Applied web traffic analysis for numerical encoding of SQL Injection attack features.

SQL Injection Attack (SQLIA) remains a technique used by a computer network intruder to pilfer an organisation’s confidential data. This is done by an intruder re-crafting web form’s input and query strings used in web requests with malicious intent to compromise the security of an organisation’s confidential data stored at the back-end database. The database is the most valuable data source, and thus, intruders are unrelenting in constantly evolving new techniques to bypass the signature’s solutions currently provided in Web Application Firewalls (WAF) to mitigate SQLIA. There is therefore a need for an automated scalable methodology in the pre-processing of SQLIA features fit for a supervised learning model. However, obtaining a ready-made scalable dataset that is feature engineered with numerical attributes dataset items to train Artificial Neural Network (ANN) and Machine Leaning (ML) models is a known issue in applying artificial intelligence to effectively address ever evolving novel SQLIA signatures. This proposed approach applies numerical attributes encoding ontology to encode features (both legitimate web requests and SQLIA) to numerical data items as to extract scalable dataset for input to a supervised learning model in moving towards a ML SQLIA detection and prevention model. In numerical attributes encoding of features, the proposed model explores a hybrid of static and dynamic pattern matching by implementing a Non-Deterministic Finite Automaton (NFA). This combined with proxy and SQL parser Application Programming Interface (API) to intercept and parse web requests in transition to the back-end database. In developing a solution to address SQLIA, this model allows processed web requests at the proxy deemed to contain injected query string to be excluded from reaching the target back-end database. This paper is intended for evaluating the performance metrics of a dataset obtained by numerical encoding of features ontology in Microsoft Azure Machine Learning (MAML) studio using Two-Class Support Vector Machines (TCSVM) binary classifier. This methodology then forms the subject of the empirical evaluation.

Detecting Botnets Through Log Correlation

Botnets, which consist of thousands of compromised machines, can cause a significant threat to other systems by launching Distributed Denial of Service attacks, keylogging, and backdoors. In response to this threat, new effective techniques are needed to detect the presence of botnets. In this paper, we have used an interception technique to monitor Windows Application Programming Interface system calls made by communication applications. Existing approaches for botnet detection are based on finding bot traffic patterns. Our approach does not depend on finding patterns but rather monitors the change of behaviour in the system. In addition, we will present our idea of detecting botnet based on log correlations from different hosts.

Visualization of flow fields in the web platform

Visualization of vector fields plays an important role in research activities nowadays -- Web applications allow a fast, multi-platform and multi-device access to data, which results in the need of optimized applications to be implemented in both high-performance and low-performance devices -- Point trajectory calculation procedures usually perform repeated calculations due to the fact that several points might lie over the same trajectory -- This paper presents a new methodology to calculate point trajectories over highly-dense and uniformly-distributed grid of points in which the trajectories are forced to lie over the points in the grid -- Its advantages rely on a highly parallel computing architecture implementation and in the reduction of the computational effort to calculate the stream paths since unnecessary calculations are avoided, reusing data through iterations -- As case study, the visualization of oceanic currents through in the web platform is presented and analyzed, using WebGL as the parallel computing architecture and the rendering Application Programming Interface

Interfaz AIS para aplicaciones en CAD/CAM/CG

Los modeladores geométricos más comunes en el mercado ofrecen, además de sus servicios de modelado, una API (Application Programming Interface) que permite la construcción de aplicaciones o software cliente -- Estas aplicaciones aprovechan los servicios básicos del modelador para proveer tareas específicas -- Sin embargo las diferencias entre API´s de distintos modeladores imposibilita el intercambio del software cliente entre ellos -- Application Interface Specification -AIS- es una API genérica para ser usada por aplicaciones cliente de los modeladores geométricos -- Este artículo reporta la implementación de AIS sobre AutoCAD® y MicroStation® y discute aspectos importantes de dicha implementación -- Además presenta una aplicación cliente neutra que habla lenguaje AIS y por lo tanto se ejecuta transparentemente sobre los dos modeladores -- AIS se presenta como una alternativa económica para escribir aplicaciones de CAD/CAM/CG -- Futuros desarrollos incluyen la implementación de AIS para labores gráficas y/o de base de datos

Energy consumption of parallel algorithms for solving linear systems on HPC architecture

