Enhancing security of linux-based android devices

Our daily lives become more and more dependent upon smartphones due to their increased capabilities. Smartphones are used in various ways from payment systems to assisting the lives of elderly or disabled people. Security threats for these devices become increasingly dangerous since there is still a lack of proper security tools for protection. Android emerges as an open smartphone platform which allows modification even on operating system level. Therefore, third-party developers have the opportunity to develop kernel-based low-level security tools which is not normal for smartphone platforms. Android quickly gained its popularity among smartphone developers and even beyond since it bases on Java on top of "open" Linux in comparison to former proprietary platforms which have very restrictive SDKs and corresponding APIs. Symbian OS for example, holding the greatest market share among all smartphone OSs, was closing critical APIs to common developers and introduced application certification. This was done since this OS was the main target for smartphone malwares in the past. In fact, more than 290 malwares designed for Symbian OS appeared from July 2004 to July 2008. Android, in turn, promises to be completely open source. Together with the Linux-based smartphone OS OpenMoko, open smartphone platforms may attract malware writers for creating malicious applications endangering the critical smartphone applications and owners� privacy. In this work, we present our current results in analyzing the security of Android smartphones with a focus on its Linux side. Our results are not limited to Android, they are also applicable to Linux-based smartphones such as OpenMoko Neo FreeRunner. Our contribution in this work is three-fold. First, we analyze android framework and the Linux-kernel to check security functionalities. We survey wellaccepted security mechanisms and tools which can increase device security. We provide descriptions on how to adopt these security tools on Android kernel, and provide their overhead analysis in terms of resource usage. As open smartphones are released and may increase their market share similar to Symbian, they may attract attention of malware writers. Therefore, our second contribution focuses on malware detection techniques at the kernel level. We test applicability of existing signature and intrusion detection methods in Android environment. We focus on monitoring events on the kernel; that is, identifying critical kernel, log file, file system and network activity events, and devising efficient mechanisms to monitor them in a resource limited environment. Our third contribution involves initial results of our malware detection mechanism basing on static function call analysis. We identified approximately 105 Executable and Linking Format (ELF) executables installed to the Linux side of Android. We perform a statistical analysis on the function calls used by these applications. The results of the analysis can be compared to newly installed applications for detecting significant differences. Additionally, certain function calls indicate malicious activity. Therefore, we present a simple decision tree for deciding the suspiciousness of the corresponding application. Our results present a first step towards detecting malicious applications on Android-based devices.

Perceptions of visitor relationship marketing opportunities by destination marketers : an importance-performance analysis

Customer relationship marketing (CRM) initiatives are increasingly being adopted by businesses in the attempt to enhance brand loyalty and stimulate repeat purchases. The purpose of this study was to examine the extent to which destination marketing organisations (DMOs) around the world have developed a visitor relationship marketing (VRM) orientation. The proposition underpinning the study is that maintaining meaningful dialogue with previous visitors in some markets would represent a more efficient use of resources than above the line advertising to attract new visitors. Importance-performance analysis was utilised to measure destination marketers’ perceptions of the efficacy of CRM initiatives, and then rate their own organisation’s performance across the same range of initiatives. A key finding was that mean importance was higher than perceived performance for every item. While the small sample limits generalisability, in general there are appears to be a lack of strategic intent by DMOs to invest in VRM.

Wife abuse : are we detecting it?

Our objective was to measure the prevalence of wife abuse in an urban teaching hospital family practice unit and compare this to the frequency of documentation by family physicians. A modified Conflicts Tactics Scale Questionnaire was administered to all female patients either married or common-law older than 16 years during the study period. The respective patients' charts were reviewed for documentation of wife abuse. Three hundred eighty-three charts were reviewed, and 275 surveys were completed (72% response rate). Physical and mental abuse were reported in 8% and 23%, respectively, of the respondents. Four percent of respondents had considered suicide. One percent of the charts had wife assault documented (p = 0.0001). Wife abuse is reported in at least 8% of our patients. There appear to be significant health risks to these women, including homicide, suicide, and rape. Family physician documentation of wife abuse was poor.

