I cried to dream again: discovery and meaning-making in walking simulators

Paper presented at the 1st International Joint Conference of DiGRA and FDG Dundee, August 1-6, 2016.

X-Secure: protecting users from big bad wolves

In 2014 over 70% of people in Great Britain accessed the Internet every day. This resource is an optimal vector for malicious attackers to penetrate home computers and as such compromised pages have been increasing in both number and complexity. This paper presents X-Secure, a novel browser plug-in designed to present and raise the awareness of inexperienced users by analysing web-pages before malicious scripts are executed by the host computer. X-Secure was able to detect over 90% of the tested attacks and provides a danger level based on cumulative analysis of the source code, the URL, and the remote server, by using a set of heuristics, hence increasing the situational awareness of users browsing the internet.

Pervasive eHealth services a security and privacy risk awareness survey

The human factor is often recognised as a major aspect of cyber-security research. Risk and situational perception are identified as key factors in the decision making process, often playing a lead role in the adoption of security mechanisms. However, risk awareness and perception have been poorly investigated in the field of eHealth wearables. Whilst end-users often have limited understanding of privacy and security of wearables, assessing the perceived risks and consequences will help shape the usability of future security mechanisms. This paper present a survey of the the risks and situational awareness in eHealth services. An analysis of the lack of security and privacy measures in connected health devices is described with recommendations to circumvent critical situations.

Solar magnetic carpet I: simulation of synthetic magnetograms

This paper describes a new 2D model for the photospheric evolution of the magnetic carpet. It is the first in a series of papers working towards constructing a realistic 3D non-potential model for the interaction of small-scale solar magnetic fields. In the model, the basic evolution of the magnetic elements is governed by a supergranular flow profile. In addition, magnetic elements may evolve through the processes of emergence, cancellation, coalescence and fragmentation. Model parameters for the emergence of bipoles are based upon the results of observational studies. Using this model, several simulations are considered, where the range of flux with which bipoles may emerge is varied. In all cases the model quickly reaches a steady state where the rates of emergence and cancellation balance. Analysis of the resulting magnetic field shows that we reproduce observed quantities such as the flux distribution, mean field, cancellation rates, photospheric recycle time and a magnetic network. As expected, the simulation matches observations more closely when a larger, and consequently more realistic, range of emerging flux values is allowed (4×1016 - 1019 Mx). The model best reproduces the current observed properties of the magnetic carpet when we take the minimum absolute flux for emerging bipoles to be 4×1016 Mx. In future, this 2D model will be used as an evolving photospheric boundary condition for 3D non-potential modeling.

Solar magnetic carpet II: coronal interactions of small-scale magnetic fields

This paper is the second in a series of studies working towards constructing a realistic, evolving, non-potential coronal model for the solar magnetic carpet. In the present study, the interaction of two magnetic elements is considered. Our objectives are to study magnetic energy build-up, storage and dissipation as a result of emergence, cancellation, and flyby of these magnetic elements. In the future these interactions will be the basic building blocks of more complicated simulations involving hundreds of elements. Each interaction is simulated in the presence of an overlying uniform magnetic field, which lies at various orientations with respect to the evolving magnetic elements. For these three small-scale interactions, the free energy stored in the field at the end of the simulation ranges from 0.2 – 2.1×1026 ergs, whilst the total energy dissipated ranges from 1.3 – 6.3×1026 ergs. For all cases, a stronger overlying field results in higher energy storage and dissipation. For the cancellation and emergence simulations, motion perpendicular to the overlying field results in the highest values. For the flyby simulations, motion parallel to the overlying field gives the highest values. In all cases, the free energy built up is sufficient to explain small-scale phenomena such as X-ray bright points or nanoflares. In addition, if scaled for the correct number of magnetic elements for the volume considered, the energy continually dissipated provides a significant fraction of the quiet Sun coronal heating budget.

Solar magnetic carpet III: coronal modelling of synthetic magnetograms

This article is the third in a series working towards the construction of a realistic, evolving, non-linear force-free coronal-field model for the solar magnetic carpet. Here, we present preliminary results of 3D time-dependent simulations of the small-scale coronal field of the magnetic carpet. Four simulations are considered, each with the same evolving photospheric boundary condition: a 48-hour time series of synthetic magnetograms produced from the model of Meyer et al. ( Solar Phys. 272, 29, 2011). Three simulations include a uniform, overlying coronal magnetic field of differing strength, the fourth simulation includes no overlying field. The build-up, storage, and dissipation of magnetic energy within the simulations is studied. In particular, we study their dependence upon the evolution of the photospheric magnetic field and the strength of the overlying coronal field. We also consider where energy is stored and dissipated within the coronal field. The free magnetic energy built up is found to be more than sufficient to power small-scale, transient phenomena such as nanoflares and X-ray bright points, with the bulk of the free energy found to be stored low down, between 0.5 - 0.8 Mm. The energy dissipated is currently found to be too small to account for the heating of the entire quiet-Sun corona. However, the form and location of energy-dissipation regions qualitatively agree with what is observed on small scales on the Sun. Future MHD modelling using the same synthetic magnetograms may lead to a higher energy release.

