Static smartphone malware detection

Static anaylsis represents an approach of checking source code or compiled code of applications before it gets executed. Chess and McGraw state that static anaylsis promises to identify common coding problems automatically. While manual code checking is also a form of static analysis, software tools are used in most cases in order to perform the checks. Chess and McGraw additionaly claim that good static checkers can help to spot and eradicate common security bugs.

Teams rather than individuals : collaborative intrusion detection

We propose CIMD (Collaborative Intrusion and Malware Detection), a scheme for the realization of collaborative intrusion detection approaches. We argue that teams, respectively detection groups with a common purpose for intrusion detection and response, improve the measures against malware. CIMD provides a collaboration model, a decentralized group formation and an anonymous communication scheme. Participating agents can convey intrusion detection related objectives and associated interests for collaboration partners. These interests are based on intrusion objectives and associated interests for collaboration partners. These interests are based on intrusion detection related ontology, incorporating network and hardware configurations and detection capabilities. Anonymous Communication provided by CIMD allows communication beyond suspicion, i.e. the adversary can not perform better than guessing an IDS to be the source of a message at random. The evaluation takes place with the help of NeSSi² (www.nessi2.de), the Network Security Simulator, a dedicated environment for analysis of attacks and countermeasures in mid-scale and large-scale networks. A CIMD prototype is being built based on the JIAC agent framework(www.jiac.de).

A formal method for attack modelling and detection

This paper presents a formal methodology for attack modeling and detection for networks. Our approach has three phases. First, we extend the basic attack tree approach 1 to capture (i) the temporal dependencies between components, and (ii) the expiration of an attack. Second, using the enhanced attack trees (EAT) we build a tree automaton that accepts a sequence of actions from input stream if there is a traverse of an attack tree from leaves to the root node. Finally, we show how to construct an enhanced parallel automaton (EPA) that has each tree automaton as a subroutine and can process the input stream by considering multiple trees simultaneously. As a case study, we show how to represent the attacks in IEEE 802.11 and construct an EPA for it.

Solving inherent problems of anomaly detection by cooperation

Anomaly detection compensates shortcomings of signature-based detection such as protecting against Zero-Day exploits. However, Anomaly Detection can be resource-intensive and is plagued by a high false-positive rate. In this work, we address these problems by presenting a Cooperative Intrusion Detection approach for the AIS, the Artificial Immune System, as an example for an anomaly detection approach. In particular we show, how the cooperative approach reduces the false-positive rate of the detection and how the overall detection process can be organized to account for the resource constraints of the participating devices. Evaluations are carried out with the novel network simulation environment NeSSi as well as formally with an extension to the epidemic spread model SIR

Power of QTL detection using association tests with family controls

The power of testing for a population-wide association between a biallelic quantitative trait locus and a linked biallelic marker locus is predicted both empirically and deterministically for several tests. The tests were based on the analysis of variance (ANOVA) and on a number of transmission disequilibrium tests (TDT). Deterministic power predictions made use of family information, and were functions of population parameters including linkage disequilibrium, allele frequencies, and recombination rate. Deterministic power predictions were very close to the empirical power from simulations in all scenarios considered in this study. The different TDTs had very similar power, intermediate between one-way and nested ANOVAs. One-way ANOVA was the only test that was not robust against spurious disequilibrium. Our general framework for predicting power deterministically can be used to predict power in other association tests. Deterministic power calculations are a powerful tool for researchers to plan and evaluate experiments and obviate the need for elaborate simulation studies.

Evaluation of strain energy based damage indices for flexural crack detection of RC beams

Vibration Based Damage Identification Techniques which use modal data or their functions, have received significant research interest in recent years due to their ability to detect damage in structures and hence contribute towards the safety of the structures. In this context, Strain Energy Based Damage Indices (SEDIs), based on modal strain energy, have been successful in localising damage in structuers made of homogeneous materials such as steel. However, their application to reinforced concrete (RC) structures needs further investigation due to the significant difference in the prominent damage type, the flexural crack. The work reported in this paper is an integral part of a comprehensive research program to develop and apply effective strain energy based damage indices to assess damage in reinforced concrete flexural members. This research program established (i) a suitable flexural crack simulation technique, (ii) four improved SEDI's and (iii) programmable sequentional steps to minimise effects of noise. This paper evaluates and ranks the four newly developed SEDIs and existing seven SEDIs for their ability to detect and localise flexural cracks in RC beams. Based on the results of the evaluations, it recommends the SEDIs for use with single and multiple vibration modes.