The use of hypnosis in labor and delivery : a preliminary study

Self-hypnosis was taught to 87 obstetric patients (HYP) and was not taught to 56 other patients (CNTRL), all delivered by the same family physician, in order to determine whether the use of self-hypnosis by low-risk obstetric patients leads to fewer technologic interventions during their deliveries or greater satisfaction of parturients with their delivery experience or both. The outcomes of the deliveries of these two groups were compared, and the HYP group was compared to 352 low-risk patients delivered by other family physicians at the same hospital (WCH). Questionnaires were mailed postpartum to 156 patients, all delivered by the same family physician, to determine satisfaction with delivery using the Labor and Delivery Satisfaction Index (LADSI). The hypnosis group showed a significant reduction in the number of epidurals (11.4% less than CNTRL and 17.9% less than WCH, p < 0.05) and the use of intravenous lines (18.5% less for both, p < 0.05). The number of episiotomies was significantly less in the HYP group compared to WCH (15.9%, p < 0.05) and 11.5% less when compared to CNTRL. The tear rate was not statistically different. Combined use of the intervention triad (epidural–forceps–episiotomy) was less for HYP than for CNTRL (15.8% less) and WCH (10.2% less, p < 0.05). More deliveries were done in the labor room with HYP than CNTRL (21%, p < 0.05). The second stage was shortened by 10 min (HYP vs CNTRL). Overall satisfaction of HYP and CNTRL patients was similar and generally favorable.

Monitoring android for collaborative anomaly detection : a first architectural draft

Our daily lives become more and more dependent upon smartphones due to their increased capabilities. Smartphones are used in various ways, e.g. for payment systems or assisting the lives of elderly or disabled people. Security threats for these devices become more and more dangerous since there is still a lack of proper security tools for protection. Android emerges as an open smartphone platform which allows modification even on operating system level and where third-party developers first time have the opportunity to develop kernel-based low-level security tools. Android quickly gained its popularity among smartphone developers and even beyond since it bases on Java on top of "open" Linux in comparison to former proprietary platforms which have very restrictive SDKs and corresponding APIs. Symbian OS, holding the greatest market share among all smartphone OSs, was even closing critical APIs to common developers and introduced application certification. This was done since this OS was the main target for smartphone malwares in the past. In fact, more than 290 malwares designed for Symbian OS appeared from July 2004 to July 2008. Android, in turn, promises to be completely open source. Together with the Linux-based smartphone OS OpenMoko, open smartphone platforms may attract malware writers for creating malicious applications endangering the critical smartphone applications and owners privacy. Since signature-based approaches mainly detect known malwares, anomaly-based approaches can be a valuable addition to these systems. They base on mathematical algorithms processing data that describe the state of a certain device. For gaining this data, a monitoring client is needed that has to extract usable information (features) from the monitored system. Our approach follows a dual system for analyzing these features. On the one hand, functionality for on-device light-weight detection is provided. But since most algorithms are resource exhaustive, remote feature analysis is provided on the other hand. Having this dual system enables event-based detection that can react to the current detection need. In our ongoing research we aim to investigates the feasibility of light-weight on-device detection for certain occasions. On other occasions, whenever significant changes are detected on the device, the system can trigger remote detection with heavy-weight algorithms for better detection results. In the absence of the server respectively as a supplementary approach, we also consider a collaborative scenario. Here, mobile devices sharing a common objective are enabled by a collaboration module to share information, such as intrusion detection data and results. This is based on an ad-hoc network mode that can be provided by a WiFi or Bluetooth adapter nearly every smartphone possesses.

Citation success over time : theory or empirics?

This study investigates the citation patterns of theoretical and empirical papers published in a top economics journal, namely American Economic Review, over a period of almost 30 years, while also exploring the determinants of citation success. The results indicate that empirical papers attract more citation success than theoretical studies. However, the pattern over time is very similar. Moreover, among empirical papers it appears that the cross-country studies are more successful than single country studies focusing on North America data or other regions.

Extraordinary wealth, globalization, and corruption

The billionaires of the world attract significant attention from the media and the public. Surprisingly, only a limited number of studies have explored empirically the determinants of extraordinary wealth. Using a large dataset we investigate whether globalization and corruption affect extreme wealth accumulation. We find evidence that an increase in globalization increases super-affluence. In addition, we also find that an increase in corruption leads to an increase in the creation of super fortune. This supports the argument that in kleptocracies large sums are transferred into the hands of a small group of individuals.

