9,675 research outputs found

    The Viability and Potential Consequences of IoT-Based Ransomware

    Get PDF
    With the increased threat of ransomware and the substantial growth of the Internet of Things (IoT) market, there is significant motivation for attackers to carry out IoT-based ransomware campaigns. In this thesis, the viability of such malware is tested. As part of this work, various techniques that could be used by ransomware developers to attack commercial IoT devices were explored. First, methods that attackers could use to communicate with the victim were examined, such that a ransom note was able to be reliably sent to a victim. Next, the viability of using "bricking" as a method of ransom was evaluated, such that devices could be remotely disabled unless the victim makes a payment to the attacker. Research was then performed to ascertain whether it was possible to remotely gain persistence on IoT devices, which would improve the efficacy of existing ransomware methods, and provide opportunities for more advanced ransomware to be created. Finally, after successfully identifying a number of persistence techniques, the viability of privacy-invasion based ransomware was analysed. For each assessed technique, proofs of concept were developed. A range of devices -- with various intended purposes, such as routers, cameras and phones -- were used to test the viability of these proofs of concept. To test communication hijacking, devices' "channels of communication" -- such as web services and embedded screens -- were identified, then hijacked to display custom ransom notes. During the analysis of bricking-based ransomware, a working proof of concept was created, which was then able to remotely brick five IoT devices. After analysing the storage design of an assortment of IoT devices, six different persistence techniques were identified, which were then successfully tested on four devices, such that malicious filesystem modifications would be retained after the device was rebooted. When researching privacy-invasion based ransomware, several methods were created to extract information from data sources that can be commonly found on IoT devices, such as nearby WiFi signals, images from cameras, or audio from microphones. These were successfully implemented in a test environment such that ransomable data could be extracted, processed, and stored for later use to blackmail the victim. Overall, IoT-based ransomware has not only been shown to be viable but also highly damaging to both IoT devices and their users. While the use of IoT-ransomware is still very uncommon "in the wild", the techniques demonstrated within this work highlight an urgent need to improve the security of IoT devices to avoid the risk of IoT-based ransomware causing havoc in our society. Finally, during the development of these proofs of concept, a number of potential countermeasures were identified, which can be used to limit the effectiveness of the attacking techniques discovered in this PhD research

    Quantifying and Explaining Machine Learning Uncertainty in Predictive Process Monitoring: An Operations Research Perspective

    Full text link
    This paper introduces a comprehensive, multi-stage machine learning methodology that effectively integrates information systems and artificial intelligence to enhance decision-making processes within the domain of operations research. The proposed framework adeptly addresses common limitations of existing solutions, such as the neglect of data-driven estimation for vital production parameters, exclusive generation of point forecasts without considering model uncertainty, and lacking explanations regarding the sources of such uncertainty. Our approach employs Quantile Regression Forests for generating interval predictions, alongside both local and global variants of SHapley Additive Explanations for the examined predictive process monitoring problem. The practical applicability of the proposed methodology is substantiated through a real-world production planning case study, emphasizing the potential of prescriptive analytics in refining decision-making procedures. This paper accentuates the imperative of addressing these challenges to fully harness the extensive and rich data resources accessible for well-informed decision-making

    Pollution-induced community tolerance in freshwater biofilms – from molecular mechanisms to loss of community functions

