ROP Gadgets hiding techniques in Open Source Projects

Today there are many techniques that allows to exploit vulnerabilities of an application; there are also many techniques that are designed to stop these exploit attacks. This thesis wants to highlight how a specific type of attack, based on a technique called Return Oriented Programming (ROP), can be easily applied to binaries with particular characteristics. A new method that allows the injection of "useful" code in an Open Source projects without arousing suspicions is presented; this is possible because of the harmless aspects of the injected code. This useful code facilitate a ROP attack against an executable that contains vulnerable bugs. The injection process can be visualized in environment where an user can contribute with own code to a particular Open Source project. This thesis also highlights how current software protections are not correctly applied to Open Source project, thus enabling the proposed approach.

Are There Sex Differences in Reaction to Different Types of Sexual Infidelity?

Evolutionary theory based research shows that women and men can differ in their responses to sexual and emotional infidelity. However, research has not examined the question of whether men and women react similarly or differently to a partner’s engagement in different types of sexual infidelity. The present re-search sought to answer this question. Based on the aforementioned prior research, and short term mating desires, sex differences in reactions to different types of sexual infidelity were not expected. Both women and men were expected to report higher levels of upset when a partner engaged in sexual intercourse rather than when a partner engaged in oral sex, heavy petting, or kissing with another person. The results were consistent with the hypothesis. Both men and women were most upset by a partner’s engagement in sexual intercourse with another person. These findings are discussed in terms of prior research.

Characterization of Halyomorpha halys (brown marmorated stink bug) biogenic volatile organic compound emissions and their role in secondary organic aerosol formation.

The formation of aerosols is a key component in understanding cloud formation in the context of radiative forcings and global climate modeling. Biogenic volatile organic compounds (BVOCs) are a significant source of aerosols, yet there is still much to be learned about their structures, sources, and interactions. The aims of this project were to identify the BVOCs found in the defense chemicals of the brown marmorated stink bug Halymorpha halys and quantify them using gas chromatography-mass spectrometry (GC/MS) and test whether oxidation of these compounds by ozone-promoted aerosol and cloud seed formation. The bugs were tested under two conditions: agitation by asphyxiation and direct glandular exposure. Tridecane, 2(5H)-furanone 5-ethyl, and (E)-2-decenal were identified as the three most abundant compounds. H. halys were also tested in the agitated condition in a smog chamber. It was found that in the presence of 100-180 ppm ozone, secondary aerosols do form. A scanning mobility particle sizer (SMPS) and a cloud condensation nuclei counter (CCNC) were used to characterize the secondary aerosols that formed. This reaction resulted in 0.23 microg/ bug of particulate mass. It was also found that these secondary organic aerosol particles could act as cloud condensation nuclei. At a supersaturation of 1%, we found a kappa value of 0.09. Once regional populations of these stink bugs stabilize and the populations estimates can be made, the additional impacts of their contribution to regional air quality can be calculated.

Are there sex differences in reaction to different types of sexual infidelity?

Evolutionary theory based research shows that women and men can differ in their responses to sexual and emotional infidelity. However, research has not examined the question of whether men and women react similarly or differently to a partner’s engagement in different types of sexual infidelity. The present research sought to answer this question. Based on the aforementioned prior research, and short term mating desires, sex differences in reactions to different types of sexual infidelity were not expected. Both women and men were expected to report higher levels of upset when a partner engaged in sexual intercourse rather than when a partner engaged in oral sex, heavy petting, or kissing with another person. The results were consistent with the hypothesis. Both men and women were most upset by a partner’s engagement in sexual intercourse with another person. These findings are discussed in terms of prior research.

Characterization of Halyomorpha Halys (Brown Marmorated Stink Bug) Biogenic Volatile Organic Compound Emissions and Their Role in Secondary Organic Aerosol Formation