Support for patients with hepatitis C : An exploratory qualitative study of medical specialists’ perceptions

Objective: To explore the range of meanings about the role of support for patients with hepatitis C by examining medical specialists' perceptions. Method: The study employed a qualitative, open-ended interview design and was conducted in four major teaching hospitals in Adelaide, South Australia. Eight participants (three infectious disease physicians, four gastroenterologists, one hepatologist), selected through purposive sampling, were interviewed about general patient support, their role in support provision, the role of non-medical support and their reasons for not using support services. Results: Main themes included a focus on support as information provision and that patient education is best carried out by a medical specialist. The use of support services was defined as the patient's decision. Participants identified four key periods when patients would benefit from support; during diagnosis, failure to meet treatment criteria, during interferon treatment and following treatment failure. Conclusions: It was concluded that while barriers exist to the establishment of partnerships between specialists and other support services, this study has identified clear points at which future partnerships could be established. Implications: A partnership approach to developing support for patients with hepatitis C offers a systematic framework to facilitate the participation of health professionals and the community in an important area of public health.

Identity, forgiveness and power in the management of child sexual abuse by personnel in Christian Institutions

The ongoing crises of child sexual abuse by Christian institutions leaders across the Anglophone world continue to attract public attention and public inquiries. The pervasiveness of this issue lends credence to the argument that the prevailing ethos functioning within some Christian Institutions is one which exercises influence to repeatedly mismanage allegations of child sexual abuse by Church leaders. This work draws on semistructured interviews conducted with 15 Personnel in Christian Institutions (PICIs) in Australia who were identified as being pro-active in their approach to addressing child sexual abuse by PICIs. From these data, themes of power and forgiveness are explored through a Foucaultian conceptualising of pastoral power and ‘truth’ construction. Forgiveness is viewed as a discourse which can have the power effect of either silencing or empowering victim/survivors. The study concludes that individual PICIs’ understandings of the role ofpower in their praxis influences outcomes from the deployment of forgiveness.

Mid-gestation intra-amniotic infection with Ureaplasma parvum is resolved within spiny mice (Acomys cahirinus) by term delivery: but caused chronic infection of fetal lungs and placentae

Background: Ureaplasma species in amniotic fluid at the time of second-trimester amniocentesis increases the risk of preterm birth, but most affected pregnancies continue to term (Gerber et al. J Infect Dis 2003). We aimed to model intra-amniotic (IA) ureaplasma infection in spiny mice, a species with a relatively long gestation (39 days) that allows investigation of the disposition and possible clearance of ureaplasmas in the feto-placental compartment. Method: Pregnant spiny mice received IA injections of U. parvum serovar 6 (10µL, 1x104 colony-forming-units in PBS) or 10B media (10µL; control) at 20 days (d) of gestation (term=39d). At 37d fetuses (n=3 ureaplasma, n=4 control) were surgically delivered and tissues were collected for; bacterial culture, ureaplasma mba and urease gene expression by PCR, tissue WBC counts and indirect fluorescent antibody (IFA) staining using anti-ureaplasma serovar 6 (rabbit) antiserum. Maternal and fetal plasma IgG was measured by Western blot. Results: Ureaplasmas were not detected by culture or PCR in fetal or maternal tissues but were visualized by IFA within placental and fetal lung tissues, in association with inflammatory changes and elevated WBC counts (p<0.0001). Anti-ureaplasma IgG was detected in maternal (2/2 tested) and fetal (1/2 tested) plasma but not in controls (0/3). Conclusions: IA injection of ureaplasmas in mid-gestation spiny mice caused persistent fetal lung and placental infection even though ureaplasmas were undetectable using standard culture or PCR techniques. This is consistent with resolution of IA infection, which may occur in human pregnancies that continue to term despite detection of ureaplasmas in mid-gestation.

Ureaplasma species multiple banded antigen (MBA) variation is associated with the severity of chorioamnionitis in late preterm placentas