    Get PDF
    Exposure to herbicides poses a threat to aquatic biofilms by affecting their community structure, physiology and function. These changes render biofilms to become more tolerant, but on the downside community tolerance has ecologic costs. A concept that addresses induced community tolerance to a pollutant (PICT) was introduced by Blanck and Wängberg (1988). The basic principle of the concept is that microbial communities undergo pollution-induced succession when exposed to a pollutant over a long period of time, which changes communities structurally and functionally and enhancing tolerance to the pollutant exposure. However, the mechanisms of tolerance and the ecologic consequences were hardly studied up to date. This thesis addresses the structural and functional changes in biofilm communities and applies modern molecular methods to unravel molecular tolerance mechanisms. Two different freshwater biofilm communities were cultivated for a period of five weeks, with one of the communities being contaminated with 4 μg L-1 diuron. Subsequently, the communities were characterized for structural and functional differences, especially focusing on their crucial role of photosynthesis. The community structure of the autotrophs was assessed using HPLC-based pigment analysis and their functional alterations were investigated using Imaging-PAM fluorometry to study photosynthesis and community oxygen profiling to determine net primary production. Then, the molecular fingerprints of the communities were measured with meta-transcriptomics (RNA-Seq) and GC-based community metabolomics approaches and analyzed with respect to changes in their molecular functions. The communities were acute exposed to diuron for one hour in a dose-response design, to reveal a potential PICT and uncover related adaptation to diuron exposure. The combination of apical and molecular methods in a dose-response design enabled the linkage of functional effects of diuron exposure and underlying molecular mechanisms based on a sensitivity analysis. Chronic exposure to diuron impaired freshwater biofilms in their biomass accrual. The contaminated communities particularly lost autotrophic biomass, reflected by the decrease in specific chlorophyll a content. This loss was associated with a change in the molecular fingerprint of the communities, which substantiates structural and physiological changes. The decline in autotrophic biomass could be due to a primary loss of sensitive autotrophic organisms caused by the selection of better adapted species in the course of chronic exposure. Related to this hypothesis, an increase in diuron tolerance has been detected in the contaminated communities and molecular mechanisms facilitating tolerance have been found. It was shown that genes of the photosystem, reductive-pentose phosphate cycle and arginine metabolism were differentially expressed among the communities and that an increased amount of potential antioxidant degradation products was found in the contaminated communities. This led to the hypothesis that contaminated communities may have adapted to oxidative stress, making them less sensitive to diuron exposure. Moreover, the photosynthetic light harvesting complex was altered and the photoprotective xanthophyll cycle was increased in the contaminated communities. Despite these adaptation strategies, the loss of autotrophic biomass has been shown to impair primary production. This impairment persisted even under repeated short-term exposure, so that the tolerance mechanisms cannot safeguard primary production as a key function in aquatic systems.:1. The effect of chemicals on organisms and their functions .............................. 1 1.1 Welcome to the anthropocene .......................................................................... 1 1.2 From cellular stress responses to ecosystem resilience ................................... 3 1.2.1 The individual pursuit for homeostasis ....................................................... 3 1.2.2 Stability from diversity ................................................................................. 5 1.3 Community ecotoxicology - a step forward in monitoring the effects of chemical pollution? ................................................................................................................. 6 1.4 Functional ecotoxicological assessment of microbial communities ................... 9 1.5 Molecular tools – the key to a mechanistic understanding of stressor effects from a functional perspective in microbial communities? ...................................... 12 2. Aims and Hypothesis ......................................................................................... 14 2.1 Research question .......................................................................................... 14 2.2 Hypothesis and outline .................................................................................... 15 2.3 Experimental approach & concept .................................................................. 16 2.3.1 Aquatic freshwater biofilms as model community ..................................... 16 2.3.2 Diuron as model herbicide ........................................................................ 17 2.3.3 Experimental design ................................................................................. 18 3. Structural and physiological changes in microbial communities after chronic exposure - PICT and altered functional capacity ................................................. 21 3.1 Introduction ..................................................................................................... 21 3.2 Methods .......................................................................................................... 23 3.2.1 Biofilm cultivation ...................................................................................... 