The formation of aerosols is a key component in understanding cloud formation in the context of radiative forcings and global climate modeling. Biogenic volatile organic compounds (BVOCs) are a significant source of aerosols, yet there is still much to be learned about their structures, sources, and interactions. The aims of this project were to identify the BVOCs found in the defense chemicals of the brown marmorated stink bug Halymorpha halys and quantify them using gas chromatography-mass spectrometry (GC/MS) and test whether oxidation of these compounds by ozone-promoted aerosol and cloud seed formation. The bugs were tested under two conditions: agitation by asphyxiation and direct glandular exposure. Tridecane, 2(5H)-furanone 5-ethyl, and (E)-2-decenal were identified as the three most abundant compounds. H. halys were also tested in the agitated condition in a smog chamber. It was found that in the presence of 100-180 ppm ozone, secondary aerosols do form. A scanning mobility particle sizer (SMPS) and a cloud condensation nuclei counter (CCNC) were used to characterize the secondary aerosols that formed. This reaction resulted in 0.23 mu g/bug of particulate mass. It was also found that these secondary organic aerosol particles could act as cloud condensation nuclei. At a supersaturation of 1%, we found a kappa value of 0.09. Once regional populations of these stink bugs stablilize and the populations estimates can be made, the additional impacts of their contribution to regional air quality can be calculated. Implications: Halymorpha halys (brown marmorated stink bugs) are a relatively new invasive species introduced in the United States near Allentown, Pennsylvania. The authors chemically speciated the bugs' defense pheromones and found that tridecane, 5-ethyl-2(5H)-furanone, and (E)-2-decenal dominated their emissions. Their defense emissions were reacted with atmospherically relevant concentrations of ozone and resulted in 0.23 g of particulate matter per emission per bug. Due to the large population of these bugs in some regions, these emissions could contribute appreciably to a region's PM2.5 (particulate matter with an aerodynamic diameter 2.5 m) levels.

Species Richness-Environment Relationships of European Arthropods at Two Spatial Grains: Habitats and Countries

We study how species richness of arthropods relates to theories concerning net primary productivity, ambient energy, water-energy dynamics and spatial environmental heterogeneity. We use two datasets of arthropod richness with similar spatial extents (Scandinavia to Mediterranean), but contrasting spatial grain (local habitat and country). Samples of ground-dwelling spiders, beetles, bugs and ants were collected from 32 paired habitats at 16 locations across Europe. Species richness of these taxonomic groups was also determined for 25 European countries based on the Fauna Europaea database. We tested effects of net primary productivity (NPP), annual mean temperature (T), annual rainfall (R) and potential evapotranspiration of the coldest month (PETmin) on species richness and turnover. Spatial environmental heterogeneity within countries was considered by including the ranges of NPP, T, R and PETmin. At the local habitat grain, relationships between species richness and environmental variables differed strongly between taxa and trophic groups. However, species turnover across locations was strongly correlated with differences in T. At the country grain, species richness was significantly correlated with environmental variables from all four theories. In particular, species richness within countries increased strongly with spatial heterogeneity in T. The importance of spatial heterogeneity in T for both species turnover across locations and for species richness within countries suggests that the temperature niche is an important determinant of arthropod diversity. We suggest that, unless climatic heterogeneity is constant across sampling units, coarse-grained studies should always account for environmental heterogeneity as a predictor of arthropod species richness, just as studies with variable area of sampling units routinely consider area.

Unprotected left main stenting in the real world: two-year outcomes of the French left main taxus registry

BACKGROUND: Cardiac surgery is the reference treatment for patients with left main (LM) disease, although percutaneous coronary intervention with drug-eluting stents is emerging as a possible alternative. The objective of this registry was to evaluate the 2-year outcome of elective percutaneous coronary intervention for unprotected LM disease with paclitaxel-eluting stents. METHODS AND RESULTS: A total of 291 patients were prospectively included from 4 centers. Acute myocardial infarction and cardiogenic shock were the only exclusion criteria. Patients were 69+/-11 years old, 29% were diabetic, and 25% had 3-vessel disease. For distal LM lesions (78%), the provisional side-branch T-stenting approach was used in 92% of cases and final kissing balloon inflation in 97%. Angiographic success was obtained in 99.7% of cases. At 2-year follow-up, the total cardiac death rate was 5.4% (1 EuroSCORE point was associated with a 15% [95% confidence interval 2.9% to 28.2%, P=0.013] higher risk of cardiac death), target-lesion revascularization was 8.7%, and incidence of Q-wave or non-Q-wave myocardial infarction was 0.9% and 3.1%, respectively. The combined end point occurred in 15.8% of cases and stroke in 0.7%. The incidence of definite and probable LM stent thrombosis was 0.7%, whereas the incidence of any stent thrombosis was 3.8%, with a higher risk in patients with side-branch stenting in the presence of LM bifurcation lesions (hazard ratio 9.6, 95% confidence interval 1.2 to 77.7, P=0.035). CONCLUSIONS: Unprotected LM stenting with paclitaxel-eluting stents, with a strategy of provisional side-branch T-stenting for distal lesions, provides excellent acute angiographic results and good mid-term clinical outcomes, with a 15.8% rate of major adverse cardiac events at 2-year follow-up.

