Hardcoded vulnerability detection approach for IoT device firmware by Chao MU, Xin WANG, Ming YANG, Heng ZHANG, Zhenya CHEN, Xiaoming WU

“…With the popularization of IoT devices, more and more valuable data is generated.Analyzing and mining big data based on IoT devices has become a hot topic in the academic and industrial circles in recent years.However, due to the lack of necessary detection and protection methods, many IoT devices have serious information security risks.In particular, device hard-coded information is closely related to system encryption and decryption, identity authentication and other functions, which can provide confidentiality protection for core data.Once this information is exploited by malicious attackers, serious consequences such as sensitive information leakage, backdoor attacks, and unauthorized logins will occur.In response to this problem, a multi-type character recognition and positioning scheme was designed and a hard-coded vulnerability detection method in executable files was proposed based on the study of the characteristics of hard-coded vulnerabilities in IoT devices.The proposed method extracted the firmware of IoT devices and filtered all executable files as the source to be analyzed.Then, a solution to identify and locate three types of hard-coded characters was provided.Further, the reachability of the function, where the hard-coded character was located, was analyzed according to the function call relationship.Meanwhile, the instruction heterogeneity was mitigated by an intermediate representation (IR) model.The character and parameter hard-coded values was obtained through a data flow analysis approach.A symbolic execution method was devised to determine the trigger conditions of the hard-coded vulnerabilities, and then the vulnerability detection result was output.On the one hand, the proposed method introduced the method of symbolic execution based on the use of the intermediate representation model, which eliminated the dependency of instruction architecture and reduces the false positive rate of vulnerabilities; On the other hand, this method can integrate characters, files, and cryptographic implementation to realize the different characteristics of three types of hard-coded characters, which increased the coverage of vulnerability detection and improves the versatility of the detection method.The experimental results show that the proposed method can effectively detect three types of hard-coded vulnerabilities of characters, files and cryptographic implementation in various IoT devices, and has good detection accuracy, which can provide certain guidance for the deployment of subsequent security protection technologies.…”
Get full text

Advanced Nanoscale Functionalities for Water and Energy Technologies by Zhi Xu, Nan Wu, Soufiane Abdelghani‐Idrissi, Corentin Trégouët, Javier Perez‐Carvajal, Annie Colin, Ming Ma, Antoine Niguès, Alessandro Siria

Get full text

A Hybrid Decision-Making Model for Optimal Portfolio Selection under Interval Uncertainty by Mohsen Zahmati Iraj, Meysam Doaei

Get full text

Bias‐Independent True Random Number Generator Circuit using Memristor Noise Signals as Entropy Source by Jinwoo Park, Hyunjoong Kim, Hyungjin Kim

“…Finally, the performance of the designed TRNG circuit is evaluated using autocorrelation functions and National Institute of Standards and Technology tests, confirming its capability to produce random number bitstreams.…”
Get full text

Near extinction of the HBV quasispecies driven by the hard selective sweep in chronic hepatitis B by Daiqiang Lu, Andong He, Guichan Liao, Renyu Zhou, Zichun Cheng, Ka Cheuk Yip, Xiufang Wang, Wei Cao, Jiaojiao Peng, Ruiman Li, Jie Peng, Feng Gao

“…The nearly identical viral population suggests that all these viruses are from a single source. Predominant mutations were identified in known T cell epitopes but not in epitopes for neutralizing antibodies, indicating that the hard selective sweep is most likely driven by T cell selection pressure. …”
Get full text

The Impact of Servant Leadership on Employee Career Success in Selected Sub-Saharan African Countries by Jean Claude Kanyabwira, Portia Bilankulu

“…We tested our model using a sample of 610 leaders across 18 industries and 21 job functions who participated in a leadership development program in selected Sub-Saharan African countries. …”
Get full text

Business awareness in the management of a modern organisation regarding the usage of selected information technologies by Filip Rembisz, Piotr Zaskórski

“…Implications for theory and practice The article presents not only aspects related to the functioning of a modern organization but also the possibilities of using selected IT solutions in this aspect. …”
Get full text

Signatures of positive selection for local adaptation of African native cattle populations: A review by Wondossen AYALEW, Xiao-yun WU, Getinet Mekuriaw TAREKEGN, Min CHU, Chun-nian LIANG, Tesfaye SISAY TESSEMA, Ping YAN

“…It has played a crucial role in providing valuable protein for billions of households and sources of income and employment for producers and other actors in the livestock value chains. …”
Get full text