23 3.2.2 Dry weight and autotrophic index ............................................................. 23 3.2.4 Pigment analysis of periphyton ................................................................. 23 3.2.4.1 In-vivo pigment analysis for community characterization ....................... 24 3.2.4.2 In-vivo pigment analysis based on Imaging-PAM fluorometry ............... 24 3.2.4.3 In-vivo pigment fluorescence for tolerance detection ............................. 26 3.2.4.4 Ex-vivo pigment analysis by high-pressure liquid-chromatography ....... 27 3.2.5 Community oxygen metabolism measurements ....................................... 28 3.3 Results and discussion ................................................................................... 29 3.3.1 Comparison of the structural community parameters ............................... 29 3.3.2 Photosynthetic activity and primary production of the communities after selection phase ................................................................................................. 33 3.3.3 Acquisition of photosynthetic tolerance .................................................... 34 3.3.4 Primary production at exposure conditions ............................................... 36 3.3.5 Tolerance detection in primary production ................................................ 37 3.4 Summary and Conclusion ........................................................................... 40 4. Community gene expression analysis by meta-transcriptomics ................... 41 4.1 Introduction to meta-transcriptomics ............................................................... 41 4.2. Methods ......................................................................................................... 43 4.2.1 Sampling and RNA extraction................................................................... 43 4.2.2 RNA sequencing analysis ......................................................................... 44 4.2.3 Data assembly and processing................................................................. 45 4.2.4 Prioritization of contigs and annotation ..................................................... 47 4.2.5 Sensitivity analysis of biological processes .............................................. 48 4.3 Results and discussion ................................................................................... 48 4.3.1 Characterization of the meta-transcriptomic fingerprints .......................... 49 4.3.2 Insights into community stress response mechanisms using trend analysis (DRomic’s) ......................................................................................................... 51 4.3.3 Response pattern in the isoform PS genes .............................................. 63 4.5 Summary and conclusion ................................................................................ 65 5. Community metabolome analysis ..................................................................... 66 5.1 Introduction to community metabolomics ........................................................ 66 5.2 Methods .......................................................................................................... 68 5.2.1 Sampling, metabolite extraction and derivatisation................................... 68 5.2.2 GC-TOF-MS analysis ............................................................................... 69 5.2.3 Data processing and statistical analysis ................................................... 69 5.3 Results and discussion ................................................................................... 70 5.3.1 Characterization of the metabolic fingerprints .......................................... 70 5.3.2 Difference in the metabolic fingerprints .................................................... 71 5.3.3 Differential metabolic responses of the communities to short-term exposure of diuron ............................................................................................................ 73 5.4 Summary and conclusion ................................................................................ 78 6. Synthesis ............................................................................................................. 79 6.1 Approaches and challenges for linking molecular data to functional measurements ...................................................................................................... 79 6.2 Methods .......................................................................................................... 83 6.2.1 Summary on the data ............................................................................... 83 6.2.2 Aggregation of molecular data to index values (TELI and MELI) .............. 83 6.2.3 Functional annotation of contigs and metabolites using KEGG ................ 83 6.3 Results and discussion ................................................................................... 85 6.3.1 Results of aggregation techniques ........................................................... 85 6.3.2 Sensitivity analysis of the different molecular approaches and endpoints 86 6.3.3 Mechanistic view of the molecular stress responses based on KEGG functions ............................................................................................................ 89 6.4 Consolidation of the results – holistic interpretation and discussion ............... 93 6.4.1 Adaptation to chronic diuron exposure - from molecular changes to community effects.............................................................................................. 93 6.4.2 Assessment of the ecological costs of Pollution-induced community tolerance based on primary production ............................................................. 94 6.5 Outlook ............................................................................................................ 9

