtual servers and computers where each computer has received a set of web services. A proxy was added between each call of workflows collecting relevant information and storing them in a database for later analysis. The analysis was based on Quality of Service parameters

In situ differentiation of labile/inert metal species in Brazilian tropical rivers by means of a time-controlled batch-procedure based on TEPHA resin

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Alternative procedure for the cold test for soybean seeds

Conselho Nacional de Desenvolvimento Científico e Tecnológico (CNPq)

Treatment of PVC using an alternative low energy ion bombardment procedure

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Efficient procedure to evaluate electromagnetic transients on three-phase transmission lines

This paper presents a hybrid way mixing time and frequency domain for transmission lines modelling. The proposed methodology handles steady fundamental signal mixed with fast and slow transients, including impulsive and oscillatory behaviour. A transmission line model is developed based on lumped elements representation and state-space techniques. The proposed methodology represents an easy and practical procedure to model a three-phase transmission line directly in time domain, without the explicit use of inverse transforms. The proposed methodology takes into account the frequency-dependent parameters of the line, considering the soil and skin effects. In order to include this effect in the state matrices, a fitting method is applied. Furthermore the accuracy of proposed the developed model is verified, in frequency domain, by a simple methodology based on line distributed parameters and transfer function related to the input/output signals of the lumped parameters representation. In addition, this article proposes the use of a fast and robust analytic integration procedure to solve the state equations, enabling transient and steady-state simulations. The results are compared with those obtained by the commercial software Microtran (EMTP), taking into account a three-phase transmission line, typical in the Brazilian transmission system.

Typing class I HLA-A gene using a nested PCR-RFLP procedure

In order to detect several new HLA-A class I alleles that have been described since 1998, the original PCR-RFLP method developed to identify the 78 alleles recognized at that time at high resolution level was adapted by us for low and medium resolution levels using a nested PCR-RFLP approach. The results obtained from blood samples of 23 subjects using both the PCR-RFLP method and a commercial kit (MicroSSP1A®, One Lambda Inc.) showed an agreement higher than 95%. The PCR-RFLP adapted method was effective in low and medium resolution histocompatibility evaluations.

Analytical procedure based on slurry sampling for determining selenium in organic vegetable samples by graphite furnace atomic absorption spectrometry

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Microdilution procedure for antifungal susceptibility testing of Paracoccidioides brasiliensis to amphotericin B and itraconazole

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

New analytical procedure based on a cellulose bag and ionic exchanger with p-aminobenzoic acid groups for differentiation of labile and inert metal species in aquatic systems

A new procedure was developed for the in situ characterization of the lability of metal species in aquatic systems by using a system equipped with a diffusion membrane and cellulose organomodified with p-aminobenzoic acid groups (DM-Cell-PAB). To this end, the DM-Cell-PAB system was prepared by adding cellulose organomodified with p-aminobenzoic acid groups (Cell-PAB) to pre-purified cellulose bags. After the DM-Cell-PAB system was sealed, it was examined in the laboratory to evaluate the influence of complexation time, mass of exchanger, pH, metal ions (Cu, Cd, Fe, Mn, and Ni), and concentration of organic matter on the relative lability of metal species. It was found that the pH and kinetics strongly influence the process of metal complexation by the DM-Cell-PAB system. At all pH levels, Cd, Mn, and Ni showed lower complexation with Cell-PAB resin than Cu and Fe metals. Note that relative lability of metals complexed to aquatic humic substances (AHS) in the presence of Cell-PAB resin showed the following order: Cu congruent to Fe >> Ni > Mn=Cd. The results presented here also indicate that increasing the AHS concentration decreases the lability of metal species by shifting the equilibrium to AHS-metal complexes. Our results indicate that the system under study offers an interesting alternative that can be applied to in situ experiments for differentiation of labile and inert metal species in aquatic systems.

A simple procedure for rehybridization of nuclei analyzed previously by fish

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Effect of Cement Type, Relining Procedure, and Length of Cementation on Pull-out Bond Strength of Fiber Posts

Introduction: As opposed to the cementation metal posts, the cementation of fiber posts has several details that can significantly influence the success of post retention. This study evaluated the effect of the relining procedure, the cement type, and the luted length of the post on fiber posts retention. Methods: One hundred eighty bovine incisors were selected to assess post retention; after endodontic treatment, the canals were flared with diamonds burs. Post holes were prepared in lengths of 5, 7.5, and 10 mm; the fiber posts were relined with composite resin and luted with RelyX ARC, RelyX Unicem, or RelyX Luting 2. All cements are manufactured by 3M ESPE (St. Paul, MN). Samples were subjected to a pull-out bond strength test in a universal testing machine; the results (N) were submitted to a three-way analysis of variance and the Tukey post hoc test (alpha = 0.05). Results: The improvement of post retention occurred with the increase of the post length luted into the root canal; the relining procedure improved the pull-out bond strength. RelyX Unicem and RelyX ARC showed similar values of retention, both showing higher values than RelyX Luting 2. Conclusion: Post length, the reining procedure, and the cement type are all important factors for improving the retention of fiber posts. (J Endod 2010;36:1543-1546)