检索结果-南通市图书馆

Computers, Materials & Continua 2020年第9期64卷 1555-1577页

作者： Juan R.bermejo higuera javier bermejo higuera Juan A.Sicilia Montalvo javier Cubo Villalba Juan JoséNombela Pérez Escuela Superior de Ingeniería y Tecnología Universidad Internacional de La RiojaLa Rioja26006Spain

To detect security vulnerabilities in a web application,the security analyst must choose the best performance Security Analysis Static Tool(SAST)in terms of discovering the greatest number of security vulnerabilities as *** compare static analysis tools for web applications,an adapted benchmark to the vulnerability categories included in the known standard Open Web Application Security Project(OWASP)Top Ten project is *** information of the security effectiveness of a commercial static analysis tool is not usually a publicly accessible research and the state of the art on static security tool analyzers shows that the different design and implementation of those tools has different effectiveness rates in terms of security *** the significant cost of commercial tools,this paper studies the performance of seven static tools using a new methodology proposal and a new benchmark designed for vulnerability categories included in the known standard OWASP Top Ten ***,the practitioners will have more precise information to select the best tool using a benchmark adapted to the last versions of OWASP Top Ten *** results of this work have been obtaining using widely acceptable metrics to classify them according to three different degree of web application criticality.

关键词： Web application benchmark security vulnerability Security Analysis Static Tools assessment methodology false positive false negative precision f-measure

Hybrid Security Assessment Methodology for Web Applications

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2021年第1期126卷 89-124页

作者： Roddy A.Correa Juan Ramon bermejo higuera javier bermejo higuera Juan Antonio SiciliaMontalvo Manuel Sanchez Rubio A.Alberto Magrenan Universidad Tecnica Particular de Loja San Cayetano AltoLojaEcuador Escuela Superior de Ingenieria y Tecnologia Universidad Internacional de La RiojaLogrono26006Spain Universidad de la Rioja Logrono26006Spain

This study presents a methodology to evaluate and prevent security vulnerabilities issues for web *** analysis process is based on the use of techniques and tools that allow to perform security assessments of white box and black box,to carry out the security validation of a web application in an agile and precise *** objective of the methodology is to take advantage of the synergies of semi-automatic static and dynamic security analysis tools and manual *** one of the phases contemplated in the methodology is supported by security analysis tools of different degrees of coverage,so that the results generated in one phase are used as feed for the following phases in order to get an optimized global security analysis *** methodology can be used as part of other more general methodologies that do not cover how to use static and dynamic analysis tools in the implementation and testing phases of a Secure Software Development Life Cycle(SSDLC).A practical application of the methodology to analyze the security of a real web application demonstrates its effectiveness by obtaining a better optimized vulnerability detection result against the true and false positive *** analysis with manual checking is used to audit the results,24.6 per cent of security vulnerabilities reported by the static analysis has been checked and it allows to study which vulnerabilities can be directly exploited *** phase is very important because it permits that each reported vulnerability can be checked by a dynamic second tool to confirm whether a vulnerability is true or false positive and it allows to study which vulnerabilities can be directly exploited *** analysis finds six(6)additional critical *** control analysis finds other five(5)important vulnerabilities such as Insufficient Protected Passwords or Weak Password Policy and Excessive Authentication Attacks,two vulnerabilities that permit brute force at

关键词： Web applications security vulnerability weakness security analysis white box black box interactive application security testing static application security testing dynamic application security testing

MMALE—A Methodology for Malware Analysis in Linux Environments

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2021年第5期67卷 1447-1469页

作者： Joséjavier de Vicente Mohino javier bermejo higuera Juan Ramón bermejo higuera Juan Antonio Sicilia Montalvo Manuel Sánchez Rubio Joséjavier Martínez Herraiz Escuela Superior de Ingeniería y Tecnología Universidad Internacional de La RiojaLogroño26006La RiojaSpain Departamento de Ciencias de la Computación de la Escuela Politécnica Superior Universidad de Alcaláde HenaresAlcaláde HenaresMadridSpain