    The determinants of value addition: a crtitical analysis of global software engineering industry in Sri Lanka

    Get PDF
    It was evident through the literature that the perceived value delivery of the global software engineering industry is low due to various facts. Therefore, this research concerns global software product companies in Sri Lanka to explore the software engineering methods and practices in increasing the value addition. The overall aim of the study is to identify the key determinants for value addition in the global software engineering industry and critically evaluate the impact of them for the software product companies to help maximise the value addition to ultimately assure the sustainability of the industry. An exploratory research approach was used initially since findings would emerge while the study unfolds. Mixed method was employed as the literature itself was inadequate to investigate the problem effectively to formulate the research framework. Twenty-three face-to-face online interviews were conducted with the subject matter experts covering all the disciplines from the targeted organisations which was combined with the literature findings as well as the outcomes of the market research outcomes conducted by both government and nongovernment institutes. Data from the interviews were analysed using NVivo 12. The findings of the existing literature were verified through the exploratory study and the outcomes were used to formulate the questionnaire for the public survey. 371 responses were considered after cleansing the total responses received for the data analysis through SPSS 21 with alpha level 0.05. Internal consistency test was done before the descriptive analysis. After assuring the reliability of the dataset, the correlation test, multiple regression test and analysis of variance (ANOVA) test were carried out to fulfil the requirements of meeting the research objectives. Five determinants for value addition were identified along with the key themes for each area. They are staffing, delivery process, use of tools, governance, and technology infrastructure. The cross-functional and self-organised teams built around the value streams, employing a properly interconnected software delivery process with the right governance in the delivery pipelines, selection of tools and providing the right infrastructure increases the value delivery. Moreover, the constraints for value addition are poor interconnection in the internal processes, rigid functional hierarchies, inaccurate selections and uses of tools, inflexible team arrangements and inadequate focus for the technology infrastructure. The findings add to the existing body of knowledge on increasing the value addition by employing effective processes, practices and tools and the impacts of inaccurate applications the same in the global software engineering industry

    Defining Service Level Agreements in Serverless Computing

    Get PDF
    The emergence of serverless computing has brought significant advancements to the delivery of computing resources to cloud users. With the abstraction of infrastructure, ecosystem, and execution environments, users could focus on their code while relying on the cloud provider to manage the abstracted layers. In addition, desirable features such as autoscaling and high availability became a provider’s responsibility and can be adopted by the user\u27s application at no extra overhead. Despite such advancements, significant challenges must be overcome as applications transition from monolithic stand-alone deployments to the ephemeral and stateless microservice model of serverless computing. These challenges pertain to the uniqueness of the conceptual and implementation models of serverless computing. One of the notable challenges is the complexity of defining Service Level Agreements (SLA) for serverless functions. As the serverless model shifts the administration of resources, ecosystem, and execution layers to the provider, users become mere consumers of the provider’s abstracted platform with no insight into its performance. Suboptimal conditions of the abstracted layers are not visible to the end-user who has no means to assess their performance. Thus, SLA in serverless computing must take into consideration the unique abstraction of its model. This work investigates the Service Level Agreement (SLA) modeling of serverless functions\u27 and serverless chains’ executions. We highlight how serverless SLA fundamentally differs from earlier cloud delivery models. We then propose an approach to define SLA for serverless functions by utilizing resource utilization fingerprints for functions\u27 executions and a method to assess if executions adhere to that SLA. We evaluate the approach’s accuracy in detecting SLA violations for a broad range of serverless application categories. Our validation results illustrate a high accuracy in detecting SLA violations resulting from resource contentions and provider’s ecosystem degradations. We conclude by presenting the empirical validation of our proposed approach, which could detect Execution-SLA violations with accuracy up to 99%

    Desarrollo de una herramienta integral de gestión de gases de efecto invernadero para la toma de decisión contra el cambio climático a nivel regional y local en la Comunitat Valenciana

