Behavioral detection of malware: from a survey towards an established taxonomy

Behavioral detection differs from appearance detection in that it identifies the actions performed by the malware rather than syntactic markers. Identifying these malicious actions and interpreting their final purpose is a complex reasoning process. This paper draws up a survey of the different reasoning techniques deployed among the behavioral detectors. These detectors have been classified according to a new taxonomy introduced inside the paper. Strongly inspired from the domain of program testing, this taxonomy divides the behavioral detectors into two main families: simulation-based and formal detectors. Inside these families, ramifications are then derived according to the data collection mechanisms the data interpretation, the adopted model and its generation, and the decision support.     

Topology-controlled volume rendering

Topology provides a foundation for the development of mathematically sound tools for processing and exploration of scalar fields. Existing topology-based methods can be used to identify interesting features in volumetric data sets, to find seed sets for accelerated isosurface extraction, or to treat individual connected components as distinct entities for isosurfacing or interval volume rendering. We describe a framework for direct volume rendering based on segmenting a volume into regions of equivalent contour topology and applying separate transfer functions to each region. Each region corresponds to a branch of a hierarchical contour tree decomposition, and a separate transfer function can be defined for it. The novel contributions of our work are: 1) a volume rendering framework and interface where a unique transfer function can be assigned to each subvolume corresponding to a branch of the contour tree, 2) a runtime method for adjusting data values to reflect contour tree simplifications, 3) an efficient way of mapping a spatial location into the contour tree to determine the applicable transfer function, and 4) an algorithm for hardware-accelerated direct volume rendering that visualizes the contour tree-based segmentation at interactive frame rates using graphics processing units (GPUs) that support loops and conditional branches in fragment programs     

Phase relationships in the system Cr-W-O and thermodynamic properties of CrWO4 and Cr2WO6

The phase diagram of the Cr-W-O system at 1000° C was established by metallographic and X-ray identification of the phases present after equilibration in evacuated silica capsules. Two ternary oxide phases, CrWO₄ and Cr₂WO₆ were detected. The oxygen potential over the three-phase mixtures, W+Cr₂O₃ s+CrWO₄, WO_2.90+CrWO₄+Cr₂WO₆ and Cr₂O₃+CrWO₄+Cr₂WO₆, were measured by solid state cells incorporating Y₂O₃ stabilized ZrO₂ electrolyte and Ni+NiO reference electrode. The Gibbs' energies of formation of the two ternary phases can be represented by the following equations $$\begin{gathered} W(s) + \tfrac{1}{2} Cr_2 O_3 (s) + \tfrac{5}{4} O_2 (g) \to CrWO_4 (s) \hfill \\ \Delta G^0 = - 172 047 + 48.725T ( \pm 230) cal mol^{ - 1} \hfill \\ Cr_2 O_3 (s) + WO_3 (s) \to Cr_2 WO_6 (s) \hfill \\ \Delta G^0 = - 3 835 + 0.235{\rm T} ( \pm 500) cal mol^{ - 1} \hfill \\ \end{gathered}$$      

A single-solenoid pulsed-magnet system for single-crystal scattering studies

We present a pulsed-magnet system that enables x-ray single-crystal diffraction in addition to powder and spectroscopic studies with the magnetic field applied on or close to the scattering plane. The apparatus consists of a single large-bore solenoid, cooled by liquid nitrogen. A second independent closed-cycle cryostat is used for cooling samples near liquid helium temperatures. Pulsed magnetic fields close to ~30 T with a zero-to-peak-field rise time of ~2.9 ms are generated by discharging a 40 kJ capacitor bank into the magnet coil. The unique characteristic of this instrument is the preservation of maximum scattering angle (~23.6°) on the entrance and exit sides of the magnet bore by virtue of a novel double-funnel insert. This instrument will facilitate x-ray diffraction and spectroscopic studies that are impractical, if not impossible, to perform using split-pair and narrow-opening solenoid magnets. Furthermore, it offers a practical solution for preserving optical access in future higher-field pulsed magnets.     

An unsupervised data projection that preserves the cluster structure

In this paper we propose a new unsupervised dimensionality reduction algorithm that looks for a projection that optimally preserves the clustering data structure of the original space. Formally we attempt to find a projection that maximizes the mutual information between data points and clusters in the projected space. In order to compute the mutual information, we neither assume the data are given in terms of distributions nor impose any parametric model on the within-cluster distribution. Instead, we utilize a non-parametric estimation of the average cluster entropies and search for a linear projection and a clustering that maximizes the estimated mutual information between the projected data points and the clusters. The improved performance is demonstrated on both synthetic and real world examples.     

