检索结果-南通市图书馆

MMALE—A Methodology for Malware Analysis in Linux Environments

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2021年第5期67卷 1447-1469页

作者： JoséJavier de Vicente Mohino Javier bermejo higuera Juan Ramón Bermejo Higuera juan Antonio Sicilia Montalvo Manuel Sánchez Rubio JoséJavier Martínez Herraiz Escuela Superior de Ingeniería y Tecnología Universidad Internacional de La RiojaLogroño26006La RiojaSpain Departamento de Ciencias de la Computación de la Escuela Politécnica Superior Universidad de Alcaláde HenaresAlcaláde HenaresMadridSpain

In a computer environment,an operating system is prone to malware,and even the Linux operating system is not an exception.In recent years,malware has evolved,and attackers have become more qualified compared to a few years ago.Furthermore,Linux-based systems have become more attractive to cybercriminals because of the increasing use of the Linux operating system in web servers and Internet of Things(IoT)devices.Windows is the most employed OS,so most of the research efforts have been focused on its malware protection rather than on other operating systems.As a result,hundreds of research articles,documents,and methodologies dedicated to malware analysis have been reported.However,there has not been much literature concerning Linux security and protection from malware.To address all these new challenges,it is necessary to develop a methodology that can standardize the required steps to perform the malware analysis in depth.A systematic analysis process makes the difference between good and ordinary malware analyses.Additionally,a deep malware comprehension can yield a faster and much more efficient malware eradication.In order to address all mentioned challenges,this article proposed a methodology for malware analysis in the Linux operating system,which is a traditionally overlooked field compared to the other operating systems.The proposed methodology is tested by a specific Linux malware,and the obtained test results have high effectiveness in malware detection.

关键词： Malware analysis methodology analysis Linux malware IoT malware

Hybrid Security Assessment Methodology for Web Applications

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2021年第1期126卷 89-124页

作者： Roddy A.Correa juan ramon bermejo higuera Javier bermejo higuera juan Antonio SiciliaMontalvo Manuel Sanchez Rubio A.Alberto Magrenan Universidad Tecnica Particular de Loja San Cayetano AltoLojaEcuador Escuela Superior de Ingenieria y Tecnologia Universidad Internacional de La RiojaLogrono26006Spain Universidad de la Rioja Logrono26006Spain

This study presents a methodology to evaluate and prevent security vulnerabilities issues for web applications.The analysis process is based on the use of techniques and tools that allow to perform security assessments of white box and black box,to carry out the security validation of a web application in an agile and precise way.The objective of the methodology is to take advantage of the synergies of semi-automatic static and dynamic security analysis tools and manual checks.Each one of the phases contemplated in the methodology is supported by security analysis tools of different degrees of coverage,so that the results generated in one phase are used as feed for the following phases in order to get an optimized global security analysis result.The methodology can be used as part of other more general methodologies that do not cover how to use static and dynamic analysis tools in the implementation and testing phases of a Secure Software Development Life Cycle(SSDLC).A practical application of the methodology to analyze the security of a real web application demonstrates its effectiveness by obtaining a better optimized vulnerability detection result against the true and false positive metrics.Dynamic analysis with manual checking is used to audit the results,24.6 per cent of security vulnerabilities reported by the static analysis has been checked and it allows to study which vulnerabilities can be directly exploited externally.This phase is very important because it permits that each reported vulnerability can be checked by a dynamic second tool to confirm whether a vulnerability is true or false positive and it allows to study which vulnerabilities can be directly exploited externally.Dynamic analysis finds six(6)additional critical vulnerabilities.Access control analysis finds other five(5)important vulnerabilities such as Insufficient Protected Passwords or Weak Password Policy and Excessive Authentication Attacks,two vulnerabilities that permit brute force attacks.

