Bad and good news about using software assurance tools

Software assurance tools – tools that scan the source or binary code of a program to find weaknesses – are the first line of defense in assessing the security of a software project. Even though there are a plethora of such tools available, with multiple tools for almost every programming language, adoption of these tools is spotty at best. And even though different tools have distinct abilities to find different kinds of weaknesses, the use of multiple tools is even less common. And when the tools are used (or attempted to be used), they are often used in ways that reduce their effectiveness. We present a step‐by‐step discussion of how to use a software assurance tool, describing the challenges that can occur in this process. We also present quantitative evidence about the effects that can occur when assurance tools are applied in a simplistic or naive way. We base this presentation on our direct experiences with using a wide variety of assurance tools. We then present the US Department of Homeland Security funded Software Assurance Marketplace (SWAMP), an open facility where users can upload their software to have it automatically and continually assessed by a variety of tools. The goal of the SWAMP is to simplify the task of the programmer in using assurance tools, thereby removing many of the obstacles to their adoption. Copyright © 2016 The Authors. Software: Practice and Experience Published by John Wiley & Sons, Ltd.     

Modification of isotactic polypropylene by the free‐radical grafting of 1,1,1‐trimethylolpropane trimethacrylate

The chemical modification of isotactic polypropylene was performed by the free‐radical‐promoted grafting of 1,1,1‐trimethylolpropane trimethacrylate (TMPTMA) in the presence of dicumyl peroxide (DCP) as the initiator. The reaction was carried out both in a batch internal mixer and in a corotating twin‐screw extruder; the effects of the peroxide and monomer concentrations on the extent of modification in terms of the grafting efficiency and polymer chain structure variations were investigated. The modified samples were characterized with Fourier transform infrared to determine the structure of the grafted groups and the degree of functionalization, with gel permeation chromatography and the melt flow index to evaluate changes in the molecular weight, and with differential scanning calorimetry, thermogravimetric analysis, and dynamic mechanical thermal analysis to measure the final thermal properties. In addition, solvent extraction with xylene was performed to highlight the presence of gel and its extent. The structure of the grafted groups was determined, and the number of grafted groups was quantitatively evaluated. The degree of functionalization increased with an increasing TMPTMA/DCP molar ratio. Thermal analysis results hinted at the presence of grafted chains with an increased percentage of TMPTMA. Although degradation reactions predominated at high amounts of peroxide, grafting and branching processes became competitive at high levels of TMPTMA. The balance between competing β‐scission and grafting/branching reactions could be adjusted on the basis of feed conditions. © 2007 Wiley Periodicals, Inc. J Appl Polym Sci 104: 950–958, 2007     

A composite high-frame-rate system for clinical cardiovascular imaging

High frame-rate ultrasound RF data acquisition has been proved to be critical for novel cardiovascular imaging techniques, such as high-precision myocardial elastography, pulse wave imaging (PWI), and electromechanical wave imaging (EWI). To overcome the frame-rate limitations on standard clinical ultrasound systems, we developed an automated method for multi-sector ultrasound imaging through retrospective electrocardiogram (ECG) gating on a clinically used open architecture system. The method achieved both high spatial (64 beam density) and high temporal resolution (frame rate of 481 Hz) at an imaging depth up to 11 cm and a 100% field of view in a single breath-hold duration. Full-view imaging of the left ventricle and the abdominal aorta of healthy human subjects was performed using the proposed technique in vivo. ECG and ultrasound RF signals were simultaneously acquired on a personal computer (PC). Composite, full-view frames both in RF- and B-mode were reconstructed through retrospective combination of seven small (20%) juxtaposed sectors using an ECG-gating technique. The axial displacement of the left ventricle, in both long-axis and short-axis views, and that of the abdominal aorta, in a long-axis view, were estimated using a RF-based speckle tracking technique. The electromechanical wave and the pulse wave propagation were imaged in a cineloop using the proposed imaging technique. Abnormal patterns of such wave propagation can serve as indicators of early cardiovascular disease. This clinical system could thus expand the range of applications in cardiovascular elasticity imaging for quantitative, noninvasive diagnosis of myocardial ischemia or infarction, arrhythmia, abdominal aortic aneurysms, and early-stage atherosclerosis.     

