Detecting Symbian OS malware through static function call analysis

Smartphones become very critical part of our lives as they offer advanced capabilities with PC-like functionalities. They are getting widely deployed while not only being used for classical voice-centric communication. New smartphone malwares keep emerging where most of them still target Symbian OS. In the case of Symbian OS, application signing seemed to be an appropriate measure for slowing down malware appearance. Unfortunately, latest examples showed that signing can be bypassed resulting in new malware outbreak. In this paper, we present a novel approach to static malware detection in resource-limited mobile environments. This approach can be used to extend currently used third-party application signing mechanisms for increasing malware detection capabilities. In our work, we extract function calls from binaries in order to apply our clustering mechanism, called centroid. This method is capable of detecting unknown malwares. Our results are promising where the employed mechanism might find application at distribution channels, like online application stores. Additionally, it seems suitable for directly being used on smartphones for (pre-)checking installed applications.

Assessment of neuroretinal function in a group of functional amblyopes with documented LGN deficits

Purpose In this study we examine neuroretinal function in five amblyopes, who had been shown in previous functional MRI (fMRI) studies to have compromised function of the lateral geniculate nucleus (LGN), to determine if the fMRI deficit in amblyopia may have its origin at the retinal level. Methods We used slow flash multifocal ERG (mfERG) and compared averaged five ring responses of the amblyopic and fellow eyes across a 35 deg field. Central responses were also assessed over a field which was about 6.3 deg in diameter. We measured central retinal thickness using optical coherence tomography. Central fields were measured using the MP1-Microperimeter which also assesses ocular fixation during perimetry. MfERG data were compared with fMRI results from a previous study. Results Amblyopic eyes had reduced response density amplitudes (first major negative to first positive (N1-P1) responses) for the central and paracentral retina (up to 18 deg diameter) but not for the mid-periphery (from 18 to 35 deg). Retinal thickness was within normal limits for all eyes, and not different between amblyopic and fellow eyes. Fixation was maintained within the central 4° more than 80% of the time by four of the five participants; fixation assessed using bivariate contour ellipse areas (BCEA) gave rankings similar to those of the MP-1 system. There was no significant relationship between BCEA and mfERG response for either amblyopic or fellow eye. There was no significant relationship between the central mfERG eye response difference and the selective blood oxygen level dependent (BOLD) LGN eye response difference previously seen in these participants. Conclusions Retinal responses in amblyopes can be reduced within the central field without an obvious anatomical basis. Additionally, this retinal deficit may not be the reason why the LGN BOLD (blood oxygen level dependent) responses are reduced for amblyopic eye stimulation.

The relationship between CFH and ARMS2 genotypes and neuroretinal function in persons without age-related macular degeneration

Purpose: To determine whether neuroretinal function differs in healthy persons with and without common risk gene variants for age- related macular degeneration (AMD) and no ophthalmoscopic signs of AMD, and to compare those findings in persons with manifest early AMD. Methods and Participants: Neuroretinal function was assessed with the multifocal electroretinogram (mfERG) (VERIS, Redwood City, CA,) in 32 participants (22 healthy persons with no clinical signs of AMD and 10 early AMD patients). The 22 healthy participants with no AMD were risk genotypes for either the CFH (rs380390) and/or ARMS2 (rs10490920). We used a slow flash mfERG paradigm (3 inserted frames) and a 103 hexagon stimulus array. Recordings were made with DTL electrodes; fixation and eye movements were monitored online. Trough N1 to peak P1 (N1P1) response densities and P1-implicit times (IT) were analysed in 5 concentric rings. Results: N1P1 response densities (mean ± SD) for concentric rings 1-3 were on average significantly higher in at-risk genotypes (ring 1: 17.97 nV/deg2 ± 1.9, ring 2: 11.7 nV/deg2 ±1.3, ring 3: 8.7 nV/deg2 ± 0.7) compared to those without risk (ring 1: 13.7 nV/deg2 ± 1.9, ring 2: 9.2 nV/deg2 ±0.8, ring 3: 7.3 nV/deg2 ± 1.1) and compared to persons with early AMD (ring 1: 15.3 nV/deg2 ± 4.8, ring 2: 9.1 nV/deg2 ±2.3, ring 3 nV/deg2: 7.3± 1.3) (p<0.5). The group implicit times, P1-ITs for ring 1 were on average delayed in the early AMD patients (36.4 ms ± 1.0) compared to healthy participants with (35.1 ms ± 1.1) or without risk genotypes (34.8 ms ±1.3), although these differences were not significant. Conclusion: Neuroretinal function in persons with normal fundi can be differentiated into subgroups based on their genetics. Increased neuroretinal activity in persons who carry AMD risk genotypes may be due to genetically determined subclinical inflammatory and/or histological changes in the retina. Assessment of neuroretinal function in healthy persons genetically susceptible to AMD may be a useful early biomarker before there is clinical manifestation of AMD.