Background: Intra-amniotic infection accounts for 30% of all preterm births (PTB), with the human Ureaplasma species being the most frequently identified microorganism from the placentas of women who deliver preterm. The highest prevalence of PTB occurs late preterm (32-36 weeks) but no studies have investigated the role of infectious aetiologies associated with late preterm birth. Method: Placentas from women with late PTB were dissected aseptically and samples of chorioamnion tissue and membrane swabs were collected. These were tested for Ureaplasma spp. and aerobic/anaerobic bacteria by culture and real-time PCR. Western blot was used to assess MBA variation in ureaplasma clinical isolates. The presence of microorganisms was correlated with histological chorioamnionitis. Results: Ureaplasma spp. were isolated from 33/466 (7%) of placentas by culture or PCR. The presence of ureaplasmas, but not other microorganisms, was associated with histological chorioamnionitis (21/33 ureaplasma-positive vs. 8/42 other bacteria; p= 0.001). Ureaplasma clinical isolates demonstrating no MBA variation were associated with histological chorioamnionitis. By contrast, ureaplasmas displaying MBA variation were isolated from placentas with no significant histological chorioamnionitis (p= 0.001). Conclusion: Ureaplasma spp. within placentas delivered late preterm (7%) is associated with histological chorioamnionitis (p = 0.001). Decreased inflammation within chorioamnion was observed when the clinical ureaplasma isolates demonstrated variation of their surface-exposed lipoproteins (MBA). This variation may be a mechanism by which ureaplasmas modulate and evade the host immune response. So whilst ureaplasmas are present intra-amniotically they are not suspected because of the normal macroscopic appearance of the placentas and the amniotic fluid.

Human milk xanthine oxidase and neonatal salivary nucleotide precursors generate hydrogen peroxide; a novel pathway with potential role in regulating oral microflora

Background: Xanthine oxidase (XO) is a complex molybdeno-flavoprotein occurring with high activity in the milk fat globule membrane (MFGM) in all mammalian milk and is involved in the final stage of degradation of purine nucleotides. It catalyzes the sequential oxidation of hypoxanthine to xanthine and uric acid, accompanied by production of hydrogen peroxide and superoxide anion. Human saliva has been extensively described for its composition of proteins, electrolytes, cortisol, melatonin and some metabolites such as amino acids, but little is known about nucleotide metabolites. Method: Saliva was collected with swabs from babies; at full-term 1-4 days, 6-weeks, 6-months and 12-months. Unstimulated fasting (morning) saliva samples were collected directly from 77 adults. Breast milk was collected from 24 new mothers. Saliva was extracted from swabs and ultra-filtered. Nucleotide metabolites were analyzed by RP-HPLC with UV-photodiode array and ESI-MS/MS. XO activity was measured as peroxide production from hypoxanthine. Bacterial inhibition over time was assessed using CFU/mL or OD. Results: Median concentrations (μmol/L) of salivary nucleobases and nucleosides for neonates/6-weeks/6-months/12-months/adult respectively were: uracil 5.3/0.8/1.4/0.7/0.8, hypoxanthine 27/7.0/1.1/0.8/2.0, xanthine 19/7.0/2.0/2.0/2.0, adenosine 12/7.0/0.9/0.8/0.1, inosine 11/5.0/0.3/0.4/0.2, guanosine 7.0/6.0/0.5/0.4/0.1, uridine 12/0.8/0.3/0.9/0.4. Deoxynucleosides and dihydropyrimidines concentrations were essentially negligible. XO activity (Vmax:mean ± SD) in breast milk was 8.9 ± 6.2 μmol/min/L and endogenous peroxide was 27 ± 12 μmol/L; mixing breast milk with neonate saliva generated ~40 μmol/L peroxide,which inhibited Staphylococcus aureus. Conclusions: Salivary metabolites, particularly xanthine/hypoxanthine, are high in neonates, transitioning to low adult levels between 6-weeks to 6-months (p < 0.001). Peroxide occurs in breast milk and is boosted during suckling as an antibacterial system.

Alteration of the foetal skin's response to Lipopolysaccharide (LPS) following Ureplasma Parvum exposure

Early preterm birth (<32 weeks) is associated with in utero infection and inflammation. We used an ovine model of in utero infection to ask if exposure to Ureaplasma serovar 3 (UP) modulated the response of the fetal skin to LPS.

Foetal skin inflammation in response to in utero Ureaplasma Parvum exposure

Early preterm birth (<32 weeks) is associated with in utero infection and inflammation. We used an ovine model of in utero infection to ask if exposure to Ureaplasma serovar 3 (UP) modulated the response of the fetal skin to LPS.

Factors affecting marketing decision making with an ethical content : collusive tendering in the construction contract market

Reports of immoral marketing practices i n the construction industry attract political, media and public but not much academic interest. This paper adopts a behavioural perspective and proposes a model for applying marketing ethics concepts and methods in the study of collusion in the construction contract market. An extensive multidisciplinary review of existing literature identified a lack of adequate conceptualisation of the mechanisms and decision making factors of collusive tendering. The process of developing the model is detailed in this paper. The objectives and methodology of the research project that tested the model are also outlined. The paper concludes with a brief note on the contributions and application of the proposed model.