Classifying And Predicting Software Security Vulnerabilities based on Reproducibility

Security defects are common in large software systems because of their size and complexity. Although efficient development processes, testing, and maintenance policies are applied to software systems, there are still a large number of vulnerabilities that can remain, despite these measures. Some vulnerabilities stay in a system from one release to the next one because they cannot be easily reproduced through testing. These vulnerabilities endanger the security of the systems. We propose vulnerability classification and prediction frameworks based on vulnerability reproducibility. The frameworks are effective to identify the types and locations of vulnerabilities in the earlier stage, and improve the security of software in the next versions (referred to as releases). We expand an existing concept of software bug classification to vulnerability classification (easily reproducible and hard to reproduce) to develop a classification framework for differentiating between these vulnerabilities based on code fixes and textual reports. We then investigate the potential correlations between the vulnerability categories and the classical software metrics and some other runtime environmental factors of reproducibility to develop a vulnerability prediction framework. The classification and prediction frameworks help developers adopt corresponding mitigation or elimination actions and develop appropriate test cases. Also, the vulnerability prediction framework is of great help for security experts focus their effort on the top-ranked vulnerability-prone files. As a result, the frameworks decrease the number of attacks that exploit security vulnerabilities in the next versions of the software. To build the classification and prediction frameworks, different machine learning techniques (C4.5 Decision Tree, Random Forest, Logistic Regression, and Naive Bayes) are employed. The effectiveness of the proposed frameworks is assessed based on collected software security defects of Mozilla Firefox.

Study of the Electrochemical, Physical and Morphological Characteristics of Anode Catalysts for Perfluorosulfonic Acid (PFSA) Membrane Water Electrolysers

A number of supported and un-supported Oxygen Evolution Reaction (OER) iridium based electrocatalysts for Polymer Electrolyte Membrane Water Electrolysis (PEMWE) were synthesized using a polyol method. The electrocatalysts and the supports were characterized using a wide range of physical and electrochemical characterization methods. The effect of morphological characteristics of the OER electrocatalyst and the support on the OER activity was studied. The results of this thesis contribute to the existing research to reduce the cost of PEMWE by enhancing the utilization of precious metal for OER electrocatalysis. Iridium electrocatalysts supported on antimony tin oxide (Ir/ATO) were synthesized using the polyol method with two different heating techniques: conventional and microwave-irradiation. It was shown that the physical morphology and electrochemical properties of Ir/ATO synthesized with the two heating methods were comparable. However, the microwave irradiation method was extremely faster than the conventional heating method. Additionally, the effect of heat treatment (calcination temperature) on the morphology and OER activity of Ir/ATO synthesized electrocatalyst with the conventional polyol method. It was found that the iridium electrocatalyst synthesized with the polyol method, consisted of 1-5 nm particles, possessed an amorphous structure, and contained iridium with an average oxidation state of less than +4. Calcining the catalyst at temperatures more than 400 ºC and less than 700ºC: 1) increased the size of the iridium particles to 30 nm, 2) changed the structure of iridium particles from amorphous to crystalline, 3) increased the iridium oxidation state to +4 (IrO2), 4) reduced the electrochemically active surface area by approximately 50%, and 5) reduced the OER activity by approximately 25%; however, it had no significant effect on the physical and chemical morphology of the ATO support. Moreover, potential support metal carbides and oxides including: Tantalum Carbide (TaC), Niobium Oxide (Nb2O5), Niobium Carbide (NbC), Titanium Carbide (TiC), Tungsten Carbide (WC) and Antimony-doped Tin Oxide (ATO, Sb2O5-SnO2), were characterized, and used as support for the iridium OER electrocatalysts. TaC was found to be a promising support, and increasing its surface area by 4% improved the OER performance of the final supported catalyst by approximately 50%.