The storage and dissipation of magnetic energy in the quiet sun corona determined from SDO/HMI magnetograms

In recent years, higher cadence, higher resolution observations have revealed the quiet-Sun photosphere to be complex and rapidly evolving. Since magnetic fields anchored in the photosphere extend up into the solar corona, it is expected that the small-scale coronal magnetic field exhibits similar complexity. For the first time, the quiet-Sun coronal magnetic field is continuously evolved through a series of non-potential, quasi-static equilibria, deduced from magnetograms observed by the Helioseismic and Magnetic Imager on board the Solar Dynamics Observatory, where the photospheric boundary condition which drives the coronal evolution exactly reproduces the observed magnetograms. The build-up, storage, and dissipation of magnetic energy within the simulations is studied. We find that the free magnetic energy built up and stored within the field is sufficient to explain small-scale, impulsive events such as nanoflares. On comparing with coronal images of the same region, the energy storage and dissipation visually reproduces many of the observed features. The results indicate that the complex small-scale magnetic evolution of a large number of magnetic features is a key element in explaining the nature of the solar corona.

Simulating the formation of a sigmoidal flux rope in AR10977 from SOHO/MDI magnetograms

The modeling technique of Mackay et al. is applied to simulate the coronal magnetic field of NOAA active region AR10977 over a seven day period (2007 December 2-10). The simulation is driven with a sequence of line-of-sight component magnetograms from SOHO/MDI and evolves the coronal magnetic field though a continuous series of non-linear force-free states. Upon comparison with Hinode/XRT observations, results show that the simulation reproduces many features of the active region's evolution. In particular, it describes the formation of a flux rope across the polarity inversion line during flux cancellation. The flux rope forms at the same location as an observed X-ray sigmoid. After five days of evolution, the free magnetic energy contained within the flux rope was found to be 3.9 × 1030 erg. This value is more than sufficient to account for the B1.4 GOES flare observed from the active region on 2007 December 7. At the time of the observed eruption, the flux rope was found to contain 20% of the active region flux. We conclude that the modeling technique proposed in Mackay et al.—which directly uses observed magnetograms to energize the coronal field—is a viable method to simulate the evolution of the coronal magnetic field.

Assisting digital forensic analysis via exploratory information visualisation

Background: Digital forensics is a rapidly expanding field, due to the continuing advances in computer technology and increases in data stage capabilities of devices. However, the tools supporting digital forensics investigations have not kept pace with this evolution, often leaving the investigator to analyse large volumes of textual data and rely heavily on their own intuition and experience. Aim: This research proposes that given the ability of information visualisation to provide an end user with an intuitive way to rapidly analyse large volumes of complex data, such approached could be applied to digital forensics datasets. Such methods will be investigated; supported by a review of literature regarding the use of such techniques in other fields. The hypothesis of this research body is that by utilising exploratory information visualisation techniques in the form of a tool to support digital forensic investigations, gains in investigative effectiveness can be realised. Method:To test the hypothesis, this research examines three different case studies which look at different forms of information visualisation and their implementation with a digital forensic dataset. Two of these case studies take the form of prototype tools developed by the researcher, and one case study utilises a tool created by a third party research group. A pilot study by the researcher is conducted on these cases, with the strengths and weaknesses of each being drawn into the next case study. The culmination of these case studies is a prototype tool which was developed to resemble a timeline visualisation of the user behaviour on a device. This tool was subjected to an experiment involving a class of university digital forensics students who were given a number of questions about a synthetic digital forensic dataset. Approximately half were given the prototype tool, named Insight, to use, and the others given a common open-source tool. The assessed metrics included: how long the participants took to complete all tasks, how accurate their answers to the tasks were, and how easy the participants found the tasks to complete. They were also asked for their feedback at multiple points throughout the task. Results:The results showed that there was a statistically significant increase in accuracy for one of the six tasks for the participants using the Insight prototype tool. Participants also found completing two of the six tasks significantly easier when using the prototype tool. There were no statistically significant different difference between the completion times of both participant groups. There were no statistically significant differences in the accuracy of participant answers for five of the six tasks. Conclusions: The results from this body of research show that there is evidence to suggest that there is the potential for gains in investigative effectiveness when information visualisation techniques are applied to a digital forensic dataset. Specifically, in some scenarios, the investigator can draw conclusions which are more accurate than those drawn when using primarily textual tools. There is also evidence so suggest that the investigators found these conclusions to be reached significantly more easily when using a tool with a visual format. None of the scenarios led to the investigators being at a significant disadvantage in terms of accuracy or usability when using the prototype visual tool over the textual tool. It is noted that this research did not show that the use of information visualisation techniques leads to any statistically significant difference in the time taken to complete a digital forensics investigation.

