Search

Java deserialization vulnerabilities have become a common threat to Java application security nowadays.Finding out the gadget chain determines whether this type of vulnerability can be exploited.Due to the large code space of Java applications and dependent libraries and the polymorphism of Java itself, manual analysis of Java deserialization gadget chains consumes a lot of time and effort and it is highly dependent on the experienced knowledge.Therefore, it is crucial to study how to efficiently and accurately automate the discovery of gadget chains.Java deserialization gadget chain discovery method based on hybrid analysis was proposed.Call graph based on the variable declaration type was constructed, and then the deserialization entry functions that may reach the dangerous functions were screened using the call graph analysis.The screened entry functions were used as the entry point of the hybrid information flow analysis.The hybrid information flow analysis was carried out for both pointer and tainted variables.The tainted objects created implicitly were marked.The tainted information and the pointer information were propagated simultaneously to construct the hybrid information flow graph.The reachability of external taint data propagation to the dangerous function was judged based on the hybrid information flow graph.The corresponding deserialization gadget chain was constructed according to the taint propagation path.The hybrid analysis took into account the efficiency of call graph analysis and the accuracy of hybrid information flow analysis.The corresponding static analysis tool, namely GadgetSearch, was implemented based on the proposed hybrid analysis method.In the experimental evaluation, GadgetSearch had lower false positive and lower false negative than the existing tool GadgetInspector on four datasets of Ysoserial, Marshalsec, Jackson historical CVE, and XStream historical CVE.Additionally, GadgetSearch also found multiple undisclosed gadget chains.The experimental results show that the proposed method can efficiently and accurately discover the Java deserialization gadget chain in multiple practical Java applications.

We proposed that autophagy activated through PPARγ in prostate cancer could protect cancer against androgen deprivation. Our MTT and western blotting assay results showed that mimics of miR-337-3p repressed autophagy flux under androgen deprivation, whereas inhibitors had the opposite effect. Neither mimics nor inhibitors influenced cell motility and invasion. miR-337-3p downregulated PPARγ expression in dual luciferase reporter assays and promoted AMPK phosphorylation. The overexpression of PPARγ or AMPK agonists partly diminished the adverse influence of mimics on proliferation and cell autophagy. In a mouse xenograft model, tumors transplanted with LNCap cells having a miR-337-3p deficiency had a significantly larger volume and lower rate of apoptosis than in controls after orchidectomy. Our findings showed that the negative effects of miR-337-3p on cell survival after androgen deprivation through PPARγ degeneration and modulated autophagy could serve as a novel therapeutic target for androgen-dependent prostate cancer and provide a strategy against resistance to anti-androgen therapy. [ABSTRACT FROM AUTHOR]

In order to protect the privacy of query users and databases, a quantum private query protocol under noisy conditions is proposed and studied. It is a one-way quantum protocol that not only protects user privacy, but also prevents eavesdropping. And in the protocol initialization phase, the identity is verified by the quantum entanglement pair. Through key distribution, a user only knows a part of the key, and the accuracy of the original key needs to be considered. Channel noise directly affects the transmission result of quantum bits and reduces the transmission accuracy. In addition, the presence of eavesdropper Eve may also affect the transmission of qubits. The receiver corrects the error by using quantum error correction technology, thereby improving the efficiency of protocol communication. [ABSTRACT FROM AUTHOR]

In recent decades the Yinma River Basin has been receiving increasing pollution from industrial and domestic wastewater, agriculture, and livestock production - which are all potential 4-NP pollution sources. Thus, this work investigated spatial-seasonal distribution, risks, and seasonal variations of 4-nonylphenol in the aquatic environment of the Yinma River Basin. The results indicated that the highest concentrations in water and sediment occurred in livestock-production, industrial, and domestic-wastewater areas, and the lowest occurred in agricultural areas; a seasonal variation in 4-NP concentrations in water was observed, with the highest concentrations occurring in the dry season and the lowest concentrations in the wet season. The results for risk quotient indicated that in three water seasons, low ecological risks of 4-NP in water primarily occurred in agricultural areas, and high ecological risks occurred downstream of domestic-wastewater drainage; the ecological risks of 4-NP in sediment from all the sampling sites were exposed to moderate or high ecological risks. Based on the results for hazard quotient, a seasonal variation in human health risks of 4-NP in water was observed; except for a sampling site located downstream of domestic wastewater drainage, human health risks of 4-NP in water were low. [ABSTRACT FROM AUTHOR]

With the rapid development of information technology (IT), E-mail has become an important communication tool between human beings. Meanwhile, E-mail safety becomes increasingly important because of its universal applications. In order to overcome shortages of classical E-mail encryption, an E-mail encryption protocol based on quantum teleportation was proposed. It makes quantum encryption of E-mails during sending and receiving processes by taking advantages of entanglement and nonclonability of quantum, thus ensuring safety and reliability of E-mail transmission. [ABSTRACT FROM AUTHOR]

Colorectal cancer is the second leading cause of death from cancer in the United States. Metastases in the liver, the most common metastatic site for colorectal cancer, are found in one-third of the patients who die of colorectal cancer. Currently, the genes and molecular mechanisms that are functionally critical in modulating colorectal cancer hepatic metastasis remain unclear. Here, we report our studies using functional selection in an orthotopic mouse model of colorectal cancer to identify a set of genes that play an important role in mediating colorectal cancer liver metastasis. These genes included APOBEC3G, CD133, LIPC, and S100P. Clinically, we found these genes to be highly expressed in a cohort of human hepatic metastasis and their primary colorectal tumors, suggesting that it might be possible to use these genes to predict the likelihood of hepatic metastasis. We have further revealed what we believe to be a novel mechanism in which APOBEC3G promotes colorectal cancer hepatic metastasis through inhibition of miR-29-mediated suppression of MMP2. Together, our data elucidate key factors and mechanisms involved in colorectal cancer liver metastasis, which could be potential targets for diagnosis and treatment. [ABSTRACT FROM AUTHOR]