ROP Gadgets hiding techniques in Open Source Projects

Today there are many techniques that allows to exploit vulnerabilities of an application; there are also many techniques that are designed to stop these exploit attacks. This thesis wants to highlight how a specific type of attack, based on a technique called Return Oriented Programming (ROP), can be easily applied to binaries with particular characteristics. A new method that allows the injection of "useful" code in an Open Source projects without arousing suspicions is presented; this is possible because of the harmless aspects of the injected code. This useful code facilitate a ROP attack against an executable that contains vulnerable bugs. The injection process can be visualized in environment where an user can contribute with own code to a particular Open Source project. This thesis also highlights how current software protections are not correctly applied to Open Source project, thus enabling the proposed approach.

Characterization of Halyomorpha halys (brown marmorated stink bug) biogenic volatile organic compound emissions and their role in secondary organic aerosol formation.

The formation of aerosols is a key component in understanding cloud formation in the context of radiative forcings and global climate modeling. Biogenic volatile organic compounds (BVOCs) are a significant source of aerosols, yet there is still much to be learned about their structures, sources, and interactions. The aims of this project were to identify the BVOCs found in the defense chemicals of the brown marmorated stink bug Halymorpha halys and quantify them using gas chromatography-mass spectrometry (GC/MS) and test whether oxidation of these compounds by ozone-promoted aerosol and cloud seed formation. The bugs were tested under two conditions: agitation by asphyxiation and direct glandular exposure. Tridecane, 2(5H)-furanone 5-ethyl, and (E)-2-decenal were identified as the three most abundant compounds. H. halys were also tested in the agitated condition in a smog chamber. It was found that in the presence of 100-180 ppm ozone, secondary aerosols do form. A scanning mobility particle sizer (SMPS) and a cloud condensation nuclei counter (CCNC) were used to characterize the secondary aerosols that formed. This reaction resulted in 0.23 microg/ bug of particulate mass. It was also found that these secondary organic aerosol particles could act as cloud condensation nuclei. At a supersaturation of 1%, we found a kappa value of 0.09. Once regional populations of these stink bugs stabilize and the populations estimates can be made, the additional impacts of their contribution to regional air quality can be calculated.

Characterization of Halyomorpha Halys (Brown Marmorated Stink Bug) Biogenic Volatile Organic Compound Emissions and Their Role in Secondary Organic Aerosol Formation

The formation of aerosols is a key component in understanding cloud formation in the context of radiative forcings and global climate modeling. Biogenic volatile organic compounds (BVOCs) are a significant source of aerosols, yet there is still much to be learned about their structures, sources, and interactions. The aims of this project were to identify the BVOCs found in the defense chemicals of the brown marmorated stink bug Halymorpha halys and quantify them using gas chromatography-mass spectrometry (GC/MS) and test whether oxidation of these compounds by ozone-promoted aerosol and cloud seed formation. The bugs were tested under two conditions: agitation by asphyxiation and direct glandular exposure. Tridecane, 2(5H)-furanone 5-ethyl, and (E)-2-decenal were identified as the three most abundant compounds. H. halys were also tested in the agitated condition in a smog chamber. It was found that in the presence of 100-180 ppm ozone, secondary aerosols do form. A scanning mobility particle sizer (SMPS) and a cloud condensation nuclei counter (CCNC) were used to characterize the secondary aerosols that formed. This reaction resulted in 0.23 mu g/bug of particulate mass. It was also found that these secondary organic aerosol particles could act as cloud condensation nuclei. At a supersaturation of 1%, we found a kappa value of 0.09. Once regional populations of these stink bugs stablilize and the populations estimates can be made, the additional impacts of their contribution to regional air quality can be calculated. Implications: Halymorpha halys (brown marmorated stink bugs) are a relatively new invasive species introduced in the United States near Allentown, Pennsylvania. The authors chemically speciated the bugs' defense pheromones and found that tridecane, 5-ethyl-2(5H)-furanone, and (E)-2-decenal dominated their emissions. Their defense emissions were reacted with atmospherically relevant concentrations of ozone and resulted in 0.23 g of particulate matter per emission per bug. Due to the large population of these bugs in some regions, these emissions could contribute appreciably to a region's PM2.5 (particulate matter with an aerodynamic diameter 2.5 m) levels.

