A Cloud-based Framework for Security Analysis of Browser Extensions

In today's internet world, web browsers are an integral part of our day-to-day activities. Therefore, web browser security is a serious concern for all of us. Browsers can be breached in different ways. Because of the over privileged access, extensions are responsible for many security issues. Browser vendors try to keep safe extensions in their official extension galleries. However, their security control measures are not always effective and adequate. The distribution of unsafe extensions through different social engineering techniques is also a very common practice. Therefore, before installation, users should thoroughly analyze the security of browser extensions. Extensions are not only available for desktop browsers, but many mobile browsers, for example, Firefox for Android and UC browser for Android, are also furnished with extension features. Mobile devices have various resource constraints in terms of computational capabilities, power, network bandwidth, etc. Hence, conventional extension security analysis techniques cannot be efficiently used by end users to examine mobile browser extension security issues. To overcome the inadequacies of the existing approaches, we propose CLOUBEX, a CLOUd-based security analysis framework for both desktop and mobile Browser EXtensions. This framework uses a client-server architecture model. In this framework, compute-intensive security analysis tasks are generally executed in a high-speed computing server hosted in a cloud environment. CLOUBEX is also enriched with a number of essential features, such as client-side analysis, requirements-driven analysis, high performance, and dynamic decision making. At present, the Firefox extension ecosystem is most susceptible to different security attacks. Hence, the framework is implemented for the security analysis of the Firefox desktop and Firefox for Android mobile browser extensions. A static taint analysis is used to identify malicious information flows in the Firefox extensions. In CLOUBEX, there are three analysis modes. A dynamic decision making algorithm assists us to select the best option based on some important parameters, such as the processing speed of a client device and network connection speed. Using the best analysis mode, performance and power consumption are improved significantly. In the future, this framework can be leveraged for the security analysis of other desktop and mobile browser extensions, too.

Cyber security in home and small office local area networks - Attack vectors and vulnerabilities

This thesis presents security issues and vulnerabilities in home and small office local area networks that can be used in cyber-attacks. There is previous research done on single vulnerabilities and attack vectors, but not many papers present full scale attack examples towards LAN. First this thesis categorizes different security threads and later in the paper methods to launch the attacks are shown by example. Offensive security and penetration testing is used as research methods in this thesis. As a result of this thesis an attack is conducted using vulnerabilities in WLAN, ARP protocol, browser as well as methods of social engineering. In the end reverse shell access is gained to the target machine. Ready-made tools are used in the attack and their inner workings are described. Prevention methods are presented towards the attacks in the end of the thesis.

New challenges in making plans: putting design back into the applied science of planning

The origins of the ‘planning’ lie in the regional sciences and attempts to undertake social engineering of land use occupancy.
Over the last 100 years planning, as a discipline, has variously dabbled in design on the margins with urban design and neourbanism, but has stayed staunchly in the applied science and social science realms. This penchant detrimentally affects its graduates abilities to holistically appreciate and envision the consequences of their decisions-making and plan-making, to convey strength of conviction and expertise to the community, but also to establish a solid basis upon which its professional practice applications and decision-making paradigms successfully articulate equity and comprehensiveness of rational land use and development planning and decision-making. While planning re-learnt how to legitimately evaluate design and aesthetics into planning in the 1960s through the emergent McHargian ecological design paradigm, quickly embracing it as a consequence of major environmental land use disasters that occurred ‘on its watch’ that were demonstrable failures of its claimed insight and professional responsibilities, it has struggled as a discipline to embrace design as an integral technology in its daily operations and expressed ‘territory’ of professional responsibility. This paper reviews this legacy and then charts some emergent patterns in the teaching and practice of planning in Australia that are attempting to re-position design as a legitimate and integral part of the knowledge and skills of a professional planners.

Estudio de los fundamentos teóricos, conceptuales e ideológicos alrededor de la pobreza, de la mayor instancia de planeación en Colombia: DNP 2002-2014

El propósito de esta investigación es identificar cuáles han sido las tendencias determinantes para la construcción de la visión de pobreza del DNP durante el periodo 2002-2014.

Using social media to facilitate knowledge transfer in complex engineering environments : a primer for educators

While highly cohesive groups are potentially advantageous they are also often correlated with the emergence of knowledge and information silos based around those same functional or occupational clusters. Consequently, an essential challenge for engineering organisations wishing to overcome informational silos is to implement mechanisms that facilitate, encourage and sustain interactions between otherwise disconnected groups. This paper acts as a primer for those seeking to gain an understanding of the design, functionality and utility of a suite of software tools generically termed social media technologies in the context of optimising the management of tacit engineering knowledge. Underpinned by knowledge management theory and using detailed case examples, this paper explores how social media technologies achieve such goals, allowing for the transfer of knowledge by tapping into the tacit and explicit knowledge of disparate groups in complex engineering environments.