Timed Up and Go Tests in cardiac rehabilitation : reliability and comparison with the 6-minute walk test

PURPOSE: To test the reliability of Timed Up and Go Tests (TUGTs) in cardiac rehabilitation (CR) and compare TUGTs to the 6-Minute Walk Test (6MWT) for outcome measurement. METHODS: Sixty-one of 154 consecutive community-based CR patients were prospectively recruited. Subjects undertook repeated TUGTs and 6MWTs at the start of CR (start-CR), postdischarge from CR (post-CR), and 6 months postdischarge from CR (6 months post-CR). The main outcome measurements were TUGT time (TUGTT) and 6MWT distance (6MWD). RESULTS: Mean (SD) TUGTT1 and TUGTT2 at the 3 assessments were 6.29 (1.30) and 5.94 (1.20); 5.81 (1.22) and 5.53 (1.09); and 5.39 (1.60) and 5.01 (1.28) seconds, respectively. A reduction in TUGTT occurred between each outcome point (P ≤ .002). Repeated TUGTTs were strongly correlated at each assessment, intraclass correlation (95% CI) = 0.85 (0.76–0.91), 0.84 (0.73–0.91), and 0.90 (0.83–0.94), despite a reduction between TUGTT1 and TUGTT2 of 5%, 5%, and 7%, respectively (P ≤ .006). Relative decreases in TUGTT1 (TUGTT2) occurred from start-CR to post-CR and from start-CR to 6 months post-CR of −7.5% (−6.9%) and −14.2% (−15.5%), respectively, while relative increases in 6MWD1 (6MWD2) occurred, 5.1% (7.2%) and 8.4% (10.2%), respectively (P < .001 in all cases). Pearson correlation coefficients for 6MWD1 to TUGTT1 and TUGTT2 across all times were −0.60 and −0.68 (P < .001) and the intraclass correlations (95% CI) for the speeds derived from averaged 6MWDs and TUGTTs were 0.65 (0.54, 0.73) (P < .001). CONCLUSIONS: Similar relative changes occurred for the TUGT and the 6MWT in CR. A significant correlation between the TUGTT and 6MWD was demonstrated, and we suggest that the TUGT may provide a related or a supplementary measurement of functional capacity in CR.

Assessment of real-time networks and timing for process bus applications

Widespread adoption by electricity utilities of Non-Conventional Instrument Transformers, such as optical or capacitive transducers, has been limited due to the lack of a standardised interface and multi-vendor interoperability. Low power analogue interfaces are being replaced by IEC 61850 9 2 and IEC 61869 9 digital interfaces that use Ethernet networks for communication. These ‘process bus’ connections achieve significant cost savings by simplifying connections between switchyard and control rooms; however the in-service performance when these standards are employed is largely unknown. The performance of real-time Ethernet networks and time synchronisation was assessed using a scale model of a substation automation system. The test bed was constructed from commercially available timing and protection equipment supplied by a range of vendors. Test protocols have been developed to thoroughly evaluate the performance of Ethernet networks and network based time synchronisation. The suitability of IEEE Std 1588 Precision Time Protocol (PTP) as a synchronising system for sampled values was tested in the steady state and under transient conditions. Similarly, the performance of hardened Ethernet switches designed for substation use was assessed under a range of network operating conditions. This paper presents test methods that use a precision Ethernet capture card to accurately measure PTP and network performance. These methods can be used for product selection and to assess ongoing system performance as substations age. Key findings on the behaviour of multi-function process bus networks are presented. System level tests were performed using a Real Time Digital Simulator and transformer protection relay with sampled value and Generic Object Oriented Substation Events (GOOSE) capability. These include the interactions between sampled values, PTP and GOOSE messages. Our research has demonstrated that several protocols can be used on a shared process bus, even with very high network loads. This should provide confidence that this technology is suitable for transmission substations.