Breast cancer detection from thermal images using bispectral invariant features

Highly sensitive infrared (IR) cameras provide high-resolution diagnostic images of the temperature and vascular changes of breasts. These images can be processed to emphasize hot spots that exhibit early and subtle changes owing to pathology. The resulting images show clusters that appear random in shape and spatial distribution but carry class dependent information in shape and texture. Automated pattern recognition techniques are challenged because of changes in location, size and orientation of these clusters. Higher order spectral invariant features provide robustness to such transformations and are suited for texture and shape dependent information extraction from noisy images. In this work, the effectiveness of bispectral invariant features in diagnostic classification of breast thermal images into malignant, benign and normal classes is evaluated and a phase-only variant of these features is proposed. High resolution IR images of breasts, captured with measuring accuracy of ±0.4% (full scale) and temperature resolution of 0.1 °C black body, depicting malignant, benign and normal pathologies are used in this study. Breast images are registered using their lower boundaries, automatically extracted using landmark points whose locations are learned during training. Boundaries are extracted using Canny edge detection and elimination of inner edges. Breast images are then segmented using fuzzy c-means clustering and the hottest regions are selected for feature extraction. Bispectral invariant features are extracted from Radon projections of these images. An Adaboost classifier is used to select and fuse the best features during training and then classify unseen test images into malignant, benign and normal classes. A data set comprising 9 malignant, 12 benign and 11 normal cases is used for evaluation of performance. Malignant cases are detected with 95% accuracy. A variant of the features using the normalized bispectrum, which discards all magnitude information, is shown to perform better for classification between benign and normal cases, with 83% accuracy compared to 66% for the original.

Speaker diarization : "who spoke when"

Speaker diarization is the process of annotating an input audio with information that attributes temporal regions of the audio signal to their respective sources, which may include both speech and non-speech events. For speech regions, the diarization system also specifies the locations of speaker boundaries and assign relative speaker labels to each homogeneous segment of speech. In short, speaker diarization systems effectively answer the question of ‘who spoke when’. There are several important applications for speaker diarization technology, such as facilitating speaker indexing systems to allow users to directly access the relevant segments of interest within a given audio, and assisting with other downstream processes such as summarizing and parsing. When combined with automatic speech recognition (ASR) systems, the metadata extracted from a speaker diarization system can provide complementary information for ASR transcripts including the location of speaker turns and relative speaker segment labels, making the transcripts more readable. Speaker diarization output can also be used to localize the instances of specific speakers to pool data for model adaptation, which in turn boosts transcription accuracies. Speaker diarization therefore plays an important role as a preliminary step in automatic transcription of audio data. The aim of this work is to improve the usefulness and practicality of speaker diarization technology, through the reduction of diarization error rates. In particular, this research is focused on the segmentation and clustering stages within a diarization system. Although particular emphasis is placed on the broadcast news audio domain and systems developed throughout this work are also trained and tested on broadcast news data, the techniques proposed in this dissertation are also applicable to other domains including telephone conversations and meetings audio. Three main research themes were pursued: heuristic rules for speaker segmentation, modelling uncertainty in speaker model estimates, and modelling uncertainty in eigenvoice speaker modelling. The use of heuristic approaches for the speaker segmentation task was first investigated, with emphasis placed on minimizing missed boundary detections. A set of heuristic rules was proposed, to govern the detection and heuristic selection of candidate speaker segment boundaries. A second pass, using the same heuristic algorithm with a smaller window, was also proposed with the aim of improving detection of boundaries around short speaker segments. Compared to single threshold based methods, the proposed heuristic approach was shown to provide improved segmentation performance, leading to a reduction in the overall diarization error rate. Methods to model the uncertainty in speaker model estimates were developed, to address the difficulties associated with making segmentation and clustering decisions with limited data in the speaker segments. The Bayes factor, derived specifically for multivariate Gaussian speaker modelling, was introduced to account for the uncertainty of the speaker model estimates. The use of the Bayes factor also enabled the incorporation of prior information regarding the audio to aid segmentation and clustering decisions. The idea of modelling uncertainty in speaker model estimates was also extended to the eigenvoice speaker modelling framework for the speaker clustering task. Building on the application of Bayesian approaches to the speaker diarization problem, the proposed approach takes into account the uncertainty associated with the explicit estimation of the speaker factors. The proposed decision criteria, based on Bayesian theory, was shown to generally outperform their non- Bayesian counterparts.