Modern High-Performance Computing HPC systems are gradually increasing in size and complexity due to the correspondent demand of larger simulations requiring more complicated tasks and higher accuracy. However, as side effects of the Dennard’s scaling approaching its ultimate power limit, the efficiency of software plays also an important role in increasing the overall performance of a computation. Tools to measure application performance in these increasingly complex environments provide insights into the intricate ways in which software and hardware interact. The monitoring of the power consumption in order to save energy is possible through processors interfaces like Intel Running Average Power Limit RAPL. Given the low level of these interfaces, they are often paired with an application-level tool like Performance Application Programming Interface PAPI. Since several problems in many heterogeneous fields can be represented as a complex linear system, an optimized and scalable linear system solver algorithm can decrease significantly the time spent to compute its resolution. One of the most widely used algorithms deployed for the resolution of large simulation is the Gaussian Elimination, which has its most popular implementation for HPC systems in the Scalable Linear Algebra PACKage ScaLAPACK library. However, another relevant algorithm, which is increasing in popularity in the academic field, is the Inhibition Method. This thesis compares the energy consumption of the Inhibition Method and Gaussian Elimination from ScaLAPACK to profile their execution during the resolution of linear systems above the HPC architecture offered by CINECA. Moreover, it also collates the energy and power values for different ranks, nodes, and sockets configurations. The monitoring tools employed to track the energy consumption of these algorithms are PAPI and RAPL, that will be integrated with the parallel execution of the algorithms managed with the Message Passing Interface MPI.

Concentration in liner shipping: its causes and impacts for ports and shipping services in developing regions

Includes bibliography

m-SportGIS

Information technologies (ITs), and sports resources and services aid the potential to transform governmental organizations, and play an important role in contributing to sustainable communities development, respectively. Spatial data is a crucial source to support sports planning and management. Low-cost mobile geospatial tools bring productive and accurate data collection, and their use combining a handy and customized graphical user interface (GUI) (forms, mapping, media support) is still in an early stage. Recognizing the benefits — efficiency, effectiveness, proximity to citizens — that Mozambican Minister of Youth and Sports (MJD) can achieve with information resulted from the employment of a low-cost data collection platform, this project presents the development of a mobile mapping application (app) — m-SportGIS — under Open Source (OS) technologies and a customized evolutionary software methodology. The app development embraced the combination of mobile web technologies and Application Programming Interfaces (APIs) (e.g. Sencha Touch (ST), Apache Cordova, OpenLayers) to deploy a native-to-the-device (Android operating system) product, taking advantage of device’s capabilities (e.g. File system, Geolocation, Camera). In addition to an integrated Web Map Service (WMS), was created a local and customized Tile Map Service (TMS) to serve up cached data, regarding the IT infrastructures limitations in several Mozambican regions. m-SportGIS is currently being exploited by Mozambican Government staff to inventory all kind of sports facilities, which resulted and stored data feeds a WebGIS platform to manage Mozambican sports resources.

Interface com o AEDROMO (Ambiente experimental e didático com robôs móveis) utilizando sistema Android

The AEDROMO (Experimental and Didactic Environment with Mobile Robots) is a versatile, user friendly and scalable environment that supports a wide range of experiments. In it there is an area that is similar to a desk where objects can interact with each other, including robots and other objects, and thus can perform numerous activities. In it's current state, AEDROMO has client computers that interact with the system through an interface, and thus realize the communication between the user and AEDROMO. This project offer support to create a new form of interface for AEDROMO and can therefore be used for devices running Android, the app developed in this project will serve as a basis for future work on this new interface

Metodologie e strumenti di anticontraffazione in ambienti Android

Scenario di questa tesi è l’anticontraffazione e il suo contributo consiste nell’ingegnerizzazione e in parte dello sviluppo di un applicativo software dell’azienda ViDiTrust. Il programma, realizzato per dispositivi mobili evoluti, permette di acquisire informazioni attraverso un particolare timbro apposto sui beni di consumo di pronunciarsi sulla originalità o meno del prodotto.

A Visual Programming Framework for Wireless Sensor Networks in Smart Home Applications

International Conference on Intelligent Sensors, Sensor Networks and Information Processing (ISSNIP 2015). 7 to 9, Apr, 2015. Singapure, Singapore.

BabeLO : an extensible converter of programming exercises formats

In the last two decades, there was a proliferation of programming exercise formats that hinders interoperability in automatic assessment. In the lack of a widely accepted standard, a pragmatic solution is to convert content among the existing formats. BabeLO is a programming exercise converter providing services to a network of heterogeneous e-learning systems such as contest management systems, programming exercise authoring tools, evaluation engines and repositories of learning objects. Its main feature is the use of a pivotal format to achieve greater extensibility. This approach simplifies the extension to other formats, just requiring the conversion to and from the pivotal format. This paper starts with an analysis of programming exercise formats representative of the existing diversity. This analysis sets the context for the proposed approach to exercise conversion and to the description of the pivotal data format. The abstract service definition is the basis for the design of BabeLO, its components and web service interface. This paper includes a report on the use of BabeLO in two concrete scenarios: to relocate exercises to a different repository, and to use an evaluation engine in a network of heterogeneous systems.