The need for ‘representative task design’ in evaluating efficacy of skills tests in sport : a comment on Russell, Benton and Kingsley (2010)

Russell, Benton and Kingsley (2010) recently suggested a new association football test comprising three different tasks for the evaluation of players' passing, dribbling and shooting skills. Their stated intention was to enhance ‘ecological validity’ of current association football skills tests allowing generalisation of results from the new protocols to performance constraints that were ‘representative’ of experiences during competitive game situations. However, in this comment we raise some concerns with their use of the term ‘ecological validity’ to allude to aspects of ‘representative task design’. We propose that in their paper the authors confused understanding of environmental properties, performance achievement and generalisability of the test and its outcomes. Here, we argue that the tests designed by Russell and colleagues did not include critical sources of environmental information, such as the active role of opponents, which players typically use to organise their actions during performance. Static tasks which are not representative of the competitive performance environment may lead to different emerging patterns of movement organisation and performance outcomes, failing to effectively evaluate skills performance in sport.

Regression and hypothesis tests for multivariate GNSS state time series

A satellite based observation system can continuously or repeatedly generate a user state vector time series that may contain useful information. One typical example is the collection of International GNSS Services (IGS) station daily and weekly combined solutions. Another example is the epoch-by-epoch kinematic position time series of a receiver derived by a GPS real time kinematic (RTK) technique. Although some multivariate analysis techniques have been adopted to assess the noise characteristics of multivariate state time series, statistic testings are limited to univariate time series. After review of frequently used hypotheses test statistics in univariate analysis of GNSS state time series, the paper presents a number of T-squared multivariate analysis statistics for use in the analysis of multivariate GNSS state time series. These T-squared test statistics have taken the correlation between coordinate components into account, which is neglected in univariate analysis. Numerical analysis was conducted with the multi-year time series of an IGS station to schematically demonstrate the results from the multivariate hypothesis testing in comparison with the univariate hypothesis testing results. The results have demonstrated that, in general, the testing for multivariate mean shifts and outliers tends to reject less data samples than the testing for univariate mean shifts and outliers under the same confidence level. It is noted that neither univariate nor multivariate data analysis methods are intended to replace physical analysis. Instead, these should be treated as complementary statistical methods for a prior or posteriori investigations. Physical analysis is necessary subsequently to refine and interpret the results.

In situ SANS study of the surface and pore filling adsorption of subcritical and supercritical CO2 in porous silica as a function of pore size

We applied small-angle neutron scattering (SANS) and ultra small-angle neutron scattering (USANS) to monitor evolution of the CO2 adsorption in porous silica as a function of CO2 pressure and temperature in pores of different sizes. The range of pressures (0 < P < 345 bar) and temperatures (T=18 OC, 35 OC and 60 OC) corresponded to subcritical, near critical and supercritical conditions of bulk fluid. We observed that the adsorption behavior of CO2 is fundamentally different in large and small pores with the sizes D > 100 Å and D < 30 Å, respectively. Scattering data from large pores indicate formation of a dense adsorbed film of CO2 on pore walls with the liquid-like density (ρCO2)ads≈0.8 g/cm3. The adsorbed film coexists with unadsorbed fluid in the inner pore volume. The density of unadsorbed fluid in large pores is temperature and pressure dependent: it is initially lower than (ρCO2)ads and gradually approaches it with pressure. In small pores compressed CO2 gas completely fills the pore volume. At the lowest pressures of the order of 10 bar and T=18 OC, the fluid density in smallest pores available in the matrix with D ~ 10 Å exceeds bulk fluid density by a factor of ~ 8. As pressure increases, progressively larger pores become filled with the condensed CO2. Fluid densification is only observed in pores with sizes less than ~ 25 – 30 Å. As the density of the invading fluid reaches (ρCO2)bulk~ 0.8 g/cm3, pores of all sizes become uniformly filled with CO2 and the confinement effects disappear. At higher densities the fluid in small pores appears to follow the equation of state of bulk CO2 although there is an indication that the fluid density in the inner volume of large pores may exceed the density of the adsorbed layer. The equivalent internal pressure (Pint) in the smallest pores exceeds the external pressure (Pext) by a factor of ~ 5 for both sub- and supercritical CO2. Pint gradually approaches Pext as D → 25 – 30 Å and is independent of temperature in the studied range of 18 OC ≤ T ≤ 60 OC. The obtained results demonstrate certain similarity as well as differences between adsorption of subcritical and supercritical CO2 in disordered porous silica. High pressure small angle scattering experiments open new opportunities for in situ studies of the fluid adsorption in porous media of interest to CO2 sequestration, energy storage, and heterogeneous catalysis.