A comprehensive investigation of the risky driving behaviour of young novice drivers

Young novice drivers - that is, drivers aged 16-25 years who are relatively inexperienced in driving on the road and have a novice (Learner, Provisional) driver's licence - have been overrepresented in car crash, injury and fatality statistics around the world for decades. There are numerous persistent characteristics evident in young novice driver crashes, fatalities and offences, including variables relating to the young driver themselves, broader social influences which include their passengers, the car they drive, and when and how they drive, and their risky driving behaviour in particular. Moreover, there are a range of psychosocial factors influencing the behaviour of young novice drivers, including the social influences of parents and peers, and person-related factors such as age-related factors, attitudes, and sensation seeking. Historically, a range of approaches have been developed to manage the risky driving behaviour of young novice drivers. Traditional measures predominantly relying upon education have had limited success in regulating the risky driving behaviour of the young novice driver. In contrast, interventions such as graduated driver licensing (GDL) which acknowledges young novice drivers' limitations - principally pertaining to their chronological and developmental age, and their driving inexperience - have shown to be effective in ameliorating this pervasive public health problem. In practice, GDL is a risk management tool that is designed to reduce driving at risky times (e.g., at night) or in risky driving conditions (e.g., with passengers), while still enabling novice drivers to obtain experience. In this regard, the GDL program in Queensland, Australia, was considerably enhanced in July 2007, and major additions to the program include mandated Learner practice of 100 hours recorded in a logbook, and passenger limits during night driving in the Provisional phase. Road safety researchers have also continued to consider the influential role played by the young driver's psychosocial characteristics, including psychological traits and states. In addition, whilst the majority of road safety user research is epidemiological in nature, contemporary road safety research is increasingly applying psychological and criminological theories. Importantly, such theories not only can guide young novice driver research, they can also inform the development and evaluation of countermeasures targeting their risky driving behaviour. The research is thus designed to explore the self-reported behaviours - and the personal, psychosocial, and structural influences upon the behaviours - of young novice drivers This thesis incorporates three stages of predominantly quantitative research to undertake a comprehensive investigation of the risky driving behaviour of young novices. Risky driving behaviour increases the likelihood of the young novice driver being involved in a crash which may harm themselves or other road users, and deliberate risky driving such as driving in excess of the posted speed limits is the focus of the program of research. The extant literature examining the nature of the risky behaviour of the young novice driver - and the contributing factors for this behaviour - while comprehensive, has not led to the development of a reliable instrument designed specifically to measure the risky behaviour of the young novice driver. Therefore the development and application of such a tool (the Behaviour of Young Novice Drivers Scale, or BYNDS) was foremost in the program of research. In addition to describing the driving behaviours of the young novice, a central theme of this program of research was identifying, describing, and quantifying personal, behavioural, and environmental influences upon young novice driver risky behaviour. Accordingly the 11 papers developed from the three stages of research which comprise this thesis are framed within Bandura's reciprocal determinism model which explicitly considers the reciprocal relationship between the environment, the person, and their behaviour. Stage One comprised the foundation research and operationalised quantitative and qualitative methodologies to finalise the instrument used in Stages Two and Three. The first part of Stage One involved an online survey which was completed by 761 young novice drivers who attended tertiary education institutions across Queensland. A reliable instrument for measuring the risky driving behaviour of young novices was developed (the BYNDS) and is currently being operationalised in young novice driver research in progress at the Centre for Injury Research and Prevention in Philadelphia, USA. In addition, regression analyses revealed that psychological distress influenced risky driving behaviour, and the differential influence of depression, anxiety, sensitivity to punishments and rewards, and sensation seeking propensity were explored. Path model analyses revealed that punishment sensitivity was mediated by anxiety and depression; and the influence of depression, anxiety, reward sensitivity and sensation seeking propensity were moderated by the gender of the driver. Specifically, for males, sensation seeking propensity, depression, and reward sensitivity were predictive of self-reported risky driving, whilst for females anxiety was also influential. In the second part of Stage One, 21 young novice