关键词： Web applications security vulnerability weakness security analysis white box black box interactive application security testing static application security testing dynamic application security testing

Benchmarking Approach to Compare Web Applications Static Analysis Tools Detecting OWASP Top Ten Security Vulnerabilities

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2020年第9期64卷 1555-1577页

作者： juan R.bermejo higuera Javier bermejo higuera juan A.Sicilia Montalvo Javier Cubo Villalba juan Josénombela Pérez Escuela Superior de Ingeniería y Tecnología Universidad Internacional de La RiojaLa Rioja26006Spain

To detect security vulnerabilities in a web application,the security analyst must choose the best performance Security Analysis Static Tool(SAST)in terms of discovering the greatest number of security vulnerabilities as possible.To compare static analysis tools for web applications,an adapted benchmark to the vulnerability categories included in the known standard Open Web Application Security Project(OWASP)Top Ten project is required.The information of the security effectiveness of a commercial static analysis tool is not usually a publicly accessible research and the state of the art on static security tool analyzers shows that the different design and implementation of those tools has different effectiveness rates in terms of security performance.Given the significant cost of commercial tools,this paper studies the performance of seven static tools using a new methodology proposal and a new benchmark designed for vulnerability categories included in the known standard OWASP Top Ten project.Thus,the practitioners will have more precise information to select the best tool using a benchmark adapted to the last versions of OWASP Top Ten project.The results of this work have been obtaining using widely acceptable metrics to classify them according to three different degree of web application criticality.

关键词： Web application benchmark security vulnerability Security Analysis Static Tools assessment methodology false positive false negative precision f-measure

Combinatorial Method with Static Analysis for Source Code Security in Web Applications

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2021年第11期129卷 541-565页

作者： juan ramon bermejo higuera Javier bermejo higuera juan Antonio Sicilia Montalvo Tomas Sureda Riera Christopher I.Argyros A.Alberto Magrenan Escuela Superior de Ingenierıa y Tecnologıa Universidad Internacional de La RiojaLogronoLa Rioja26006Spain Computer Science Department University of AlcalaMadrid28801Spain Department of Computing and Technology Cameron UniversityLawton73505OklahomaUSA Universidad de la Rioja LogronoLa Rioja26006Spain

Security weaknesses in web applications deployed in cloud architectures can seriously affect its data confidentiality and integrity.The construction of the procedure utilized in the static analysis tools of source code security differs and therefore each tool finds a different number of each weakness type for which it is designed.To utilize the possible synergies different static analysis tools may process,this work uses a new method to combine several source codes aiming to investigate how to increase the performance of security weakness detection while reducing the number of false positives.Specifically,five static analysis tools will be combined with the designed method to study their behavior using an updated benchmark for OWASP Top Ten Security Weaknesses(OWASP TTSW).The method selects specific metrics to rank the tools for different criticality levels of web applications considering different weights in the ratios.The findings show that simply including more tools in a combination is not synonymous with better results;it depends on the specific tools included in the combination due to their different designs and techniques.

关键词： Weakness benchmark security testing analysis comparative methodology tools combination web application

Lighting,colour and geometry:Which has the greatest influence on students’cognitive processes?

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Frontiers of Architectural Research 2023年第4期12卷 575-586页

作者： Marıa Luisa nole Fajardo juan Luis higuera-Trujillo Carmen Llinares Instituto Universitario de Investigacio´n en Tecnologı´a Centrada en el Ser Humano(HUMAn-tech) Universitat Polite`cnica de Vale`nciaValencia 46022Spain School of Architecture Art and DesignTecnologico de MonterreyMonterrey 64849Mexico

Many studies have analysed the effects that design elements,such as lighting and colour,have on students’cognitive functions.These analyses,while providing useful information,do not allow researchers to compare the effects of multiple design elements.The objective of the present study is to analyse the relative influence of lighting,colour and geometry on attention and memory,the main cognitive functions that underlie learning,and on preference.In a controlled,virtual reality(VR)-based experiment,200 university students(100 male/100 female)performed attention,memory and preference tests in classrooms with different configurations of lighting(colour temperature and illuminance),colour(saturation and hue)and geometry(height and width).The results identified significant gender-based differences,which demonstrates the need to segment,by gender,samples in this type of study.Lighting had the greatest influence,significantly affecting males’memories,females’attention and the preferences of both genders.Colour was also an influential element,significantly affecting females’attention,while geometry was the least influential.Finally,it should be highlighted that attention was the metric most sensitive to design variations.These results may be of interest to architects,interior designers and engineers who wish to create classrooms that satisfy students’psychological needs.