¬FISH DISTRIBUTIONS IN LAKE ONTARIO’S EASTERN BASIN AND THE UPPER ST. LAWRENCE RIVER: AN ANALYSIS USING GIS AND OCCUPANCY MODELLING TECHNIQUES

Predictive models of species distributions are important tools for fisheries management. Unfortunately, these predictive models can be difficult to perform on large waterbodies where fish are difficult to detect and exhaustive sampling is not possible. In recent years the development of Geographic Information Systems (GIS) and new occupancy modelling techniques has improved our ability to predict distributions across landscapes as well as account for imperfect detection. I surveyed the nearshore fish community at 105 sites between Kingston, Ontario and Rockport, Ontario with the objective of modelling geographic and environmental characteristics associated with littoral fish distributions. Occupancy modelling was performed on Round Goby, Yellow perch, and Lepomis spp. Modelling with geographic and environmental covariates revealed the effect of shoreline exposure on nearshore habitat characteristics and the occupancy of Round Goby. Yellow Perch, and Lepomis spp. occupancy was most strongly associated negatively with distance to a wetland. These results are consistent with past research on large lake systems indicate the importance of wetlands and shoreline exposure in determining the fish community of the littoral zone. By examining 3 species with varying rates of occupancy and detection, this study was also able to demonstrate the variable utility of occupancy modelling.

WIPO and the Reinforcement of the Nagoya Protocol: Towards Effective Implementation of an Access and Benefit Sharing Regime for the Protection of Traditional Knowledge Associated with Genetic Resources

Traditional knowledge associated with genetic resources (TKaGRs) is acknowledged as a valuable resource. Its value draws from economic, social, cultural, and innovative uses. This value places TK at the heart of competing interests as between indigenous peoples who hold it and depend on it for their survival, and profitable industries which seek to exploit it in the global market space. The latter group seek, inter alia, to advance and maintain their global competitiveness by exploiting TKaGRs leads in their research and development activities connected with modern innovation. Biopiracy remains an issue of central concern to the developing world and has emerged in this context as a label for the inequity arising from the misappropriation of TKaGRs located in the South by commercial interests usually located in the North. Significant attention and resources are being channeled at global efforts to design and implement effective protection mechanisms for TKaGRs against the incidence of biopiracy. The emergence and recent entry into force of the Nagoya Protocol offers the latest example of a concluded multilateral effort in this regard. The Nagoya Protocol, adopted on the platform of the Convention on Biological Diversity (CBD), establishes an open-ended international access and benefit sharing (ABS) regime which is comprised of the Protocol as well as several complementary instruments. By focusing on the trans-regime nature of biopiracy, this thesis argues that the intellectual property (IP) system forms a central part of the problem of biopiracy, and so too to the very efforts to implement solutions, including through the Nagoya Protocol. The ongoing related work within the World Intellectual Property Organization (WIPO), aimed at developing an international instrument (or a series of instruments) to address the effective protection of TK, constitutes an essential complementary process to the Nagoya Protocol, and, as such, forms a fundamental element within the Nagoya Protocol’s evolving ABS regime-complex. By adopting a third world approach to international law, this thesis draws central significance from its reconceptualization of biopiracy as a trans-regime concept. By construing the instrument(s) being negotiated within WIPO as forming a central component part of the Nagoya Protocol, this dissertation’s analysis highlights the importance of third world efforts to secure an IP-based reinforcement to the Protocol for the effective eradication of biopiracy.

Toxicity of polychlorinated biphenyls and N-phenyl-1-naphthylamine in the juvenile turtle, Chelydra serpentina