drivers participated in individual and small group interviews. The normative influences of parents, peers, and the Police were explicated. Content analysis supported four themes of influence through punishments, rewards, and the behaviours and attitudes of parents and friends. The Police were also influential upon the risky driving behaviour of young novices. The findings of both parts of Stage One informed the research of Stage Two. Stage Two was a comprehensive investigation of the pre-Licence and Learner experiences, attitudes, and behaviours, of young novice drivers. In this stage, 1170 young novice drivers from across Queensland completed an online or paper survey exploring their experiences, behaviours and attitudes as a pre- and Learner driver. The majority of novices did not drive before they were licensed (pre-Licence driving) or as an unsupervised Learner, submitted accurate logbooks, intended to follow the road rules as a Provisional driver, and reported practicing predominantly at the end of the Learner period. The experience of Learners in the enhanced-GDL program were also examined and compared to those of Learner drivers who progressed through the former-GDL program (data collected previously by Bates, Watson, & King, 2009a). Importantly, current-GDL Learners reported significantly more driving practice and a longer Learner period, less difficulty obtaining practice, and less offence detection and crash involvement than Learners in the former-GDL program. The findings of Stage Two informed the research of Stage Three. Stage Three was a comprehensive exploration of the driving experiences, attitudes and behaviours of young novice drivers during their first six months of Provisional 1 licensure. In this stage, 390 of the 1170 young novice drivers from Stage Two completed another survey, and data collected during Stages Two and Three allowed a longitudinal investigation of self-reported risky driving behaviours, such as GDL-specific and general road rule compliance; risky behaviour such as pre-Licence driving, crash involvement and offence detection; and vehicle ownership, paying attention to Police presence, and punishment avoidance. Whilst the majority of Learner and Provisional drivers reported compliance with GDL-specific and general road rules, 33% of Learners and 50% of Provisional drivers reported speeding by 10-20 km/hr at least occasionally. Twelve percent of Learner drivers reported pre-Licence driving, and these drivers were significantly more risky as Learner and Provisional drivers. Ten percent of males and females reported being involved in a crash, and 10% of females and 18% of males had been detected for an offence, within the first six months of independent driving. Additionally, 75% of young novice drivers reported owning their own car within six months of gaining their Provisional driver's licence. Vehicle owners reported significantly shorter Learner periods and more risky driving exposure as a Provisional driver. Paying attention to Police presence on the roads appeared normative for young novice drivers: 91% of Learners and 72% of Provisional drivers reported paying attention. Provisional drivers also reported they actively avoided the Police: 25% of males and 13% of females; 23% of rural drivers and 15% of urban drivers. Stage Three also allowed the refinement of the risky behaviour measurement tool (BYNDS) created in Stage One; the original reliable 44-item instrument was refined to a similarly reliable 36-item instrument. A longitudinal exploration of the influence of anxiety, depression, sensation seeking propensity and reward sensitivity upon the risky behaviour of the Provisional driver was also undertaken using data collected in Stages Two and Three. Consistent with the research of Stage One, structural equation modeling revealed anxiety, reward sensitivity and sensation seeking propensity predicted self-reported risky driving behaviour. Again, gender was a moderator, with only reward sensitivity predicting risky driving for males. A measurement model of Akers' social learning theory (SLT) was developed containing six subscales operationalising the four constructs of differential association, imitation, personal attitudes, and differential reinforcement, and the influence of parents and peers was captured within the items in a number of these constructs. Analyses exploring the nature and extent of the psychosocial influences of personal characteristics (step 1), Akers' SLT (step 2), and elements of the prototype/willingness model (PWM) (step 3) upon self-reported speeding by the Provisional driver in a hierarchical multiple regression model found the following significant predictors: gender (male), car ownership (own car), reward sensitivity (greater sensitivity), depression (greater depression), personal attitudes (more risky attitudes), and speeding (more speeding) as a Learner. The research findings have considerable implications for road safety researchers, policy-makers, mental health professionals and medical practitioners alike. A broad range of issues need to be considered when developing, implementing and evaluating interventions for both the intentional and unintentional risky driving behaviours of interest. While a variety of interventions have been historically utilised, including education, enforcement, rehabilitation and incentives, caution is warranted. A multi-faceted approach to improving novice road safety is more likely