Species Richness-Environment Relationships of European Arthropods at Two Spatial Grains: Habitats and Countries

We study how species richness of arthropods relates to theories concerning net primary productivity, ambient energy, water-energy dynamics and spatial environmental heterogeneity. We use two datasets of arthropod richness with similar spatial extents (Scandinavia to Mediterranean), but contrasting spatial grain (local habitat and country). Samples of ground-dwelling spiders, beetles, bugs and ants were collected from 32 paired habitats at 16 locations across Europe. Species richness of these taxonomic groups was also determined for 25 European countries based on the Fauna Europaea database. We tested effects of net primary productivity (NPP), annual mean temperature (T), annual rainfall (R) and potential evapotranspiration of the coldest month (PETmin) on species richness and turnover. Spatial environmental heterogeneity within countries was considered by including the ranges of NPP, T, R and PETmin. At the local habitat grain, relationships between species richness and environmental variables differed strongly between taxa and trophic groups. However, species turnover across locations was strongly correlated with differences in T. At the country grain, species richness was significantly correlated with environmental variables from all four theories. In particular, species richness within countries increased strongly with spatial heterogeneity in T. The importance of spatial heterogeneity in T for both species turnover across locations and for species richness within countries suggests that the temperature niche is an important determinant of arthropod diversity. We suggest that, unless climatic heterogeneity is constant across sampling units, coarse-grained studies should always account for environmental heterogeneity as a predictor of arthropod species richness, just as studies with variable area of sampling units routinely consider area.

Practical Object-Oriented Back-in-Time Debugging

Back-in-time debuggers are extremely useful tools for identifying the causes of bugs, as they allow us to inspect the past states of objects no longer present in the current execution stack. Unfortunately the "omniscient" approaches that try to remember all previous states are impractical because they either consume too much space or they are far too slow. Several approaches rely on heuristics to limit these penalties, but they ultimately end up throwing out too much relevant information. In this paper we propose a practical approach to back-in-time debugging that attempts to keep track of only the relevant past data. In contrast to other approaches, we keep object history information together with the regular objects in the application memory. Although seemingly counter-intuitive, this approach has the effect that past data that is not reachable from current application objects (and hence, no longer relevant) is automatically garbage collected. In this paper we describe the technical details of our approach, and we present benchmarks that demonstrate that memory consumption stays within practical bounds. Furthermore since our approach works at the virtual machine level, the performance penalty is significantly better than with other approaches.

Flow-Centric, Back-In-Time Debugging

Conventional debugging tools present developers with means to explore the run-time context in which an error has occurred. In many cases this is enough to help the developer discover the faulty source code and correct it. However, rather often errors occur due to code that has executed in the past, leaving certain objects in an inconsistent state. The actual run-time error only occurs when these inconsistent objects are used later in the program. So-called back-in-time debuggers help developers step back through earlier states of the program and explore execution contexts not available to conventional debuggers. Nevertheless, even back-in-time debuggers do not help answer the question, ``Where did this object come from?'' The Object-Flow Virtual Machine, which we have proposed in previous work, tracks the flow of objects to answer precisely such questions, but this VM does not provide dedicated debugging support to explore faulty programs. In this paper we present a novel debugger, called Compass, to navigate between conventional run-time stack-oriented control flow views and object flows. Compass enables a developer to effectively navigate from an object contributing to an error back-in-time through all the code that has touched the object. We present the design and implementation of Compass, and we demonstrate how flow-centric, back-in-time debugging can be used to effectively locate the source of hard-to-find bugs.

Transactional Memory in a Dynamic Language

Concurrency control is mostly based on locks and is therefore notoriously difficult to use. Even though some programming languages provide high-level constructs, these add complexity and potentially hard-to-detect bugs to the application. Transactional memory is an attractive mechanism that does not have the drawbacks of locks, however the underlying implementation is often difficult to integrate into an existing language. In this paper we show how we have introduced transactional semantics into Smalltalk by using the reflective facilities of the language. Our approach is based on method annotations, incremental parse tree transformations and an optimistic commit protocol. The implementation does not depend on modifications to the virtual machine and therefore can be changed at the language level. We report on a practical case study, benchmarks and further and on-going work.

Mining frequent bug-fix code changes

Detecting bugs as early as possible plays an important role in ensuring software quality before shipping. We argue that mining previous bug fixes can produce good knowledge about why bugs happen and how they are fixed. In this paper, we mine the change history of 717 open source projects to extract bug-fix patterns. We also manually inspect many of the bugs we found to get insights into the contexts and reasons behind those bugs. For instance, we found out that missing null checks and missing initializations are very recurrent and we believe that they can be automatically detected and fixed.