Polychlorinated biphenyls (PCBs) and substituted phenylamine antioxidants (SPAs) are two chemical groups that have been used in multiple Canadian industrial processes. Despite the production ban of PCBs in North America in 1977, they are still ubiquitous in the environment and in wildlife tissues. Previous studies of fish, amphibians, birds, and mammals have shown that PCBs are toxic and act as endocrine disruptors. In contrast, SPAs, specifically N-phenyl-1-naphthylamine (PANA), have received very little attention despite their current use in Canada and their expected environmental releases. The effects of PCB and PANA exposures in reptiles remain unknown thus, juvenile Chelydra serpentina were used in this thesis as a model vertebrate to fill in missing toxicity research gaps due to their importance as an environmental indicator. First, food pellets were spiked at an environmentally relevant concentration of the PCB mixture Aroclor 1254 (A1254) to model hepatic bioaccumulation (0.45 μg/g A1254 for 31 days) and depuration (clean food for 50 days) of PCBs in turtles. No significant differences in PCB concentrations were observed between the control and treated animals, suggesting that juvenile turtles exposed to environmentally relevant concentrations of PCBs can likely detoxify low concentrations of PCBs. Additionally, two dose-response experiments were performed using A1254 or PANA spiked food (0-12.7 μg/g and 0-3,446 μg/g, respectively) to determine hepatic toxicity and bioaccumulation in juvenile C. serpentina. An increase in hepatic cyp1a was observed when exposed to the highest dose of both chemicals: 1) for A1254, induction correlated to the significant increase in hepatic PCB congeners that are known to be metabolized by CYP1A; and 2) for PANA, induction suggested that CYP1A has a potential role in its detoxification. PCBs are known endocrine disruptors, but no significant changes were observed for both thyroid receptors (alpha and beta) or by estrogen and androgen receptors. This lack of response, also noted in the PANA exposure, suggests that C. serpentina is less sensitive to endocrine disruption than other vertebrates. Furthermore, the expression of genes involved in cellular stress was not altered in PCB and PANA exposed animals, supporting the resilience of turtles to oxidative stress. This is the first study to demonstrate the toxicity of PCBs and PANA in C. serpentina, demonstrating the turtle’s high tolerance to contamination.

Strategic Diplomacies: Indigenous Governance, International Politics, and Natural Resources in Canada

International Relations theory would predict that central governments, with their considerable material resources, would be unlikely to face a challenge from a substate government. However, substate governments, and particularly Indigenous governments, are pushing back against central government control in both domestic and international spheres. Indigenous governments are leveraging their local mining sectors to realize their interests and express local identities—interests and identities that may not be congruent with those of the central government. Applying the case study of the resource extraction sector in Canada, this thesis asks: under what conditions are substate governments able to challenge the authority of central governments in the international arena? Canada’s reliance on the global extractive resource sector is a major driver of its international policy preferences, but the increased engagement of Indigenous governments in the sector challenges the control of the federal government. Focusing on the resource extraction sectors in British Columbia, Saskatchewan, and Ontario, this thesis argues that there is a mutually reinforcing relationship between Indigenous governments’ international engagement and their domestic autonomy; both challenge the parameters of state authority. Both force the state to respond to claims of control from multiple sites and to clarify convoluted policy environments. A confluence of factors—including increased Indigenous connections to the globalized economy, new Canadian regulatory frameworks, and recent Supreme Court of Canada cases regarding Indigenous lands—have all altered the space in which Indigenous governments in Canada participate in the resource extraction sector and produce overlapping or multilevel governance structures. This thesis demonstrates that Indigenous international engagement entrenches the authority and political legitimacy manifest in Indigenous governments’ insistence on equitable and horizontal negotiations in Canada’s lucrative resource extraction sector. A cumulative process occurs in which domestic and international expressions of political autonomy reinforce each other, produce further opportunities to express authority in both environments, and trouble the state’s capacity to fully realize its international policy preferences.

Design of an Experimental Rig to Characterize the Gust Response of Small Wind Turbines and Autorotating Seeds

This thesis investigates the rotational behavior of abstracted small-wind-turbine rotors exposed to a sudden increase in oncoming flow velocity, i.e. a gust. These rotors consisted of blades with aspect ratios characteristic of samara seeds, which are known for their ability to maintain autorotation in unsteady wind. The models were tested in a towing tank using a custom-built experimental rig. The setup was designed and constructed to allow for the measurement of instantaneous angular velocity of a rotor model towed at a prescribed kinematic profile along the tank. The conclusions presented in this thesis are based on the observed trends in effective angle-of-attack distribution, tip speed ratio, angular velocity, and time delay in the rotational response for each of rotors over prescribed gust cases. It was found that the blades with the higher aspect ratio had higher tip speed ratios and responded faster than the blades with a lower aspect ratio. The decrease in instantaneous tip speed ratio during the onset of a prescribed gust correlated with the time delay in each rotor model's rotational response. The time delays were found to increase nonlinearly with decreasing durations over which the simulated gusts occurred.