Strategies for protecting intellectual property when using CUDA applications on graphics processing units

Recent advances in the massively parallel computational abilities of graphical processing units (GPUs) have increased their use for general purpose computation, as companies look to take advantage of big data processing techniques. This has given rise to the potential for malicious software targeting GPUs, which is of interest to forensic investigators examining the operation of software. The ability to carry out reverse-engineering of software is of great importance within the security and forensics elds, particularly when investigating malicious software or carrying out forensic analysis following a successful security breach. Due to the complexity of the Nvidia CUDA (Compute Uni ed Device Architecture) framework, it is not clear how best to approach the reverse engineering of a piece of CUDA software. We carry out a review of the di erent binary output formats which may be encountered from the CUDA compiler, and their implications on reverse engineering. We then demonstrate the process of carrying out disassembly of an example CUDA application, to establish the various techniques available to forensic investigators carrying out black-box disassembly and reverse engineering of CUDA binaries. We show that the Nvidia compiler, using default settings, leaks useful information. Finally, we demonstrate techniques to better protect intellectual property in CUDA algorithm implementations from reverse engineering.

Solar coronal jets: observations, theory, and modeling

Coronal jets represent important manifestations of ubiquitous solar transients, which may be the source of significant mass and energy input to the upper solar atmosphere and the solar wind. While the energy involved in a jet-like event is smaller than that of “nominal” solar flares and coronal mass ejections (CMEs), jets share many common properties with these phenomena, in particular, the explosive magnetically driven dynamics. Studies of jets could, therefore, provide critical insight for understanding the larger, more complex drivers of the solar activity. On the other side of the size-spectrum, the study of jets could also supply important clues on the physics of transients close or at the limit of the current spatial resolution such as spicules. Furthermore, jet phenomena may hint to basic process for heating the corona and accelerating the solar wind; consequently their study gives us the opportunity to attack a broad range of solar-heliospheric problems.

The millennial mum: technology use by new mothers

Becoming a mother presents a woman with new challenges and a need to access new sources of information. This work considers the increase in the use of online parenting support as the first group of millennials become parents. Initial results from a survey comparing the use of technology pre and post the experience of childbirth is presented. The survey reveals that mothers are likely to increase the time they spend online and are strongly motivated by seeking social contact. The paper concludes by considering the implications of this survey for healthcare professionals wishing to give information and support through online media and suggests how HCI professionals can become involved in this work.

A survey of intrusion detection system technologies

This paper provides an overview of IDS types and how they work as well as configuration considerations and issues that affect them. Advanced methods of increasing the performance of an IDS are explored such as specification based IDS for protecting Supervisory Control And Data Acquisition (SCADA) and Cloud networks. Also by providing a review of varied studies ranging from issues in configuration and specific problems to custom techniques and cutting edge studies a reference can be provided to others interested in learning about and developing IDS solutions. Intrusion Detection is an area of much required study to provide solutions to satisfy evolving services and networks and systems that support them. This paper aims to be a reference for IDS technologies other researchers and developers interested in the field of intrusion detection.

Introduction to Security Onion

Security Onion is a Network Security Manager (NSM) platform that provides multiple Intrusion Detection Systems (IDS) including Host IDS (HIDS) and Network IDS (NIDS). Many types of data can be acquired using Security Onion for analysis. This includes data related to: Host, Network, Session, Asset, Alert and Protocols. Security Onion can be implemented as a standalone deployment with server and sensor included or with a master server and multiple sensors allowing for the system to be scaled as required. Many interfaces and tools are available for management of the system and analysis of data such as Sguil, Snorby, Squert and Enterprise Log Search and Archive (ELSA). These interfaces can be used for analysis of alerts and captured events and then can be further exported for analysis in Network Forensic Analysis Tools (NFAT) such as NetworkMiner, CapME or Xplico. The Security Onion platform also provides various methods of management such as Secure SHell (SSH) for management of server and sensors and Web client remote access. All of this with the ability to replay and analyse example malicious traffic makes the Security Onion a suitable low cost alternative for Network Security Management. In this paper, we have a feature and functionality review for the Security Onion in terms of: types of data, configuration, interface, tools and system management.