Search

Today's Android developers tend to include numerous features to accommodate diverse user requirements, which inevitably leads to bloated apps. Yet more often than not, only a fraction of these features are frequently utilized by users, thus a bloated app costs dearly in potential vulnerabilities, expanded attack surfaces, and additional resource consumption. Especially in the event of severe security incidents, users have the need to block vulnerable functionalities immediately. Existing works have proposed various code debloating approaches for identifying and removing features of executable components. However, they typically involve static modification of files (and, for Android apps, repackaging of APKs, too), which lacks user convenience let alone undermining the security model of Android due to the compromising of public key verification and code integrity checks. This paper introduces 3DNDroid, a Dynamic Debloating approach targeting both DEX and Native methods in AnDroid apps. Using an unprivileged management app in tandem with a customized Android OS, 3DNDroid dynamically reduces unnecessary code loading during app execution based on a pre-generated debloating schema from static or dynamic analyses. It intercepts invocations of debloated bytecode methods to prevent their interpretation, compilation, and execution, while zero-filling memory spaces of debloated native methods during code loading. Evaluation demonstrates 3DNDroid's ability to debloat 187 DEX methods and 30 native methods across 55 real-world apps, removing over 10K Return-Oriented Programming (ROP) gadgets. Case studies confirm its effectiveness in mitigating vulnerabilities, and performance assessments highlight its resource-saving advantages over non-debloated apps.

Accurate identification of software vulnerabilities is crucial for system integrity. Vulnerability datasets, often derived from the National Vulnerability Database (NVD) or directly from GitHub, are essential for training machine learning models to detect these security flaws. However, these datasets frequently suffer from significant noise, typically 40% to 75%, due primarily to the automatic and indiscriminate labeling of all changes in vulnerability-fixing commits (VFCs) as vulnerability-related. This misclassification occurs because not all changes in a commit aimed at fixing vulnerabilities pertain to security threats; many are routine updates like bug fixes or test improvements. This paper introduces the first methodology that uses the Large Language Model (LLM) with a heuristic enhancement to automatically identify vulnerability-fixing changes from VFCs, achieving an F1-score of 0.82. VulSifter was applied to a large-scale study, where we conducted a crawl of 127,063 repositories on GitHub, resulting in the acquisition of 5,352,105 commits. VulSifter involves utilizing an LLM to comprehend code semantics and contextual information, while applying heuristics to filter out unrelated changes. We then developed CleanVul, a high-quality dataset comprising 11,632 functions using our LLM heuristic enhancement approach, demonstrating Correctness (90.6%) comparable to established datasets such as SVEN and PrimeVul. To evaluate the CleanVul dataset, we conducted experiments focusing on fine-tuning various LLMs on CleanVul and other high-quality datasets. Evaluation results reveal that LLMs fine-tuned on CleanVul not only exhibit enhanced accuracy but also superior generalization capabilities compared to those trained on uncleaned datasets. Specifically, models trained on CleanVul and tested on PrimeVul achieve accuracy higher than those trained and tested exclusively on PrimeVul.

We present a comprehensive dataset of Java vulnerability-fixing commits (VFCs) to advance research in Java vulnerability analysis. Our dataset, derived from thousands of open-source Java projects on GitHub, comprises two variants: JavaVFC and JavaVFC-extended. The dataset was constructed through a rigorous process involving heuristic rules and multiple rounds of manual labeling. We initially used keywords to filter candidate VFCs based on commit messages, then refined this keyword set through iterative manual labeling. The final labeling round achieved a precision score of 0.7 among three annotators. We applied the refined keyword set to 34,321 open-source Java repositories with over 50 GitHub stars, resulting in JavaVFC with 784 manually verified VFCs and JavaVFC-extended with 16,837 automatically identified VFCs. Both variants are presented in a standardized JSONL format for easy access and analysis. This dataset supports various research endeavors, including VFC identification, fine-grained vulnerability detection, and automated vulnerability repair. The JavaVFC and JavaVFC-extended are publicly available at https://zenodo.org/records/13731781.