Vortex evolution in the wake of accelerating low-aspect-ratio plates and three-dimensional bodies of revolution

To find examples of effecient locomotion and manoeuvrability, one need only turn to the elegant solutions natural flyers and swimmers have converged upon. This dissertation is specifically motivated by processes of evolutionary convergence, which have led to the propulsors and body shapes in nature that exhibit strong geometric collapse over diverse scales. These body features are abstracted in the studies presented herein using low-aspect-ratio at plates and a three-dimensional body of revolution (a sphere). The highly-separated vortical wakes that develop during accelerations are systematically characterized as a function of planform shape, aspect ratio, Reynolds number, and initial boundary conditions. To this end, force measurements and time-resolved (planar) particle image velocimetry have been used throughout to quantify the instantaneous forces and vortex evolution in the wake of the bluff bodies. During rectilinear motions, the wake development for the flat plates is primarily dependent on plate aspect ratio, with edge discontinuities and curvature playing only a secondary role. Furthermore, the axisymmetric case, i.e. the circular plate, shows strong sensitivity to Reynolds number, while this sensitivity quickly diminishes with increasing aspect ratio. For rotational motions, global insensitivity to plate aspect ratio has been observed. For the sphere, it has been shown that accelerations play an important role in the mitigation of flow separation. These results - expounded upon in this dissertation - have begun to shed light on the specific vortex dynamics that may be coopted by flying and swimming species of all shapes and sizes towards efficient locomotion.

Roles of the Immune Cytokine Environment on Clonal Growth of Murine and Human Tet2 Mutant Bone Marrow Progenitors: Implications for Myelodysplastic Syndromes

TET2 is a tumor suppressor gene that has been implicated in the epigenetic regulation of gene expression. Inactivating TET2 mutations are common in MDS. These mutations may contribute to early clonal dominance and myeloid transformation, although the exact mechanisms remain to be elucidated. Common to the environment of MDS are elevations in cytokines, such as TNFα and IFN-γ. It was hypothesized that inflammatory cytokines TNF-α and IFN-γ may promote clonal expansion of TET2 mutant progenitors. Adult (10-14 weeks-old) Tet2 wild type (+/+) and Tet2 mutant (-/-) C57BL/6 mice strains were chosen as a model system. Lineage negative cells (Lin-), enriched for hematopoietic stem and progenitor cells, were isolated from Tet2 +/+ and -/- bone marrow and cultured in the absence or presence of varying concentrations of TNFα or IFN-γ in methylcellulose colony formation assays and long term cell culture assays, over a period of 12 and 30 days respectively, and their colony growth, cell count, immunophenotype and resistance to apoptosis were examined. Where indicated, serial re-plating was performed. Expression of apoptotic regulators was assessed by qRT-PCR. In the triplicate experiments, starting with equal densities of Tet2 +/+ and -/- Lin- cells, Tet2 -/- Lin- cells displayed increased resistance to cytokine-induced growth suppression and superior colony forming ability over +/+ in the serial re-plating assays under stress of increasing TNFα or IFN γ. Tet2 -/- progenitors also displayed a lower apoptotic index compared to +/+ under stress of increasing TNFα, suggesting increased resistance to TNFα induced apoptosis. Transcriptional data showed low expression of Tnfr1, Fas and caspase 8, as well as a high expression of Bcl-2 and Iap1 in Tet2 -/- compared to +/+ under stress of TNFα. Tet2-/- also showed increased basal expression of endogenous TNFα mRNA compared to +/+. In the human colony growth assay, the clonal growth of TET2 mutant CFU-GM progenitors was enhanced at low TNFα concentrations. Conclusion: Mutations that promote resistance to environmental stem cell stressors are a known mechanism of clonal selection in aplastic anaemia and JAK2-mutant MPN and our findings suggest that this mechanism may be critical to clonal selection and dominance in MDS.