to be effective, and new and existing countermeasures should capitalise on the potential of parents, peers and Police to be a positive influence upon the risky behaviour of young novice drivers. However, the efficacy of some interventions remains undetermined at this time. Notwithstanding this caveat, countermeasures such as augmenting and strengthening Queensland's GDL program and targeting parents and adolescents particularly warrant further attention. The findings of the research program suggest that Queensland's current-GDL can be strengthened by increasing compliance of young novice drivers with existing conditions and restrictions. The rates of speeding reported by the young Learner driver are particularly alarming for a number of reasons. The Learner is inexperienced in driving, and travelling in excess of speed limits places them at greater risk as they are also inexperienced in detecting and responding appropriately to driving hazards. In addition, the Learner period should provide the foundation for a safe lifetime driving career, enabling the development and reinforcement of non-risky driving habits. Learners who sped reported speeding by greater margins, and at greater frequencies, when they were able to drive independently. Other strategies could also be considered to enhance Queensland's GDL program, addressing both the pre-Licence adolescent and their parents. Options that warrant further investigation to determine their likely effectiveness include screening and treatment of novice drivers by mental health professionals and/or medical practitioners; and general social skills training. Considering the self-reported pre-licence driving of the young novice driver, targeted education of parents may need to occur before their child obtains a Learner licence. It is noteworthy that those participants who reported risky driving during the Learner phase also were more likely to report risky driving behaviour during the Provisional phase; therefore it appears vital that the development of safe driving habits is encouraged from the beginning of the novice period. General education of parents and young novice drivers should inform them of the considerably-increased likelihood of risky driving behaviour, crashes and offences associated with having unlimited access to a vehicle in the early stages of intermediate licensure. Importantly, parents frequently purchase the car that is used by the Provisional driver, who typically lives at home with their parents, and therefore parents are ideally positioned to monitor the journeys of their young novice driver during this early stage of independent driving. Parents are pivotal in the development of their driving child: they are models who are imitated and are sources of attitudes, expectancies, rewards and punishments; and they provide the most driving instruction for the Learner. High rates of self-reported speeding by Learners suggests that GDL programs specifically consider the nature of supervision during the Learner period, encouraging supervisors to be vigilant to compliance with general and GDL-specific road rules, and especially driving in excess of speed limit. Attitudes towards driving are formed before the adolescent reaches the age when they can be legally licensed. Young novice drivers with risky personal attitudes towards driving reported more risky driving behaviour, suggesting that countermeasures should target such attitudes and that such interventions might be implemented before the adolescent is licensed. The risky behaviours and attitudes of friends were also found to be influential, and given that young novice drivers tend to carry their friends as their passengers, a group intervention such as provided in a school class context may prove more effective. Social skills interventions that encourage the novice to resist the negative influences of their friends and their peer passengers, and to not imitate the risky driving behaviour of their friends, may also be effective. The punishments and rewards anticipated from and administered by friends were also found to influence the self-reported risky behaviour of the young novice driver; therefore young persons could be encouraged to sanction the risky, and to reward the non-risky, driving of their novice friends. Adolescent health programs and related initiatives need to more specifically consider the risks associated with driving. Young novice drivers are also adolescents, a developmental period associated with depression and anxiety. Depression, anxiety, and sensation seeking propensity were found to be predictive of risky driving; therefore interventions targeting psychological distress, whilst discouraging the expression of sensation seeking propensity whilst driving, warrant development and trialing. In addition, given that reward sensitivity was also predictive, a scheme which rewards novice drivers for safe driving behaviour - rather than rewarding the novice through emotional and instrumental rewards for risky driving behaviour - requires further investigation. The Police were also influential in the risky driving behaviour of young novices. Young novice drivers who had been detected for an offence, and then avoided punishment, reacted differentially, with some drivers appearing to become less risky after the encounter, whilst for others their risky behaviour appeared to be reinforced and therefore was more likely to be performed again. Such drivers saw t