Standardisation of digital human models

Digital human models (DHM) have evolved as useful tools for ergonomic workplace design and product development, and found in various industries and education. DHM systems which dominate the market were developed for specific purposes and differ significantly, which is not only reflected in non-compatible results of DHM simulations, but also provoking misunderstanding of how DHM simulations relate to real world problems. While DHM developers are restricted by uncertainty about the user need and lack of model data related standards, users are confined to one specific product and cannot exchange results, or upgrade to another DHM system, as their previous results would be rendered worthless. Furthermore, origin and validity of anthropometric and biomechanical data is not transparent to the user. The lack of standardisation in DHM systems has become a major roadblock in further system development, affecting all stakeholders in the DHM industry. Evidently, a framework for standardising digital human models is necessary to overcome current obstructions. Practitioner Summary: This short communication addresses a standardisation issue for digital human models, which has been addressed at the International Ergonomics Association Technical Committee for Human Simulation and Virtual Environments. It is the outcome of a workshop at the DHM 2011 symposium in Lyon, which concluded steps towards DHM standardisation that need to be taken.     

Social class, child age, and parental socialization values.

Upper-, middle-, and lower-class parents were asked to explain a proverb which had both "growth" and "stability" interpretations to their 11- and 16-yr-old sons. The growth interpretation was overwhelmingly endorsed by most parents. With 16-yr-olds, lower-middle-class parents continued to endorse the growth interpretation; most upper-class parents endorsed the stability interpretation. (PsycINFO Database Record (c) 2010 APA, all rights reserved)     

Oxidative erosion of graphite in air between 600 and 1000 K

The oxidative erosion of seven types of graphite has been investigated by heating in air at temperatures between 600 and 1000 K. The specimens include pyrolytic graphite, fine-grain graphites, carbon-fibre composites (CFC), and graphites doped with Si and Ti. The weight loss was measured using a microbalance, the surface morphology by scanning electron microscopy, and the composition of the surface layer by MeV ion beam techniques. Pyrolytic graphite is least affected by erosion, while pure and Si-doped CFCs erode particularly fast. Typical erosion rates for specimens with a surface area of ?4 cm² are below 0.2 μg/m² s at 600 K for all graphite types, and at 900 K range from 0.34 mg/m² s for pyrolytic graphite to about 9 mg/m² s for the strongest eroding types. The temperature dependence of the erosion rate of all types of graphite studied is well described by an activation energy of 1.7 eV. The erosion rates of these graphites are by far lower than the removal rates for deposited amorphous hydrocarbon layers. In contrast to all other types, the Ti-doped graphite absorbs a significant amount of oxygen reaching up to ?5% of its original mass. Once the oxygen uptake is saturated, it erodes with rates similar to those of the strongest eroding types.     

An investigation of mating and population maintenance strategies in hybrid genetic heuristics for product line designs

This research builds on prior work on developing near optimal solutions to the product line design problems within the conjoint analysis framework. In this research, we investigate and compare different genetic algorithm operators; in particular, we examine systematically the impact of employing alternative population maintenance strategies and mutation techniques within our problem context. Two alternative population maintenance methods, that we term “Emigration” and “Malthusian” strategies, are deployed to govern how individual product lines in one generation are carried over to the next generation. We also allow for two different types of reproduction methods termed “Equal Opportunity” in which the parents to be paired for mating are selected with equal opportunity and a second based on always choosing the best string in the current generation as one of the parents which is referred to as the “Queen bee”, while the other parent is randomly selected from the set of parent strings. We also look at the impact of integrating the artificial intelligence approach with a traditional optimization approach by seeding the GA with solutions obtained from a Dynamic Programming heuristic proposed by others. A detailed statistical analysis is also carried out to determine the impact of various problem and technique aspects on multiple measures of performance through means of a Monte Carlo simulation study. Our results indicate that such proposed procedures are able to provide multiple “good” solutions. This provides more flexibility for the decision makers as they now have the opportunity to select from a number of very good product lines. The results obtained using our approaches are encouraging, with statistically significant improvements averaging 5% or more, when compared to the traditional benchmark of the heuristic dynamic programming technique.