This paper reports our submission under the team name `SynthDetectives' to the ALTA 2023 Shared Task. We use a stacking ensemble of Transformers for the task of AI-generated text detection. Our approach is novel in terms of its choice of models in that we use accessible and lightweight models in the ensemble. We show that ensembling the models results in an improved accuracy in comparison with using them individually. Our approach achieves an accuracy score of 0.9555 on the official test data provided by the shared task organisers., Comment: This is an ALTA 2023 Shared Task Paper

The Android operating system is pervasively adopted as the operating system platform of choice for smart devices. However, the strong adoption has also resulted in exponential growth in the number of Android based malicious software or malware. To deal with such cyber threats as part of cyber investigation and digital forensics, computational techniques in the form of machine learning algorithms are applied for such malware identification, detection and forensics analysis. However, such Computational Forensics modelling techniques are constrained the volume, velocity, variety and veracity of the malware landscape. This in turn would affect its identification and detection effectiveness. Such consequence would inherently induce the question of sustainability with such solution approach. One approach to optimise effectiveness is to apply dimensional reduction techniques like Principal Component Analysis with the intent to enhance algorithmic performance. In this paper, we evaluate the effectiveness of the application of Principle Component Analysis on Computational Forensics task of detecting Android based malware. We applied our research hypothesis to three different datasets with different machine learning algorithms. Our research result showed that the dimensionally reduced dataset would result in a measure of degradation in accuracy performance., Comment: 18 pages

Dark photons are hypothetical massive vector particles that could mix with ordinary photons. The simplest theoretical model is fully characterised by only two parameters: the mass of the dark photon m$_{\gamma^{\mathrm{D}}}$ and its mixing parameter with the photon, $\varepsilon$. The sensitivity of the SHiP detector is reviewed for dark photons in the mass range between 0.002 and 10 GeV. Different production mechanisms are simulated, with the dark photons decaying to pairs of visible fermions, including both leptons and quarks. Exclusion contours are presented and compared with those of past experiments. The SHiP detector is expected to have a unique sensitivity for m$_{\gamma^{\mathrm{D}}}$ ranging between 0.8 and 3.3$^{+0.2}_{-0.5}$ GeV, and $\varepsilon^2$ ranging between $10^{-11}$ and $10^{-17}$.

We report on the design, commissioning, and initial measurements of a Transition-edge Sensor (TES) x-ray spectrometer for the Electron Beam Ion Trap (EBIT) at the National Institute of Standards and Technology (NIST). Over the past few decades, the NIST EBIT has produced numerous studies of highly charged ions in diverse fields such as atomic physics, plasma spectroscopy, and laboratory astrophysics. The newly commissioned NIST EBIT TES Spectrometer (NETS) improves the measurement capabilities of the EBIT through a combination of high x-ray collection efficiency and resolving power. NETS utilizes 192 individual TES x-ray microcalorimeters (166/192 yield) to improve upon the collection area by a factor of ~30 over the 4-pixel neutron transmutation doped germanium-based microcalorimeter spectrometer previously used at the NIST EBIT. The NETS microcalorimeters are optimized for the x-ray energies from roughly 500 eV to 8,000 eV and achieve an energy resolution of 3.7 eV to 5.0 eV over this range, a more modest (<2X) improvement over the previous microcalorimeters. Beyond this energy range NETS can operate with various trade-offs, the most significant of which are reduced efficiency at lower energies and being limited to a subset of the pixels at higher energies. As an initial demonstration of the capabilities of NETS, we measured transitions in He-like and H-like O, Ne, and Ar as well as Ni-like W. We detail the energy calibration and data analysis techniques used to transform detector counts into x-ray spectra, a process that will be the basis for analyzing future data.