Effects of wireless sensor network uncertainties on output-only modal analysis employing merged data of multiple tests

The use of Wireless Sensor Networks (WSNs) for Structural Health Monitoring (SHM) has become a promising approach due to many advantages such as low cost, fast and flexible deployment. However, inherent technical issues such as data synchronization error and data loss have prevented these distinct systems from being extensively used. Recently, several SHM-oriented WSNs have been proposed and believed to be able to overcome a large number of technical uncertainties. Nevertheless, there is limited research verifying the applicability of those WSNs with respect to demanding SHM applications like modal analysis and damage identification. This paper first presents a brief review of the most inherent uncertainties of the SHM-oriented WSN platforms and then investigates their effects on outcomes and performance of the most robust Output-only Modal Analysis (OMA) techniques when employing merged data from multiple tests. The two OMA families selected for this investigation are Frequency Domain Decomposition (FDD) and Data-driven Stochastic Subspace Identification (SSI-data) due to the fact that they both have been widely applied in the past decade. Experimental accelerations collected by a wired sensory system on a large-scale laboratory bridge model are initially used as clean data before being contaminated by different data pollutants in sequential manner to simulate practical SHM-oriented WSN uncertainties. The results of this study show the robustness of FDD and the precautions needed for SSI-data family when dealing with SHM-WSN uncertainties. Finally, the use of the measurement channel projection for the time-domain OMA techniques and the preferred combination of the OMA techniques to cope with the SHM-WSN uncertainties is recommended.

The impact of legislation on divorce : a hazard function approach

The paper examines the impact of the introduction of no-fault divorce legislation in Australia. The approach used is rather novel, a hazard model of the divorce rate is estimated with the role of legislation captured via a time-varying covariate. The paper concludes that contrary to US empirical evidence, no-fault divorce legislation appears to have had a positive impact upon the divorce rate in Australia.

High-stakes literacy tests and local effects in a rural school

High-stakes literacy testing is now a ubiquitous educational phenomenon. However, it remains a relatively recent phenomenon in Australia. Hence it is possible to study the ways in which such tests are reorganising educators’ work during this period of change. This paper draws upon Dorothy Smith’s Institutional Ethnography and critical policy analysis to consider this problem and reports on interview data from teachers and the principal in small rural school in a poor area of South Australia. In this context high-stakes testing and the associated diagnostic school review unleashes a chain of actions within the school which ultimately results in educators doubting their professional judgments, increasing the investment in testing, narrowing their teaching of literacy and purchasing levelled reading schemes. The effects of high-stakes testing in disadvantaged schools are identified and discussed.