Identification of positive selection signatures associated with milk and composition traits in Murciano-Granadina and Barki by Hossein Mohammadi, amir hossien khaltabadi farahani, Mohammad Hossein Moradi

Get full text

Educational content selection in human rights education at the early childhood education and care level by Anette Ringen Rosenberg

“…It aims to discuss the function of four content selection dimensions for discussing HRE content at the ECEC level. …”
Get full text

Exploration of crop germplasm resources knowledge mining in Chinese ancient books: a route toward sustainable agriculture by Wenjuan Zhao, Suoling Zhu, Yuan Cao

“…Using the local chronicles of Jiangsu Province, China (1251–1947) as the data source, we constructed a spatio-temporal ontology of rice species according to the writing paradigm of descriptive texts on rice, intelligently extracted the features of rice with entity word lists and rule templates, and compared them with existing rice germplasm resources to analyze the similarities and differences. …”
Get full text

Client Selection for Generalization in Accelerated Federated Learning: A Multi-Armed Bandit Approach by Dan Ben Ami, Kobi Cohen, Qing Zhao

“…It has attracted a growing interest in recent years due to its advantages in terms of privacy considerations, and communication resources. In FL, selected clients train their local models and send a function of the models to the server, which consumes a random processing and transmission time. …”
Get full text

Merging Surface Plasmon Optical Detection with Electronic Sensing by Wolfgang Knoll

Get full text

Actualization of color lexicon functions in economic discourse by T. V. Andryukhina

“…The material of the study comprises examples of color lexicon use selected from modern English-language media texts and materials of Internet resources with economic content. …”
Get full text

Image Processing for Laser Impact Detection in Shooting Simulators by José Antonio García Torres, Daniel Guzmán Pérez, Jhon Fredy Rincón Morantes, Daniel Felipe Molina Martínez, Cristian Camilo García Rodríguez, Jhonnatan Eduardo Zamudio Palacios

“…Moreover, wired setups limit their use in outdoor environments due to the lack of access to a power source. This study developed an image-processing-based method to replace live ammunition with a laser-emitting device. …”
Get full text

An AI-Based Open-Source Software for <i>Varroa</i> Mite Fall Analysis in Honeybee Colonies by Jesús Yániz, Matías Casalongue, Francisco Javier Martinez-de-Pison, Miguel Angel Silvestre, Beeguards Consortium, Pilar Santolaria, Jose Divasón

Get full text

High-Quality and Enhanced-Resolution Single-Pixel Imaging Based on Spiral Line Array Laser Source by Guozhong Lei, Haolong Jia, Wenchang Lai, Wenhui Wang, Wenda Cui, Yan Wang, Hao Liu, Kai Han

“…We propose a spiral line array laser source which can generate random illumination light fields without periodicity in the normalized second-order correlation function <italic>g</italic>⁽²⁾. …”
Get full text

Distributed Decision Making for Electromagnetic Radiation Source Localization Using Multi-Agent Deep Reinforcement Learning by Jiteng Chen, Zehui Zhang, Dan Fan, Chaoqun Hou, Yue Zhang, Teng Hou, Xiangni Zou, Jun Zhao

“…The detection and localization of radiation sources in urban areas present significant challenges in electromagnetic spectrum operations, particularly with the proliferation of small UAVs. …”
Get full text

Characteristics, Distribution, and Source Analysis of the Main Persistent Toxic Substances in Karst Groundwater at Jinan in North China by Hao Shang, Xiaofan Qi, Mengnan Zhang, Hu Li, Gang Li, Lizhi Yang

“…Karst water in northern China is an important water source for economic and social development in its distribution area and water source for ecological function guarantee. …”
Get full text

BASSET: Bandpass-adaptive Single-pulse Search Toolkit—Optimized Subband Pulse Search Strategies for Faint Narrowband Fast Radio Bursts by J. H Cao, P. Wang, D. Li, Q. H. Pan, K. Mao, C. H. Niu, Y. K. Zhang, Q. Y. Qu, W. J. Lu, J. S. Zhang, Y. H. Zhu, Y. D. Wang, H. X. Chen, X. L. Chen, J. H. Fang, Y. Feng, H. Gao, Y. F. Huang, J. Li, C. C. Miao, C. W. Tsai, J. M. Yao, S. P. You, R. S. Zhao, Q. Z. Liu, S. M. Weng, S. H. Yew, J. Zhang, L. Zhang, E. Gügercinoğlu, D. K. Zhou, W. W. Zhu

Get full text