Investigating the mesh dependency and upscaling of 3D grain-based models for the simulation of brittle fracture processes in low-porosity crystalline rock

The application of 3D grain-based modelling techniques is investigated in both small and large scale 3DEC models, in order to simulate brittle fracture processes in low-porosity crystalline rock. Mesh dependency in 3D grain-based models (GBMs) is examined through a number of cases to compare Voronoi and tetrahedral grain assemblages. Various methods are used in the generation of tessellations, each with a number of issues and advantages. A number of comparative UCS test simulations capture the distinct failure mechanisms, strength profiles, and progressive damage development using various Voronoi and tetrahedral GBMs. Relative calibration requirements are outlined to generate similar macro-strength and damage profiles for all the models. The results confirmed a number of inherent model behaviors that arise due to mesh dependency. In Voronoi models, inherent tensile failure mechanisms are produced by internal wedging and rotation of Voronoi grains. This results in a combined dependence on frictional and cohesive strength. In tetrahedral models, increased kinematic freedom of grains and an abundance of straight, connected failure pathways causes a preference for shear failure. This results in an inability to develop significant normal stresses causing cohesional strength dependence. In general, Voronoi models require high relative contact tensile strength values, with lower contact stiffness and contact cohesional strength compared to tetrahedral tessellations. Upscaling of 3D GBMs is investigated for both Voronoi and tetrahedral tessellations using a case study from the AECL’s Mine-by-Experiment at the Underground Research Laboratory. An upscaled tetrahedral model was able to reasonably simulate damage development in the roof forming a notch geometry by adjusting the cohesive strength. An upscaled Voronoi model underestimated the damage development in the roof and floor, and overestimated the damage in the side-walls. This was attributed to the discretization resolution limitations.

Analysis of Non-Stationary Flows Using Eulerian and Lagrangian Frameworks

Recent developments have made researchers to reconsider Lagrangian measurement techniques as an alternative to their Eulerian counterpart when investigating non-stationary flows. This thesis advances the state-of-the-art of Lagrangian measurement techniques by pursuing three different objectives: (i) developing new Lagrangian measurement techniques for difficult-to-measure, in situ flow environments; (ii) developing new post-processing strategies designed for unstructured Lagrangian data, as well as providing guidelines towards their use; and (iii) presenting the advantages that the Lagrangian framework has over their Eulerian counterpart in various non-stationary flow problems. Towards the first objective, a large-scale particle tracking velocimetry apparatus is designed for atmospheric surface layer measurements. Towards the second objective, two techniques, one for identifying Lagrangian Coherent Structures (LCS) and the other for characterizing entrainment directly from unstructured Lagrangian data, are developed. Finally, towards the third objective, the advantages of Lagrangian-based measurements are showcased in two unsteady flow problems: the atmospheric surface layer, and entrainment in a non-stationary turbulent flow. Through developing new experimental and post-processing strategies for Lagrangian data, and through showcasing the advantages of Lagrangian data in various non-stationary flows, the thesis works to help investigators to more easily adopt Lagrangian-based measurement techniques.

MARS (Media Asset Retrieval System): Puget Sound’s Digital Archive

The MARS (Media Asset Retrieval System) Project is the collaborative effort of public broadcasters,libraries and schools in the Puget Sound region to create a digital online resource that provides access to content produced by public broadcasters via the public libraries. Convergence ConsortiumThe Convergence Consortium is a model for community collaboration, including organizations such as public broadcasters, libraries, museums, and schools in the Puget Sound region to assess the needs of their constituents and pool resources to develop solutions to meet those needs. Specifically, the archives of public broadcasters have been identified as significant resources for the local communities and nationally. These resources can be accessed on the broadcasters websites, and through libraries and used by schools, and integrated with text and photographic archives from other partners.MARS’ goalCreate an online resource that provides effective access to the content produced locally by KCTS (Seattle PBS affiliate) and KUOW (Seattle NPR affiliate). The broadcasts will be made searchable using the CPB Metadata Element Set (under development) and controlled vocabularies (to be developed). This will ensure a user friendly search and navigation mechanism and user satisfaction.Furthermore, the resource can search the local public library’s catalog concurrently and provide the user with relevant TV material, radio material, and books on a given subject.The ultimate goal is to produce a model that can be used in cities around the country.The current phase of the project assesses the community’s need, analyzes the current operational systems, and makes recommendations for the design of the resource.Deliverables• Literature review of the issues surrounding the organization, description and representation of media assets• Needs assessment report of internal and external stakeholders• Profile of the systems in the area of managing and organizing media assetsfor public broadcasting nationwideActivities• Analysis of information seeking behavior• Analysis of collaboration within the respective organizations• Analysis of the scope and context of the proposed system• Examining the availability of information resources and exchangeof resources among users