In a computer environment,an operating system is prone to malware,and even the Linux operating system is not an *** recent years,malware has evolved,and attackers have become more qualified compared to a few years ***,Linux-based systems have become more attractive to cybercriminals because of the increasing use of the Linux operating system in web servers and Internet of Things(IoT)*** is the most employed OS,so most of the research efforts have been focused on its malware protection rather than on other operating *** a result,hundreds of research articles,documents,and methodologies dedicated to malware analysis have been ***,there has not been much literature concerning Linux security and protection from *** address all these new challenges,it is necessary to develop a methodology that can standardize the required steps to perform the malware analysis in depth.A systematic analysis process makes the difference between good and ordinary malware ***,a deep malware comprehension can yield a faster and much more efficient malware *** order to address all mentioned challenges,this article proposed a methodology for malware analysis in the Linux operating system,which is a traditionally overlooked field compared to the other operating *** proposed methodology is tested by a specific Linux malware,and the obtained test results have high effectiveness in malware detection.

关键词： Malware analysis methodology analysis Linux malware IoT malware

Combinatorial Method with Static Analysis for Source Code Security in Web Applications

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2021年第11期129卷 541-565页

作者： Juan Ramon bermejo higuera javier bermejo higuera Juan Antonio Sicilia Montalvo Tomas Sureda Riera Christopher I.Argyros A.Alberto Magrenan Escuela Superior de Ingenierıa y Tecnologıa Universidad Internacional de La RiojaLogronoLa Rioja26006Spain Computer Science Department University of AlcalaMadrid28801Spain Department of Computing and Technology Cameron UniversityLawton73505OklahomaUSA Universidad de la Rioja LogronoLa Rioja26006Spain

Security weaknesses in web applications deployed in cloud architectures can seriously affect its data confidentiality and *** construction of the procedure utilized in the static analysis tools of source code security differs and therefore each tool finds a different number of each weakness type for which it is *** utilize the possible synergies different static analysis tools may process,this work uses a new method to combine several source codes aiming to investigate how to increase the performance of security weakness detection while reducing the number of false ***,five static analysis tools will be combined with the designed method to study their behavior using an updated benchmark for OWASP Top Ten Security Weaknesses(OWASP TTSW).The method selects specific metrics to rank the tools for different criticality levels of web applications considering different weights in the *** findings show that simply including more tools in a combination is not synonymous with better results;it depends on the specific tools included in the combination due to their different designs and techniques.

关键词： Weakness benchmark security testing analysis comparative methodology tools combination web application

Origin of nucleation and growth of extension twins in grains unsuitably oriented for twinning during deformation of Mg-1%Al

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Magnesium and Alloys 2024年第3期12卷 1186-1203页

作者： Biaobiao Yang javier LLorca IMDEA Materials Institute C/Eric Kandel 2GetafeMadrid 28906Spain Department of Materials Science Polytechnic University of Madrid/Universidad Politécnica de MadridE.T.S.de Ingenieros de CaminosMadrid 28040Spain

A large number of anomalous extension twins,with low or even negative twinning Schmid factors,were found to nucleate and grow in a strongly textured Mg-1Al alloy during tensile deformation along the extruded *** deformation mechanisms responsible for this behaviour were investigated through in-situ electron back-scattered diffraction,grain reference orientation deviation,and slip trace-modified lattice *** was found that anomalous extension twins nucleated mainly at the onset of plastic deformation at or near grain boundary triple *** were associated with the severe strain incompatibility between neighbour grains as a result from the differentbasal slip-induced lattice ***,the anomalous twins were able to grow with the applied strain due to the continuous activation ofbasal slip in different neighbour grains,which enhanced the strain *** results reveal the complexity of the deformation mechanisms in Mg alloys at the local level when deformed along hard orientations.

关键词： Magnesium Extension twinning In-situ electron back-scattered diffraction basal slip Deformation mechanisms.

