OARS - Open Access Repository Suffolk
Not a member yet
2007 research outputs found
Sort by
Economic crisis and tourism marketing on small islands: the case of Zante”
The abstract focuses on the impact of recession on tourists’ decisions and destination marketing in small islands, with special reference to Zante. It uses a Structural Equation Model (SEM) in order to investigate the formulation of visitation tourist decisions on the island of Zante. The study provides constructive knowledge for the stakeholders involved on the formulation of tourist decision-making as well as for the relevant scientific research, whilst highlighting the importance of marketing activities in tourism destination development
Post-menopausal careers: what happens next?
While supporting menopausal women at work is crucial, less has been explored on post-menopausal careers, or what happens after the menopause. This article shares findings from a study that asks the question what happens next
FOR FOLKS SAKE-Video installation
FOR FOLK SAKE at The Cut is the debut curatorial endeavour by artists Rebecca Riess and Alexander Costello, with selected work by 34 artists, including established household names and national award winners alongside unrepresented artists, and artists working under the radar.
Susan Barnet exhibited a new video installation presenting a distorted version of the natural world. A digitally manipulated image of cherry blossom branch emerges from across the room where a video projector sits nestled among tree branches. This is accompanied by a dynamic sound track of electrostatic interference.
FFS is an exhibition and curatorial concept deliberately pulling together work by artists from across the breadth and depth of Suffolk, from Lowestoft to Leiston, Saxmundham to Sudbury, Diss and everywhere in between, as a means to link up, unite and celebrate the dynamic and diverse artist practices that populate and lift the cultural landscape of the county, all under one roof
Behind the code: identifying zero-day exploits in WordPress
The rising awareness of cybersecurity among governments and the public underscores the importance of effectively managing security incidents, especially zero-day attacks that exploit previously unknown software vulnerabilities. These zero-day attacks are particularly challenging because they exploit flaws that neither the public nor developers are aware of. In our study, we focused on dynamic application security testing (DAST) to investigate cross-site scripting (XSS) attacks. We closely examined 23 popular WordPress plugins, especially those requiring user or admin interactions, as these are frequent targets for XSS attacks. Our testing uncovered previously unknown zero-day vulnerabilities in three of these plugins. Through controlled environment testing, we accurately identified and thoroughly analyzed these XSS vulnerabilities, revealing their mechanisms, potential impacts, and the conditions under which they could be exploited. One of the most concerning findings was the potential for admin-side attacks, which could lead to multi-site insider threats. Specifically, we found vulnerabilities that allow for the insertion of malicious scripts, creating backdoors that unauthorized users can exploit. We demonstrated the severity of these vulnerabilities by employing a keylogger-based attack vector capable of silently capturing and extracting user data from the compromised plugins. Additionally, we tested a zero-click download strategy, allowing malware to be delivered without any user interaction, further highlighting the risks posed by these vulnerabilities. The National Institute of Standards and Technology (NIST) recognized these vulnerabilities and assigned them CVE numbers: CVE-2023-5119 for the Forminator plugin, CVE-2023-5228 for user registration and contact form issues, and CVE-2023-5955 for another critical plugin flaw. Our study emphasizes the critical importance of proactive security measures, such as rigorous input validation, regular security testing, and timely updates, to mitigate the risks posed by zero-day vulnerabilities. It also highlights the need for developers and administrators to stay vigilant and adopt strong security practices to defend against evolving threats
Wireless fit for the internet of things
It is common to see Internet of Things (IoT) growth forecasts spanning 30-60bn ‘Things’ by 2030. However, given the range of maturing technologies coming to market, the demands of Industry 4.0, limited material supplies stressed logistic chains, and growing populations, this is likely to be a
gross underestimate