Effects of eco-driving instructions using a vehicle with automatic transmission on urban roads

Eco-driving instructions could reduce fuel consumption to up to 20% (EcoMove, 2010). Participants (N=13) drove an instrumented vehicle (i.e. Toyota Camry 2007) with an automatic transmission. Fuel consumption of the participants were compared before and after they received eco-driving instructions. Participants drove the same vehicle on the same urban route under similar traffic conditions. Results show that, on free flow sections of the track, all participants drove slightly faster (on average, 0.7 Km/h faster), during the lap for which they were instructed to drive in an eco-friendly manner as compared to when they were not given the eco-driving instruction. Suprisingly, eco-driving instructions increased the RPM significantly in most cases. Fuel consumption slightly decreased (6%) after the eco-driving instructions. We have found strong evidence showing that the fuel saving observed in our experiment (urban environment, automatic transmission) fall short of the 20% reduction claimed in other international trials.

Generator coherency and area detection in large power systems

This paper provides a new general approach for defining coherent generators in power systems based on the coherency in low frequency inter-area modes. The disturbance is considered to be distributed in the network by applying random load changes which is the random walk representation of real loads instead of a single fault and coherent generators are obtained by spectrum analysis of the generators velocity variations. In order to find the coherent areas and their borders in the inter-connected networks, non-generating buses are assigned to each group of coherent generator using similar coherency detection techniques. The method is evaluated on two test systems and coherent generators and areas are obtained for different operating points to provide a more accurate grouping approach which is valid across a range of realistic operating points of the system.

Genome-scale phylogeny and the detection of systematic biases

Phylogenetic inference from sequences can be misled by both sampling (stochastic) error and systematic error (nonhistorical signals where reality differs from our simplified models). A recent study of eight yeast species using 106 concatenated genes from complete genomes showed that even small internal edges of a tree received 100% bootstrap support. This effective negation of stochastic error from large data sets is important, but longer sequences exacerbate the potential for biases (systematic error) to be positively misleading. Indeed, when we analyzed the same data set using minimum evolution optimality criteria, an alternative tree received 100% bootstrap support. We identified a compositional bias as responsible for this inconsistency and showed that it is reduced effectively by coding the nucleotides as purines and pyrimidines (RY-coding), reinforcing the original tree. Thus, a comprehensive exploration of potential systematic biases is still required, even though genome-scale data sets greatly reduce sampling error.

Detection of excessive diesel engine piston slap using acoustic emission signals

This paper presents a study whereby a series of tests was undertaken using a naturally aspirated 4 cylinder, 2.216 litre, Perkins Diesel engine fitted with a piston having an undersized skirt. This experimental simulation resulted in engine running conditions that included abnormally high levels of piston slap occurring in one of the cylinders. The detectability of the resultant Diesel engine piston slap was investigated using acoustic emission signals. Data corresponding to both normal and piston slap engine running conditions was captured using acoustic emission transducers along with both; in-cylinder pressure and top-dead centre reference signals. Using these signals it was possible to demonstrate that the increased piston slap running conditions were distinguishable by monitoring the piston slap events occurring near the piston mid-stroke positions. However, when monitoring the piston slap events occurring near the TDC/BDC piston stroke positions, the normal and excessive piston slap engine running condition were not clearly distinguishable.

Activities for Pearl Barley and Charlie Parsley by Aaron Blabey Puffin Books 2007 Target group: Upper Primary

An upper primary multiliteracies project based on the children’s book “Pearl Barley and Charlie Parsley” by Aaron Blabey. The main theme explored is same and different.