Contributions to the knowledge of Antarctodon sobrali(Mammalia:Astrapotheria)from the Eocene of Antarctica

在线全文

学校读者我要写书评

暂无评论

Advances in Polar Science 2024年第1期35卷 48-62页

作者： javier N.GELFO Consejo Nacional de Investigaciones Científicasy Técnicas(CONICET) Buenos Aires C1425FQBArgentina División Paleontología Vertebrados Museo de La PlataFacultad de Ciencias Naturales y Museo de La PlataUniversidad Nacional de La PlataLa Plata B1900FWAArgentina

The Astrapotheria constitutes one of the five orders of extinct South American native ungulates,with a fossil record that also extends to the Eocene of the Antarctic *** contrast to the abundant specimens known for litoptern Sparnotheriodontidae and metatherians,astrapotheres are represented by scant remains assigned to the endemic Antarctodon sobrali and indeterminate astrapotheres,restricted to levels 35C_(u0)and 35n of the Cucullaea I Allomember of the La Meseta *** discovery of alower molar assignable to this species in the Eocene levels of Seymour(Marambio)Island,enables a revision of the diagnosis and the homologies of the dental characters used to describe this taxon.A reanalysis of its phylogenetic relationships reveals the nearly simultaneous presence of basal astrapotheres in the early Eocene of Itaboraí(Brazil),Patagonia,and West *** taxa are characterized by lacking dental specializations usually associated with more abrasive diets like terminal forms of Uruguaytheriinae and *** appears to have thrived on the Antarctic continent during the Early Eocene Climatic Optimum within the paleoclimatic context of a hot-house *** present conditions in Antarctica where no terrestrial mammals inhabit,the early Eocene climate was characterized by warmer temperatures and a biologically diverse environment rich in primary producers,dominated by Nothofagus forests,encompassing both deciduous and evergreen forests,which supported a diverse assemblage of continental vertebrates.

关键词： Astrapotheria Antarctodon Eocene Seymour Island La Meseta Formation

同方期刊数据库

From the mathematical model to the patient: The scientific and human aspects of artificial intelligence in gastrointestinal surgery

在线全文

学校读者我要写书评

暂无评论

World Journal of Gastrointestinal Surgery 2024年第6期16卷 1517-1520页

作者： javier Arredondo Montero Department of Pediatric Surgery Complejo Asistencial Universitario de LeónCastilla y LeónLeón 24008Spain

Recent medical literature shows that the application of artificial intelligence(AI)models in gastrointestinal pathology is an exponentially growing field,with pro-mising models that show very high *** inflammatory bowel disease(IBD),recent reviews demonstrate promising diagnostic and prognostic AI ***,studies are generally at high risk of bias(especially in AI models that are image-based).The creation of specific AI models that improve diagnostic performance and allow the establishment of a general prognostic fo-recast in IBD is of great interest,as it may allow the stratification of patients into subgroups and,in turn,allow the creation of different diagnostic and therapeutic protocols for these *** surgical models,predictive models of post-operative complications have shown great potential in large-scale *** this work,the authors present the development of a predictive algorithm for early post-surgical complications in Crohn's disease based on a Random Forest model with exceptional predictive ability for complications within the *** pre-sent work,based on logical and reasoned,clinical,and applicable aspects,lays a solid foundation for future prospective work to further develop post-surgical prognostic tools for *** next step is to develop in a prospective and mul-ticenter way,a collaborative path to optimize this line of research and make it applicable to our patients.

关键词： Survivor bias Data analysis Machine learning Ethics Critical thinking Postsurgical Complications Inflammatory bowel disease Gastrointestinal surgery

Reachability-Based Confidence-Aware Probabilistic Collision Detection in Highway Driving

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Engineering 2024年第2期33卷 90-107页

作者： Xinwei Wang Zirui Li javier Alonso-Mora Meng Wang School of Engineering and Materials Science Queen Mary University of LondonLondon E14NSUK Department of Cognitive Robotics Delft University of TechnologyDelft 2628 CDNetherlands School of Mechanical Engineering Beijing Institute of TechnologyBeijing 100081China Chair of Traffic Process Automation “Friedrich List”Faculty of Transport and Traffic SciencesTU DresdenDresden 01069Germany