Muscle lysyl oxidase activity and structural/thermal properties of highly cross-linked collagen in jumbo squid (<Emphasis Type="Italic">Dosidicus gigas</Emphasis>) mantle,fins and arms

Muscle from mantle, fins and arms of squid (Dosidicus gigas) were compared based on lysyl oxidase activity (LOX), chemical/structural and thermodynamic properties of highly cross-linked collagen. The arms collagen presented the highest temperature (Tp) and enthalpy of transition. The arms collagen thermic properties may be explained by the higher imino amino acid content, proline and lysine hydroxylation degrees. Moreover, among the regions, the collagen from the arms had a more intense β band chain, hydroxymerodesmosine peak in the resonance magnetic nuclear spectra and pyridinoline peak in the Raman spectra. Fins showed the highest LOX activity. The LOX activity was associated with the Tp, proline and lysine hydroxylation degrees. These results implied that the collagen in the arms was more intermolecularly ordered than the mantle and fins, and may provide a theoretical basis for a better understanding of the thermal behaviour of squid tissues during management and processing.     

Retinal blood vessel segmentation using line operators and support vector classification

In the framework of computer-aided diagnosis of eye diseases, retinal vessel segmentation based on line operators is proposed. A line detector, previously used in mammography, is applied to the green channel of the retinal image. It is based on the evaluation of the average grey level along lines of fixed length passing through the target pixel at different orientations. Two segmentation methods are considered. The first uses the basic line detector whose response is thresholded to obtain unsupervised pixel classification. As a further development, we employ two orthogonal line detectors along with the grey level of the target pixel to construct a feature vector for supervised classification using a support vector machine. The effectiveness of both methods is demonstrated through receiver operating characteristic analysis on two publicly available databases of color fundus images.     

Theoretical quality assessment of myocardial elastography with in vivo validation

Myocardial elastography (ME), a radio frequency (RF)-based speckle tracking technique with one-dimensional (1-D) cross correlation and novel recorrelation methods in a 2-D search was proposed to estimate and fully image 2-D transmural deformation field and to detect abnormal cardiac function. A theoretical framework was first developed in order to evaluate the performance of 2-D myocardial elastography based on a previously developed 3-D finite-element model of the canine left ventricle. A normal (control) and an ischemic (left-circumflex, LCx) model, which more completely represented myocardial deformation than a kinematic model, were considered. A 2-D convolutional image formation model was first used to generate RF signals for quality assessment of ME in the normal and ischemic cases. A 3-D image formation model was further developed to investigate the effect of the out-of-plane motion on the 2-D, in-plane motion estimation. Both orthogonal, in-plane displacement components (i.e., lateral and axial) between consecutive RF frames were iteratively estimated. All the estimated incremental 2-D displacements from end-diastole (ED) to end-systole (ES) were then accumulated to acquire the cumulative 2-D displacements, which were further used to calculate the cumulative 2-D systolic finite strains. Furthermore, the cumulative systolic radial and circumferential strains, which were angle- and frame-rate independent, were obtained from the 2-D finite-strain components and imaged in full view to detect the ischemic region. We also explored the theoretical understanding of the limitations of our technique for the accurate depiction of disease and validated it in vivo against tagged magnetic resonance imaging (tMRI) in the case of a normal human myocardium in a 2-D short-axis (SA) echocardiographic view. The theoretical framework succeeded in demonstrating that the 2-D myocardial elastography technique was a reliable tool for the complete estimation and depiction of the in-plane myocardial deformation field as well as for accurate identification of pathological mechanical function using established finite-element, left-ventricular canine models. In a preliminary study, the 2-D myocardial elastography was shown capable of imaging myocardial deformation comparable to equivalent tMRI estimates in a clinical setting.