Engineering social awareness in work environments

A growing interest is seen for designing intelligent environments that support personally meaningful, sociable and rich everyday experiences. In this paper we describe an intelligent, large screen display called Panorama that is aimed at supporting and enhancing social awareness within an academic work environment. Panorama is not intended to provide instrumental or other productivity related information. Rather, the goal of Panorama is to enhance social awareness by providing interpersonal and rich information related to co-workers and their everyday interactions in the department. A two-phase assessment of Panorama showed to promote curiosity and interest in exploring different activities in the environment.

The construction of social identity in newly recruited nuclear engineering staff : a longitudinal study

This study examines the process by which newly recruited nuclear engineering and technical staff came to understand, define, think, feel and behave within a distinct group that has a direct contribution to the organization's overall emphasis on a culture of reliability and system safety. In the field of organizational behavior the interactive model of social identity formation has been recently proposed to explain the process by which the internalization of shared norms and values occurs, an element critical in identity formation. Using this rich model of organizational behavior we analyzed multiple sources of data from nine new hires over a period of three years. This was done from the time they were employed to investigate the construction of social identity by new entrants entering into a complex organizational setting reflected in the context of a nuclear facility. Informed by our data analyses, we found support for the interactive model of social identity development and report the unexpected finding that a newly appointed member's age and level of experience appears to influence the manner in which they adapt, and assimilate into their surroundings. This study represents an important contribution to the safety and reliability literature as it provides a rich insight into the way newly recruited employees enact the process by which their identities are formed and hence act, particularly under conditions of duress or significant organizational disruption in complex organizational settings.

Corporate social responsibility in construction and engineering firms: key elements of effective strategy

Through multiple case studies of firms we argue that firms that have developed corporate responsibility strategies, albeit informally at first, do so by making intentional, informed and collective choices about CSR initiatives. More precisely, we point to the importance of considering corporate identity in making these choices and to the process of adaptive coordination, which includes both responding to and influencing the CSR environment. We conclude that CSR strategic landscape are determined more and more by the astute and careful management of a network of cooperative and competitive stakeholder interests which possess both tangible and intangible value to a firm.

Exploring the cultural and social impacts on the requirements engineering processes-highlighting some problems challenging virtual team relationships with clients

Abstract:

Requirements engineering is a crucial phase in software development. Software development in a virtual domain adds another dimension to the process of requirements engineering. There has been growing interest in virtual teams, and more specifically in virtual software development. While structured software development methods are the obvious first choice for project managers to ensure a virtual software development team remains on track, the social and cultural aspects of requirements engineering cannot be ignored. These social aspects are especially important across different cultures, and have been shown to affect the success of an information system. The discussion in this paper is centred around the requirements engineering processes of a virtual team in a Thai Software House. This paper explains the issues and challenges of requirements engineering in a virtual domain from a social and cultural perspective. Project managers need to encourage a balance between structured methods and social aspects in requirements engineering for virtual team members. Cultural and social aspects influence the relationship between the virtual team and the client.

Feel bored? Join Verse! Engineering Vehicular Proximity Social Network

Travellers in vehicles often have strong willingness to share their travel experience and exchange information to each other through social networks2, such as Facebook and Twitter. This, however, can be costly due to the limited connections to Internet on the road. In this paper we develop Verse to facilitate the social communications among vehicle travellers on highways. Verse enables passengers on-board vehicles to share the content information, such as travel blogs with pictures, among each other using the impromptu wireless inter-vehicle communications. Unlike traditional online social networks, which are built upon the reliable IP networks, vehicular social networks face fundamental challenges in that: 1) users are anonymous and strangers to each other and hard to identify potential friends of shared interests, and 2) users communicate through intermittent and unreliable inter-vehicle connections. On addressing the two challenges, Verse implements a friend recommendation function, which helps passengers efficiently identify potential social friends with both shared interests and relatively reliable wireless connections. In addition, Verse is equipped with a social-aware rate control scheme towards efficient utilization of network bandwidth. Using extensive simulations, we show that the friend recommendation function of Verse can effectively predict the mobility of vehicles to assist the social communication, and the social-aware rate control scheme quickly and efficiently adapts the vehicle’s transmission rate according to their social impacts.

Differences between the personal, social and emotional profiles of teaching and computer engineering professionals and students

The evidence suggests that emotional intelligence and personality traits are important qualities that workers need in order to successfully exercise a profession. This article assumes that the main purpose of universities is to promote employment by providing an education that facilitates the acquisition of abilities, skills, competencies and values. In this study, the emotional intelligence and personality profiles of two groups of Spanish students studying degrees in two different academic disciplines – computer engineering and teacher training – were analysed and compared. In addition, the skills forming part of the emotional intelligence and personality traits required by professionals (computer engineers and teachers) in their work were studied, and the profiles obtained for the students were compared with those identified by the professionals in each field. Results revealed significant differences between the profiles of the two groups of students, with the teacher training students scoring higher on interpersonal skills; differences were also found between professionals and students for most competencies, with professionals in both fields demanding more competencies that those evidenced by graduates. The implications of these results for the incorporation of generic social, emotional and personal competencies into the university curriculum are discussed.

General education in engineering : a report of the Humanistic-Social Research Project /

Mode of access: Internet.