We use narrow spectral lines from the x-ray spectra of various highlycharged ions to measure low-energy tail-like deviations from a Gaussian responsefunction in a microcalorimter x-ray spectrometer with Au absorbers at energiesfrom 650 eV to 3320 eV. We review the literature on low energy tails in othermicrocalorimter x-ray spectrometers and present a model that explains all thereviewed tail fraction measurements. In this model a low energy tail arises fromthe combination of electron escape and energy trapping associated with Bi x-rayabsorbers.

We propose to build and operate a detector that, for the first time, will measure the process $pp\to\nu X$ at the LHC and search for feebly interacting particles (FIPs) in an unexplored domain. The TI18 tunnel has been identified as a suitable site to perform these measurements due to very low machine-induced background. The detector will be off-axis with respect to the ATLAS interaction point (IP1) and, given the pseudo-rapidity range accessible, the corresponding neutrinos will mostly come from charm decays: the proposed experiment will thus make the first test of the heavy flavour production in a pseudo-rapidity range that is not accessible by the current LHC detectors. In order to efficiently reconstruct neutrino interactions and identify their flavour, the detector will combine in the target region nuclear emulsion technology with scintillating fibre tracking layers and it will adopt a muon identification system based on scintillating bars that will also play the role of a hadronic calorimeter. The time of flight measurement will be achieved thanks to a dedicated timing detector. The detector will be a small-scale prototype of the scattering and neutrino detector (SND) of the SHiP experiment: the operation of this detector will provide an important test of the neutrino reconstruction in a high occupancy environment., Comment: Letter of Intent

The paper presents the summary data of the authors' research within the framework of the OLIMPIYA project (the Russian acronym of {\bf OLI}viny iz {\bf M}eteoritov --- {\bf P}oisk tyazholykh {\bf I} sverkhtyazholykh {\bf YA}der / Olivines from meteorites: Search for heavy and superheavy nuclei) and results of track analysis for heavy cosmic ray nuclei (\emph{Z} = 26--129) in olivine crystals from meteorites using an original processing technique. A total of 21,743 tracks of nuclei heavier than iron have been identified in meteoritic matter to date to form the largest database within this charge range. The database includes three tracks of superheavy nuclei with the lifetimes of about a few decades, which can be considered as direct experimental evidence for the existence of natural superheavy nuclei from the "island of stability". Comprehensive comparative analysis of data from two meteorites with different cosmic ray exposure ages, Marjalahti (from 178 to 205 Myr) and Eagle Station (from 35 to 71 Myr), is presented for the first time. The results are discussed within the existing concepts of nuclei formation in astrophysical processes., Comment: 13 pages, 4 figures, 1 table

Patient-specific therapies require that cells be manufactured in multiple batches of small volumes, making it a challenge for conventional modes of quality control. The added complexity of inherent variability (even within batches) necessitates constant monitoring to ensure comparable end products. Hence, it is critical that new non-destructive modalities of cell monitoring be developed. Here, we study, for the first time, the use of optical spectroscopy in the determination of cell confluency. We exploit the autofluorescence properties of molecules found natively within cells. By applying spectral decomposition on the acquired autofluorescence spectra, we are able to further discern the relative contributions of the different molecules, namely flavin adenine dinucleotide (FAD) and reduced nicotinamide adenine dinucleotide (NADH). This is then quantifiable as redox ratios (RR) that represent the extent of oxidation to reduction based upon the optically measured quantities of FAD and NADH. Results show that RR is significantly higher for lower confluencies ($\leq$50$\%$), which we attribute to the different metabolic requirements as cells switch from individual survival to concerted proliferation. We validate this relationship through bio-chemical assays and autofluorescence imaging, and further confirmed through a live-dead study that our measurement process had negligible effects on cell viability.