Cliente mobile para consumo e disponibilização de serviços georreferenciados

Actualmente as aplicações móveis são indispensáveis para o utilizador. De acordo com estudos recentes, as receitas geradas pela sua utilização resultaram em aproximadamente 20 biliões de dólares só em 2013. Com estes valores estima-se que no futuro estes números aumentem, daí tornar-se imperativo abordar num estudo científico sobre este mercado em expansão. A somar às inúmeras aplicações referentes ao sistema móvel Android, surgem as aplicações de serviços georreferenciados que vão aqui ser abordadas em maior profundidade, nomeadamente o consumo e disponibilização destes serviços em clientes mobile. Ponderadas diversas soluções é possível com alguns melhoramentos atingir benefícios específicos para um maior número de utilizadores tendo em conta as suas características a priori. Uma das questões principais passa pela capacidade de publicação de diversas fontes de informação (vários publishers) com o uso de uma Application Programing Interface (API) documentada e aberta para que qualquer entidade possa publicar os seus conteúdos georreferenciados. O consumo por parte dos utilizadores (subscriber) é feita numa plataforma móvel Android onde os possam vários publishers possam publicar os seus conteúdos a partir da posição do utilizador. Esta publicação será facilitada criando bases de dados para o armazenamento de todas as informações relevantes tanto da parte dos publishers como dos subscribers. A validação deste trabalho consistiu em testar vários tipos de publicações, nomeadamente texto, imagem e gráficos na sua pesquisa e consumo numa plataforma móvel Android. Numa segunda fase, foi testada a publicação de gráficos em tempo real na plataforma.

Dynamic application development in Symbian OS

Diplomityössä tutkitaan, kuinka Symbian-sovelluskehitystä voitaisiin tehostaa. Työssä esitellään Symbian-käyttöjärjestelmä, sekä pohditaan haasteita ja rajoitteita joita Symbian sovelluskehityksessä kohdataan. Myöskin jo olemassa olevia kehitystapoja pohditaan työn tavoitteen kannalta. Symbian-sovelluskehityksessä tehdään toistuvasti samoja asioita. Koska Symbian on avoin käyttöjärjestelmä, sovelluskehittäjiä on paljon. Tehokkaamman kehitystavan löytäminen säästäisi paljon resursseja. Tällä hetkellä perinteiset ohjelmointitavat näyttävät olevan suosituin tapa kehittää sovelluksia. Kuitenkin on jo olemassa useita ratkaisuja, jotka pyrkivät tehostamaan sovelluskehitystä, mikä todistaa tarpeen kehittää tehokkuutta. Työssä toteutettu systeemi ajaa Symbian sovelluksia XML-määrityksen pohjalta. Kun käytetään XML-määritystä C++-koodin sijasta, sovelluskehitys muuttuu. Näiden muutosten täytyy kuitenkin olla myönteisiä, eivätkä ne saa haitata ohjelmiston laatua tai käytettävyyttä.

Läsnäolotietojen hallinta viestintäsovelluksissa

Läsnäolotietoja on käytetty jo pitkään hyväksi erilaisissa pikaviestintäsovelluksissa. Nämä sovellukset ovat käyttäneet omia tekniikoitaan läsnäolotietojen tarjoamiseksi muille käyttäjille. Viime vuosina erilaisista ryhmistä ja yrityksistä koostuvat standardointiorganisaatiot ovat kuitenkin kehittäneet standardoituja tekniikoita, jotka pyrkivät takaamaan sen, että eri sovellukset ovat mahdollisimman yhteensopivia. Näiden tekniikoiden käyttö nopeuttaa myös palveluiden kehittämistä. Palveluiden kehittämisen nopeuttamiseksi on laadittu myös valmis ohjelmointirajapinta. Läsnäolotietojen käyttö on viime vuosina monipuolistunut. Tietoja voidaankin käyttää useissa sovelluskohteissa. Tämä on johtanut siihen, että esimerkiksi matkapuhelinvalmistajat ovat yhdessä laatineet matkapuhelimille tarkoitetun tekniikan, joka on jo toteutettu Nokian uusimmissa matkapuhelinmalleissa. Muita läsnäolotietojen sovelluskohteita on olemassa suuri määrä; diplomityön lopuksi suunnitellaankin palvelu, jossa läsnäolotiedot haetaan käyttäjän täyttämästä kalenterista ja jaetaan matkapuhelimille.

FsCaosMeter: un prototipo applicativo per lo studio della saturazione dei treni

Android, Google App Engine e Machine Learning per lo studio dell'affollamento delle tratte ferroviarie.