    Full text link
    Tesis por compendio[ES] Actualmente, los responsables de tomar decisiones contra el cambio climático carecen de herramientas para desarrollar inventarios de emisiones de gases de efecto invernadero (GEI) con suficiente rigor científico-técnico y precisión para priorizar e invertir los recursos disponibles de manera eficiente en las medidas necesarias para luchar contra el cambio climático. Por ello, en esta tesis se expone el desarrollo de un sistema de información territorial y sectorial (SITE) para monitorear las emisiones de GEI que sirva como herramienta de gobernanza climática local y regional. SITE combina las ventajas de los enfoques metodológicos descendente o top-down (de arriba hacia abajo) y ascendente o bottom-up (de abajo hacia arriba), para lograr un enfoque híbrido innovador para contabilizar y gestionar de manera eficiente las emisiones de GEI. Por tanto, en esta tesis se definen los diferentes desarrollos metodológicos, tanto generales como específicos de sectores clave del Panel Intergubernamental de Cambio Climático (IPPC) (edificación, transporte, sector forestal, etc.), un desarrollo informático para la parte de SITE que se ejecuta del lado del servidor, que de ahora en adelante denominaremos back-end del sistema, y siete implementaciones como casos de estudio representativos, a diferentes escalas y aplicados sobre diferentes sectores. Estas implementaciones a diferentes escalas y sectores demuestran el potencial del sistema como herramienta de apoyo en la toma de decisión contra el cambio climático a nivel regional y local. Las diferentes implementaciones en casos piloto representativos, tanto a nivel regional en la Comunitat Valenciana como a nivel local en municipios grandes (València) y medianos (Quart de Poblet y Llíria) muestran el potencial de adaptación territorial y sectorial que tiene la herramienta. Las metodologías desarrolladas para los sectores específicos de tráfico rodado, edificación o sector forestal, ofrecen cuantificaciones con una resolución espacial con gran capacidad de optimizar las políticas locales y regionales. Por tanto, la herramienta cuenta con un gran potencial de escalabilidad y gran capacidad de mejora continua mediante la inclusión de nuevos enfoques metodológicos, adaptación de las metodologías a la disponibilidad de datos, metodologías concretas para sectores clave y actualización a las mejores metodologías disponibles derivadas de actividades de investigación de la comunidad científica.[CA] Actualment, els responsables de prendre decisions contra el canvi climàtic no tenen eines per aconseguir inventaris d'emissions de gasos d'efecte hivernacle (GEH) amb prou cientificotècnic rigor, precisió i integritat per invertir els recursos disponibles de manera eficient en les mesures necessàries contra el canvi climàtic. Per això, en aquesta tesis se exposa el desenvolupa un sistema d'informació territorial i sectorial (SITE) per monitoritzar les emissions de GEH com a eina de governança climàtica local i regional. Aquest sistema combina els avantatges dels enfocaments metodològics descendent o top-down (de dalt a baix) i ascendent o bottom-up (de baix a dalt), per aconseguir un enfocament híbrid innovador per comptabilitzar i gestionar de manera eficient les emissions de GEH. Per tant, en aquesta tesi doctoral es descriuen els diferents desenvolupaments metodològics, tant generals com específics de sectors clau del Panel Intergovernamental contra el Canvi Climàtic (edificació, transport, forestal, etc.), un desenvolupament informàtic per al back-end del sistema i set implementacions com a casos d'estudi representatius, a diferents escales, amb els diferents enfocaments metodològics i aplicats sobre diferents sectors. Això queda descrit en sis capítols. Aquestes implementacions a diferents escales i sectors demostren el potencial del sistema com a eina de suport en la presa de decisió contra el canvi climàtic a nivell regional i local. Les diferents implementacions en casos pilot representatius, tant a nivell regional a la Comunitat Valenciana com a nivell local en municipis grans (València) i mitjans (Quart de Poblet i Llíria,) mostren el potencial d'adaptació territorial i sectorial que té l'eina. Les metodologies desenvolupades per als sectors específics de trànsit rodat, edificació i forestal, ofereixen quantificacions amb una resolució espacial amb gran capacitat d'optimitzar les polítiques locals i regionals. Per tant, l'eina compta amb un gran potencial d'escalabilitat i gran capacitat de millora contínua mitjançant la inclusió de nous enfocaments metodològics, adaptació de les metodologies a la disponibilitat de dades, metodologies concretes per a sectors clau, i actualització a les millors metodologies disponibles derivades de activitats de investigació de la comunitat científica.[EN] Currently, regional and local decision-makers lack of tools to achieve greenhouse gases (GHG) emissions inventories with enough rigor, accuracy and completeness in order to prioritize available resources efficiently against climate change. Thus, in this thesis the development of a territorial and sectoral information system (SITE) to monitor GHG emissions as a local and regional climate governance tool is exposed. This system combines the advantages of both, top-down and bottom-up approaches, to achieve an innovative hybrid approach to account and manage efficiently GHG emissions. Furthermore, this thesis defines the methodologies developed, a computer proposal for the back-end of the system and seven implementations as representative case studies at different scales (local and regional level), with the different methodological approaches and applied to different sectors. Thus, these implementations demonstrate the potential of the system as decision-making tool against climate change at the regional and local level as climate governance tool. The different implementations in representative pilot cases, both at the regional level in the Valencian Community and at the local level in large (Valencia) and medium-sized municipalities (Quart de Poblet and Llíria) demonstrate the potential for territorial and sectoral adaptation of the system developed. The methodologies developed for the specific sectors of road transport, building and forestry, offer quantifications with a spatial resolution with a great capacity to optimize local and regional policies. Therefore, the tool has a great potential for scalability and a great capacity for continuous improvement through the inclusion of new methodological approaches, adapting the methodologies to the availability of data, specific methodologies for key sectors, and updating to the best methodologies available in the scientific community.Lorenzo Sáez, E. (2022). Desarrollo de una herramienta integral de gestión de gases de efecto invernadero para la toma de decisión contra el cambio climático a nivel regional y local en la Comunitat Valenciana [Tesis doctoral]. Universitat Politècnica de València. https://doi.org/10.4995/Thesis/10251/181662TESISCompendi