关键词： Classroom design Memory Attention Preference Virtual classroom

Insights into the role of major bioactive dietary nutrients in lamb meat quality:a review

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Animal Science and Biotechnology 2022年第4期13卷 951-966页

作者： JavierÁlvarez-Rodríguez Olaia Urrutia Sandra Lobón Guillermo Ripoll juan ramón Bertolín Margalida Joy Departament de Ciència Animal Universitat de Lleida25198 LleidaSpain Departamento de Agronomía Biotecnología y AlimentaciónIS-FOOD InstituteEscuela Técnica Superior de Ingeniería Agronómica y BiocienciasUniversidad Pública de NavarraPamplonaSpain Centro de Investigación y Tecnología Agroalimentaria de Aragón(CITA) Avda.Montañana 93050059 ZaragozaSpain Instituto Agroalimentario de Aragón–IA2(CITA-Universidad de Zaragoza) Avda.Miguel Servet17750013 ZaragozaSpain.

Feed supplementation withα-linolenic acid(ALA)and linoleic acid(LA)increases their content in muscle,ALA increases n-3 polyunsaturated fatty acids and decrease n-6/n-3 ratio in muscle,and LA increases rumenic acid.However,high LA supplementation may have negative effects on lambs’lipid oxidative stability of meat.When the sources of ALA and LA are fed as fresh forage,the negative effects are counterbalanced by the presence of other bioactive compounds,as vitamin E(mainlyα-tocopherol)and polyphenols,which delay the lipid oxidation in meat.There is a wide consensus on the capability of vitamin E delaying lipid oxidation on lamb meat,and its feed content should be adjusted to the length of supplementation.A high dietary inclusion of proanthocyanidins,phenolic compounds and terpenes reduce the lipid oxidation in muscle and may improve the shelf life of meat,probably as a result of a combined effect with dietary vitamin E.However,the recommended dietary inclusion levels depend on the polyphenol type and concentration and antioxidant capacity of the feedstuffs,which cannot be compared easily because no routine analytical grading methods are yet available.Unless phenolic compounds content in dietary ingredients/supplements for lambs are reported,no specific association with animal physiology responses may be established.

关键词： Fatty acid Forage Oilseed Polyphenol Vitamin E

The impact of the design of learning spaces on attention and memory from a neuroarchitectural approach:A systematic review

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Frontiers of Architectural Research 2022年第3期11卷 542-560页

作者： Mar Llorens-Gamez juan Luis higuera-Trujillo Carla Sentieri Omarrementeria Carmen Llinares Department of Architectural Projects Universitat Politecnica de ValenciaValencia 46022Spain Institute for Research and Innovation in Bioengineering(i3B) Universitat Politecnica de ValenciaValencia 46022Spain

Enriched environments in animal models have demonstrated that exposure to an optimal stimulus improves behavior,cognition,and genomics.However,the evidence base for the neurophysiological influence of human environment enrichment has not been extensively studied.This systematic review compiles indicators about the effect of built,indoor environments on the cognitive processes of memory and attention in humans.This work pursues two main objectives:(1)to define current knowledge and the methods that are useful and identify whether previously published studies indicate consistencies and(2)to report the approaches and strategies that can be used in evaluating cognitive processes affected by environment response.Results of this systematic review show that(1)form and geometry,(2)space distribution and context,(3)color and texture,(4)height,width,and enclosure,(5)transition and circulation,and(6)light,sound,and temperature have an impact on memory and/or attention,and they can be assessed objectively.Despite all the advances in this field,methodological limitations and a lack of cross-validated standard protocols are found.Therefore,future research is necessary to provide a deep insight into how human cognition can be heightened by the environment to which it is exposed.