Practical Object-Oriented Back-in-Time Debugging

Back-in-time debuggers are extremely useful tools for identifying the causes of bugs, as they allow us to inspect the past states of objects no longer present in the current execution stack. Unfortunately the "omniscient" approaches that try to remember all previous states are impractical because they either consume too much space or they are far too slow. Several approaches rely on heuristics to limit these penalties, but they ultimately end up throwing out too much relevant information. In this paper we propose a practical approach to back-in-time debugging that attempts to keep track of only the relevant past data. In contrast to other approaches, we keep object history information together with the regular objects in the application memory. Although seemingly counter-intuitive, this approach has the effect that past data that is not reachable from current application objects (and hence, no longer relevant) is automatically garbage collected. In this paper we describe the technical details of our approach, and we present benchmarks that demonstrate that memory consumption stays within practical bounds. Furthermore since our approach works at the virtual machine level, the performance penalty is significantly better than with other approaches.

Flow-Centric, Back-In-Time Debugging

Conventional debugging tools present developers with means to explore the run-time context in which an error has occurred. In many cases this is enough to help the developer discover the faulty source code and correct it. However, rather often errors occur due to code that has executed in the past, leaving certain objects in an inconsistent state. The actual run-time error only occurs when these inconsistent objects are used later in the program. So-called back-in-time debuggers help developers step back through earlier states of the program and explore execution contexts not available to conventional debuggers. Nevertheless, even back-in-time debuggers do not help answer the question, ``Where did this object come from?'' The Object-Flow Virtual Machine, which we have proposed in previous work, tracks the flow of objects to answer precisely such questions, but this VM does not provide dedicated debugging support to explore faulty programs. In this paper we present a novel debugger, called Compass, to navigate between conventional run-time stack-oriented control flow views and object flows. Compass enables a developer to effectively navigate from an object contributing to an error back-in-time through all the code that has touched the object. We present the design and implementation of Compass, and we demonstrate how flow-centric, back-in-time debugging can be used to effectively locate the source of hard-to-find bugs.

Transactional Memory in a Dynamic Language

Concurrency control is mostly based on locks and is therefore notoriously difficult to use. Even though some programming languages provide high-level constructs, these add complexity and potentially hard-to-detect bugs to the application. Transactional memory is an attractive mechanism that does not have the drawbacks of locks, however the underlying implementation is often difficult to integrate into an existing language. In this paper we show how we have introduced transactional semantics into Smalltalk by using the reflective facilities of the language. Our approach is based on method annotations, incremental parse tree transformations and an optimistic commit protocol. The implementation does not depend on modifications to the virtual machine and therefore can be changed at the language level. We report on a practical case study, benchmarks and further and on-going work.

Mining frequent bug-fix code changes

Detecting bugs as early as possible plays an important role in ensuring software quality before shipping. We argue that mining previous bug fixes can produce good knowledge about why bugs happen and how they are fixed. In this paper, we mine the change history of 717 open source projects to extract bug-fix patterns. We also manually inspect many of the bugs we found to get insights into the contexts and reasons behind those bugs. For instance, we found out that missing null checks and missing initializations are very recurrent and we believe that they can be automatically detected and fixed.

On-farm Cooperator Trials 2011: Effect of Extended-duration Row Covers on Muskmelon and Winter Squash on Bacterial Wilt and Yield

Susceptible cucurbit crops are difficult to grow in Iowa because of bacterial wilt, caused by Erwinia tracheiphila. Striped and spotted cucumber beetles transmit bacterial wilt. Other insect pests such as squash vine borer and squash bugs may also have an economic impact on yield, particularly in squash.

Egg parasitism of Piezodorus guildinii and Nezara viridula (Hemiptera: Pentatomidae) in soybean, alfalfa and red clover

Piezodorus guildinii Westwood and Nezara viridula (L.) (Hemiptera: Pentatomidae) are important soybean pests. P. guildinii causes more injury and is less susceptible to insecticides compared to N. viridula. N. viridula egg parasitoids are well studied; however, little is known about parasitoids of P. guildinii. Alfalfa, soybean and red clover were sampled during several seasons to characterize the abundance of both stink bugs, to determine their egg parasitoids, and to estimate parasitoids impact. In the field, Telenomus podisi (Ashmead),Trissolcus urichi (Crawford) and Trissolcus basalis (Wollaston) (Hymenoptera: Platygastridae) emerged from P. guildinii, while only T. basalis (Wollaston) (Hymenoptera: Platygastridae) emerged from N. viridula. The proportions of parasitized eggs (i. e., the parasitoid impact) and egg masses, as well as the number of parasitized eggs/total number of eggs of the parasitized egg masses, were similar for alfalfa and soybean. Parasitism was not observed in red pclover. Parasitoid impact was lower during the dry growing seasons. Although P. guildinii field parasitism by T. urichi was less significant, laboratory experiments from the bibliography indicate that this wasp species performs well on this host. Trissolcus urichi would be an important biological control agent against P. guildinii, principally when the stink bug is more abundant.