    Compatibility and challenges in machine learning approach for structural crack assessment

    Get PDF
    Structural health monitoring and assessment (SHMA) is exceptionally essential for preserving and sustaining any mechanical structure’s service life. A successful assessment should provide reliable and resolute information to maintain the continuous performance of the structure. This information can effectively determine crack progression and its overall impact on the structural operation. However, the available sensing techniques and methods for performing SHMA generate raw measurements that require significant data processing before making any valuable predictions. Machine learning (ML) algorithms (supervised and unsupervised learning) have been extensively used for such data processing. These algorithms extract damage-sensitive features from the raw data to identify structural conditions and performance. As per the available published literature, the extraction of these features has been quite random and used by academic researchers without a suitability justification. In this paper, a comprehensive literature review is performed to emphasise the influence of damage-sensitive features on ML algorithms. The selection and suitability of these features are critically reviewed while processing raw data obtained from different materials (metals, composites and polymers). It has been found that an accurate crack prediction is only possible if the selection of damage-sensitive features and ML algorithms is performed based on available raw data and structure material type. This paper also highlights the current challenges and limitations during the mentioned sections

    From wallet to mobile: exploring how mobile payments create customer value in the service experience

    Get PDF
    This study explores how mobile proximity payments (MPP) (e.g., Apple Pay) create customer value in the service experience compared to traditional payment methods (e.g. cash and card). The main objectives were firstly to understand how customer value manifests as an outcome in the MPP service experience, and secondly to understand how the customer activities in the process of using MPP create customer value. To achieve these objectives a conceptual framework is built upon the Grönroos-Voima Value Model (Grönroos and Voima, 2013), and uses the Theory of Consumption Value (Sheth et al., 1991) to determine the customer value constructs for MPP, which is complimented with Script theory (Abelson, 1981) to determine the value creating activities the consumer does in the process of paying with MPP. The study uses a sequential exploratory mixed methods design, wherein the first qualitative stage uses two methods, self-observations (n=200) and semi-structured interviews (n=18). The subsequent second quantitative stage uses an online survey (n=441) and Structural Equation Modelling analysis to further examine the relationships and effect between the value creating activities and customer value constructs identified in stage one. The academic contributions include the development of a model of mobile payment services value creation in the service experience, introducing the concept of in-use barriers which occur after adoption and constrains the consumers existing use of MPP, and revealing the importance of the mobile in-hand momentary condition as an antecedent state. Additionally, the customer value perspective of this thesis demonstrates an alternative to the dominant Information Technology approaches to researching mobile payments and broadens the view of technology from purely an object a user interacts with to an object that is immersed in consumers’ daily life
    corecore