关键词： Built environment neuroarchitecture Cognition Attention Memory Learning spaces

Early life investment in antlers and body growth reflects adult performance in roe deer population under supplementary feeding conditions

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Integrative Zoology 2022年第3期17卷 396-407页

作者： Marta PELÁEZ Isabel SAnUY juan Carlos PERAL JoséLuisÁlvarez ESTEBAn Santiago LAVÍn Emmanuel SERRAnO ramón PEREA Departamento de Sistemas y Recursos naturales Universidad Politécnica de MadridMadridSpain Wildlife Ecology&Health group(WE&H)and Servei d’Ecopatologia de Fauna Salvatge(SEFaS).Facultat de Veterinària Universitat Autònoma de Barcelona(UAB)BarcelonaSpain Centro Cinegético I+D de Valsemana Junta de Castilla y LeónLa ErcinaLeónSpain

Recent research has challenged the idea that cervid antlers are such costly traits,supporting the assertion early-life antler investment is an honest signal of adult phenotypic quality.However,inferences were made based on antler measurements while growing(velvet)and thus,studies on fully-formed clean antlers are needed to avoid possible bias caused by the inter-individual variation in antler growth phenology.We studied a semi-captive population of European roe deer inhabiting a sub-Mediterranean area(Valsemana research station)and living under optimal conditions(ad libitum food supply and veterinary care).Based on repeated measurements taken from 146 individuals,we assessed whether allocation to secondary sexual traits during early life affected body mass or antler development during adulthood.Furthermore,we evaluated which body measurements better predicted future male quality.Additionally,using 488 individuals,we described age-class-specific variation in male body measurements and assessed the decline in antler size between adult and senescent stages(i.***.magnitude of senescence).Results agree with the assertion that there is no negative effect of a high investment in antler during early life on adult antler size or body mass,but we suggest the use of clean antlers as a more robust and reliable measure.The variables that better predicted body mass during adulthood were yearling body mass and body size at 6 months.Antler score between 10 and 18 months resulted in the best indicator of adult antler size.Finally,we support the idea that the magnitude of senescence in antler size is smaller in environments with higher resource availability during winter.

关键词： antler size body mass early-life investment Mediterranean environments secondary sexual traits and senescence trade-offs

Ectopic papilla of Vater in the pylorus

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

World Journal of Gastroenterology 2009年第41期15卷 5221-5223页

作者： Iván Guerra Luis ramón Rábago Fernando bermejo Elvira Quintanilla Silvia García-Garzón Gastroenterology Service University Hospital Severo Ochoa Leganés 28911 Madrid Spain

The major papilla of Vater is usually located in the second portion of the duodenum, to the posterior medial wall. Sometimes the mouth of the biliary duct is located in other areas. Drainage of the common bile duct into the pylorus is extremely rare. A 73-year old man, with a history of duodenal ulcer, was admitted to hospital with the diagnosis of cholangitis. Dilatation of the extrahepatic biliary duct was observed by abdominal ultrasonography, and endoscopic retrograde cholangiopancreatography (ERCP) was performed. no area suggesting the presence of the papilla of Vater was found within the second duodenal portion. Finally the major papilla was located in the theoretical pyloric duct. Cholangiography was performed and choledocholithiasis was found in the biliary tree. The patient underwent dilatation of the papilla with a balloon tyre and removal of a 7 mm stone using a Dormia basket, which solved the problem without further complications. This anomaly increased the difficulty of performing therapeutic interventions during ERCP. This alteration in anatomy may increase the risk of complications during papillotomy, with a theoretically higher risk of perforation. Dilatation using a balloon was the chosen therapeutic technique both in our case and in the literature, due to its low rate of complications.

关键词：乳头幽门十二指肠正常现象并发症胆管气球治疗