Towards a Dynamic IS Function

With the growing importance of IS for organizations and the continuous stream of new IT developments, the IS function in organizations becomes more critical but is also more challenged. For example, how should the IS function deal with the consumerization of IT or what is the added value of the IS function when it comes to SaaS and the Cloud? In this paper we argue that IS research is in need of a dynamic perspective on the IS function. The IS function has to become more focused on building and adapting IS capabilities in a changing environment. We discuss that there has been an overreliance on the Resource Based View so far for understanding the IS function and capabilities and introduce Dynamic Capabilities Theory as an additional theoretical perspective, which has only been limitedly addressed in IS literature yet. We present a first conceptualization of the dynamic IS function and discuss IS capabilities frameworks and individual IS capabilities from a dynamic perspective. These initial insights demonstrate the contribution of a dynamic perspective on the IS function itself.

Prostate gland and extra-capsular tissue 3D reconstruction and measurement

Currently there are little objective parameters that can quantify the success of one form of prostate surgical removal over another. Accordingly, at Old Dominion University (ODU) we have been developing a process resulting in the use of software algorithms to assess the coverage and depth of extra-capsular soft tissue removed with the prostate by the various surgical approaches. Parameters such as the percent of capsule that is bare of soft tissue and where present the depth and extent of coverage have been assessed. First, visualization methods and tools are developed for images of prostate slices that are provided to ODU by the Pathology Department at Eastern Virginia Medical School (EVMS). The visualization tools interpolate and present 3D models of the prostates. Measurement algorithms are then applied to determine statistics about extra-capsular tissue coverage. This paper addresses the modeling, visualization, and analysis of prostate gland tissue to aid in quantifying prostate surgery success. Particular attention is directed towards the accuracy of these measurements and is addressed in the analysis discussions.

Self-regulated learning and executive function : exploring the relationships in a sample of adolescent males

This study investigated relationships between SRL and EF in a sample of 254 school-aged adolescent males. Two hypotheses were tested: that self-reported measures of SRL and EF are closely related and that as different aspects of EF mature during adolescence, the corresponding components of SRL should also improve, leading to an age-related increase in the correlation between EF and SRL. Two self-report instruments were used: the strategies for self-regulated learning survey (SSRLS) and the behavioural rating instrument of executive function (BRIEF). Strong correlations between the measures of EF and SRL were found, especially in areas associated with metacognitive processes. Correlations between EF and SRL were found, with weaker correlations between behavioural regulation and SRL were found to be weaker for the younger participants in the sample while the relationship between EF and SRL appears to grow stronger during the initial years of high school even though self-reported levels of EF along with motivation for SRL and important components of SRL such as goal setting and planning were found to decrease with age. Decreasing levels of motivation for learning during adolescence are speculated to moderate the deployment of SRL and EF in a school context.

Steps toward the validation of the Trendelenburg Test : the effect of experimentally reduced hip abductor muscle function on frontal plane mechanics

Objective: To investigate the validity of the Trendelenburg test (TT) using an ultrasound-guided nerve block (UNB) of the superior gluteal nerve and determine whether the reduction in hip abductor muscle (HABD) strength would result in the theorized mechanical compensatory strategies measured during the TT. Design: Quasi-experimental. Setting: Hospital. Participants: Convenience sample of 9 healthy men. Only participants with no current or previous injury to the lumbar spine, pelvis, or lower extremities, and no previous surgeries were included. Interventions: Ultrasound-guided nerve block. Main Outcome Measures: Hip abductor muscle strength (percent body weight [%BW]), contralateral pelvic drop (cPD), change in contralateral pelvic drop (Delta cPD), ipsilateral hip adduction, and ipsilateral trunk sway (TRUNK) measured in degrees. Results: The median age and weight of the participants were 31 years (interquartile range [IQR], 22-32 years) and 73 kg (IQR, 67-81 kg), respectively. An average 52% reduction of HABD strength (z = 2.36, P = 0.02) resulted after the UNB. No differences were found in cPD or Delta cPD (z = 0.01, P = 0.99, z = 20.67, P = 0.49, respectively). Individual changes in biomechanics showed no consistency between participants and nonsystematic changes across the group. One participant demonstrated the mechanical compensations described by Trendelenburg. Conclusions: The TT should not be used as a screening measure for HABD strength in populations demonstrating strength greater than 30% BW but should be reserved for use with populations with marked HABD weakness. Clinical Relevance: This study presents data regarding a critical level of HABD strength required to support the pelvis during the TT.