Risk assessment is a crucial component of collision warning and avoidance systems for intelligent ***-based formal approaches have been developed to ensure driving safety to accurately detect potential vehicle ***,they suffer from over-conservatism,potentially resulting in false–positive risk events in complicated real-world *** this paper,we combine two reachability analysis techniques,a backward reachable set(BRS)and a stochastic forward reachable set(FRS),and propose an integrated probabilistic collision–detection framework for highway *** this framework,we can first use a BRS to formally check whether a two-vehicle interaction is safe;otherwise,a prediction-based stochastic FRS is employed to estimate the collision probability at each future time ***,the framework can not only identify non-risky events with guaranteed safety but also provide accurate collision risk estimation in safety-critical *** construct the stochastic FRS,we develop a neural network-based acceleration model for surrounding vehicles and further incorporate a confidence-aware dynamic belief to improve the prediction *** experiments were conducted to validate the performance of the acceleration prediction model based on naturalistic highway driving *** efficiency and effectiveness of the framework with infused confidence beliefs were tested in both naturalistic and simulated highway *** proposed risk assessment framework is promising for real-world applications.

关键词： Probabilistic collision detection Confidence awareness Probabilistic acceleration prediction Reachability analysis Risk assessment

Characterization of conception drawing in architecture to face technological mediations

在线全文

学校读者我要写书评

暂无评论

Frontiers of Architectural Research 2024年第3期13卷 425-438页

作者： Hugo C.Gomez-Tone javier F.Raposo Grau Departamento de Ideación Gráfica Arquitectónica Universidad Politécnica de MadridMadrid 28040Spain Departamento de Arquitectura Universidad Nacional de San Agustín de ArequipaArequipa 04001Peru

The conception drawing in architecture is that allows to initiate the architectural thinking,visualizing,and discovering the first *** drawing has traditionally been given as an act of linking and collaboration between thought,sight,and the movement of the hands with a *** and recognizing its characteristics will make it possible to deal with any mediation of information *** establish such characteristics,three case studies were carried *** analysis was made of the conception drawings and interviews by the Pritzker Prize laureates:Ando,Hadid and *** condition and four characteristics have been determined:drawing is a phenomenological action that produces haptic drawings;it is an undecided process that originates unformed drawings;it is a fast action that results in small and multiplied drawings;it is a perceptual act that generates redrawn and remarked drawings;and finally,it is an action that seeks to remember to resume the creative process at another moment,which produces rudimentary conventional *** these before any technological mediation will be an important pedagogical contribution that will allow future architects not to alter the cognitive processes that generate the first ideas in the initial moments of the architectural project.

关键词： Conception drawing Architectural thinking Graphic ideation Concept Creativity

Astrocytes, reactive astrogliosis, and glial scar formation in traumatic brain injury

在线全文

学校读者我要写书评

暂无评论

Neural Regeneration Research 2025年第4期20卷 973-989页

作者： María Belén Cieri Alberto javier Ramos Laboratorio de Neuropatología Molecular IBCN UBA-CONICETFacultad de MedicinaUniversidad de Buenos AiresBuenos AiresArgentina

Traumatic brain injury is a global health crisis,causing significant death and disability *** that follows traumatic brain injury has serious consequences for neuronal survival and cognitive impairments,with astrocytes involved in this *** traumatic brain injury,astrocytes rapidly become reactive,and astrogliosis propagates from the injury core to distant brain *** astroglial proteins are downregulated near the traumatic brain injury core,while pro-inflammatory astroglial genes are *** altered gene expression is considered a pathological remodeling of astrocytes that produces serious consequences for neuronal survival and cognitive *** addition,glial scar formed by reactive astrocytes is initially necessary to limit immune cell infiltration,but in the long term impedes axonal reconnection and functional *** therapeutic strategies for traumatic brain injury are focused on preventing acute ***,cannabinoids,progesterone,beta-blockers,and cerebrolysin demonstrate neuroprotective benefits but most of them have not been studied in the context of *** this review,we discuss the cell signaling pathways activated in reactive astrocytes following traumatic brain injury and we discuss some of the potential new strategies aimed to modulate astroglial responses in traumatic brain injury,especially using cell-targeted strategies with miRNAs or lncRNA,viral vectors,and repurposed drugs.

关键词： astrocyte glial scar innate immunity neuroinflammation stab injury Toll-like receptors