Puget Sound’s MARS (Media Asset Retrieval System) Digital Library

The MARS (Media Asset Retrieval System) Project is a collaboration between public broadcasters, libraries and schools in the Puget Sound region to assess the needs of their constituents and pool resources to develop solutions to meet those needs. The Project’s ultimate goal is to create a digital online resource that will provide access to content produced by public broadcasters and libraries. The MARS Project is funded by a grant from the Corporation for Public Broadcasting (CPB) Television Future Fund. Convergence ConsortiumThe Convergence Consortium is a model for community collaboration, including representatives from public broadcasting, libraries and schools in the Puget Sound region. They meet regularly to consider collaborative efforts that will be mutually beneficial to their institutions and constituents. Specifically, the archives of public broadcasters have been identified as significant resources that can be accessed through libraries and used by schools, and integrated with text and photographic archives from other partners.Using the work-centered framework, we collected data through interviews with nine engineers and observation of their searching while they performed their regular, job-related searches on the Web. The framework was used to analyze the data on two levels: 1) the activities and organizational relationships and constrains of work domains, and 2) users’ cognitive and social activities and their subjective preferences during searching.

Extending the 2P-Kt ecosystem: CLP and Labelled LP

The ability to create hybrid systems that blend different paradigms has now become a requirement for complex AI systems usually made of more than a component. In this way, it is possible to exploit the advantages of each paradigm and exploit the potential of different approaches such as symbolic and non-symbolic approaches. In particular, symbolic approaches are often exploited for their efficiency, effectiveness and ability to manage large amounts of data, while symbolic approaches are exploited to ensure aspects related to explainability, fairness, and trustworthiness in general. The thesis lies in this context, in particular in the design and development of symbolic technologies that can be easily integrated and interoperable with other AI technologies. 2P-Kt is a symbolic ecosystem developed for this purpose, it provides a logic-programming (LP) engine which can be easily extended and customized to deal with specific needs. The aim of this thesis is to extend 2P-Kt to support constraint logic programming (CLP) as one of the main paradigms for solving highly combinatorial problems given a declarative problem description and a general constraint-propagation engine. A real case study concerning school timetabling is described to show a practical usage of the CLP(FD) library implemented. Since CLP represents only a particular scenario for extending LP to domain-specific scenarios, in this thesis we present also a more general framework: Labelled Prolog, extending LP with labelled terms and in particular labelled variables. The designed framework shows how it is possible to frame all variations and extensions of LP under a single language reducing the huge amount of existing languages and libraries and focusing more on how to manage different domain needs using labels which can be associated with every kind of term. Mapping of CLP into Labeled Prolog is also discussed as well as the benefits of the provided approach.

An action research report on the Korean national digital library

This paper presents the results of my action research. I was involved in establishing and running a digital library that was founded by the government of South Korea. The process involved understanding the relationship between the national IT infrastructure and the success factors of the digital library. In building, the national IT infrastructure, a digital library system was implemented; it combines all existing digitized university libraries and can provide overseas information, such as foreign journal articles, instantly and freely to every Korean researcher. An empirical survey was made as a part of the action research; the survey determined user satisfaction in the newly established national digital library. After obtaining the survey results, I suggested that the current way of running the nationwide government-owned digital library should be retained. (C) 2002 Elsevier Science B.V. All rights reserved.