Seroprevalence of Chagas' disease in Texas among shelter dogs in Houston and the Rio Grande Valley region and its implication for human infection

Chagas’ disease, also called American Trypanosomiasis, is a vector-borne disease caused by the protozoan parasite Trypanosoma cruzi. T. cruzi is spread by triatomine insects, commonly referred to as ‘kissing bugs.’ After the insect takes a blood meal from its animal or human host, it usually defecates near the bite wound. The parasite is present in the feces, and when rubbed into the bite wound or mucous membranes by the host, infection ensues. Chagas’ disease is highly endemic in Central and South America where it originated. Many people in these endemic areas live in poor conditions surrounded by animals, mainly dogs, that can serve as a possible link to human infection. In Chagas’ endemic countries, dogs can be used as a sentinel to infer risk for human infection. In Texas, the prevalence of Chagas’ and risk for human infection is largely unknown. This study aimed to determine the prevalence of Chagas’ disease in shelter dogs in Houston, Texas and the Rio Grande Valley region by using an immunochromatographic assay (Chagas’ Stat-Pak) to test for the presence of T. cruzi antibodies. Of the 822 samples tested, 26 were found to be positive (3.2%). In both locations, Chagas’ prevalence increased over time. This study found that dogs, especially strays, can serve as sentinels for disease activity. Public health authorities can implement this strategy to understand the level of Chagas’ activity in a defined geographic area and prevent human infection.^

On-farm Cooperator Trials 2011: Effect of Extended-duration Row Covers on Muskmelon and Winter Squash on Bacterial Wilt and Yield

Susceptible cucurbit crops are difficult to grow in Iowa because of bacterial wilt, caused by Erwinia tracheiphila. Striped and spotted cucumber beetles transmit bacterial wilt. Other insect pests such as squash vine borer and squash bugs may also have an economic impact on yield, particularly in squash.

Egg parasitism of Piezodorus guildinii and Nezara viridula (Hemiptera: Pentatomidae) in soybean, alfalfa and red clover

Piezodorus guildinii Westwood and Nezara viridula (L.) (Hemiptera: Pentatomidae) are important soybean pests. P. guildinii causes more injury and is less susceptible to insecticides compared to N. viridula. N. viridula egg parasitoids are well studied; however, little is known about parasitoids of P. guildinii. Alfalfa, soybean and red clover were sampled during several seasons to characterize the abundance of both stink bugs, to determine their egg parasitoids, and to estimate parasitoids impact. In the field, Telenomus podisi (Ashmead),Trissolcus urichi (Crawford) and Trissolcus basalis (Wollaston) (Hymenoptera: Platygastridae) emerged from P. guildinii, while only T. basalis (Wollaston) (Hymenoptera: Platygastridae) emerged from N. viridula. The proportions of parasitized eggs (i. e., the parasitoid impact) and egg masses, as well as the number of parasitized eggs/total number of eggs of the parasitized egg masses, were similar for alfalfa and soybean. Parasitism was not observed in red pclover. Parasitoid impact was lower during the dry growing seasons. Although P. guildinii field parasitism by T. urichi was less significant, laboratory experiments from the bibliography indicate that this wasp species performs well on this host. Trissolcus urichi would be an important biological control agent against P. guildinii, principally when the stink bug is more abundant.

Macroinvertebrate abundance and proportion of trait categories in river biotopes across England and Wales

There is a long tradition of river monitoring using macroinvertebrate communities to assess environmental quality in Europe. A promising alternative is the use of species life-history traits. Both methods, however, have relied on the time-consuming identification of taxa. River biotopes, 1-100 m**2 'habitats' with associated species assemblages, have long been seen as a useful and meaningful way of linking the ecology of macroinvertebrates and river hydro-morphology and can be used to assess hydro-morphological degradation in rivers. Taxonomic differences, however, between different rivers had prevented a general test of this concept until now. The species trait approach may overcome this obstacle across broad geographical areas, using biotopes as the hydro-morphological units which have characteristic species trait assemblages. We collected macroinvertebrate data from 512 discrete patches, comprising 13 river biotopes, from seven rivers in England and Wales. The aim was to test whether river biotopes were better predictors of macroinvertebrate trait profiles than taxonomic composition (genera, families, orders) in rivers, independently of the phylogenetic effects and catchment scale characteristics (i.e. hydrology, geography and land cover). We also tested whether species richness and diversity were better related to biotopes than to rivers. River biotopes explained 40% of the variance in macroinvertebrate trait profiles across the rivers, largely independently of catchment characteristics. There was a strong phylogenetic signature, however. River biotopes were about 50% better at predicting macroinvertebrate trait profiles than taxonomic composition across rivers, no matter which taxonomic resolution was used. River biotopes were better than river identity at explaining the variability in taxonomic richness and diversity (40% and <=10%, respectively). Detailed trait-biotope associations agreed with independent a priori predictions relating trait categories to near river bed flows. Hence, species traits provided a much needed mechanistic understanding and predictive ability across a broad geographical area. We show that integration of the multiple biological trait approach with river biotopes at the interface between ecology and hydro-morphology provides a wealth of new information and potential applications for river science and management.