Storage systems are essential building blocks for cloud computing infrastructures. Although high performance storage servers are the ultimate solution for cloud storage, the implementation of inexpensive storage system remains an open issue. To address this problem, the efficient cloud storage system is implemented with inexpensive and commodity computer nodes that are organized into PC cluster based datacenter. Hadoop Distributed File System (HDFS) is an open source cloud based storage platform and designed to be deployed in low-cost hardware. PC Cluster based Cloud Storage System is implemented with HDFS by enhancing replication management scheme. Data objects are distributed and replicated in a cluster of commodity nodes located in the cloud. This system provides optimum replica number as well as weighting and balancing among the storage server nodes. The experimental results show that storage can be balanced depending on the available disk space, expected availability and failure probability of each node in PC cluster.

Design and architecture of cloud storage system plays a vital role in cloud computing infrastructure in order to improve the storage capacity as well as cost effectiveness. Usually cloud storage system provides users to efficient storage space with elasticity feature. One of the challenges of cloud storage system is difficult to balance the providing huge elastic capacity of storage and investment of expensive cost for it. In order to solve this issue in the cloud storage infrastructure, low cost PC cluster based storage server is configured to be activated for large amount of data to provide cloud users. Moreover, one of the contributions of this system is proposed an analytical model using M/M/1 queuing network model, which is modeled on intended architecture to provide better response time, utilization of storage as well as pending time when the system is running. According to the analytical result on experimental testing, the storage can be utilized more than 90% of storage space. In this paper, two parts have been described such as (i) design and architecture of PC cluster based cloud storage system. On this system, related to cloud applications, services configurations are explained in detailed. (ii) Analytical model has been enhanced to be increased the storage utilization on the target architecture.

In this paper, the minimum channel gain flow with uncertainty in the demand vector is examined. The approach is based on a transformation of uncertainty in the demand vector to uncertainty in the gain vector. OFDM systems are known to overcome the impairment of the wireless channel by splitting the given system bandwidth into parallel sub-carriers, on which data-symbols can be transmitted simultaneously. This enables the possibility of enhancing the system's performance by deploying adaptive mechanisms, namely power distribution and dynamic sub-carrier assignments. The performances of maximizing the minimum throughput have been analyzed by MATLAB codes.

We have investigated the phonon and the magnetic excitations in LaCoO3 by inelastic neutron scattering measurements. The acoustic phonon dispersions show some characteristic features of the folded Brillouin zone (BZ) for the rhombohedrally distorted perovskite structure containing two chemical formula units of LaCoO3 in the unit cell. We observed two transverse optical (TO) phonon branches along (delta, delta, delta), consistent with previously reported Raman active Eg modes which show remarkable softening associated with the spin-state transition [Ishikawa et al., (Phys. Rev. Lett. 93 (2004) 136401.)]. We found that the softening takes place in the TO mode over the whole BZ. In contrast, the acoustic phonons show no anomalous softening associated with the spin-state transition. The low-energy paramagnetic scattering at 8 K is weak, increasing towards a maximum at E > 15 meV, consistent with excitation of the nonmagnetic low-spin to magnetic intermediate-spin state of Co 3+ ions., Comment: 14 pages, 7 figure

We explore the (non)-universality of Martinez's conjecture, originally proposed for Kerr black holes, within and beyond general relativity. The conjecture states that the Brown-York quasilocal energy at the outer horizon of such a black hole reduces to twice its irreducible mass, or equivalently, to \sqrt{A} /(2\sqrt{pi}), where `A' is its area. We first consider the charged Kerr black hole. For such a spacetime, we calculate the quasilocal energy within a two-surface of constant Boyer-Lindquist radius embedded in a constant stationary-time slice. Keeping with Martinez's conjecture, at the outer horizon this energy equals the irreducible mass. The energy is positive and monotonically decreases to the ADM mass as the boundary-surface radius diverges. Next we perform an analogous calculation for the quasilocal energy for the Kerr-Sen spacetime, which corresponds to four-dimensional rotating charged black hole solutions in heterotic string theory. The behavior of this energy as a function of the boundary-surface radius is similar to the charged Kerr case. However, we show that in this case it does not approach the expression conjectured by Martinez at the horizon., Comment: 15 pages