321,296 research outputs found

    A Framework for File Format Fuzzing with Genetic Algorithms

    Get PDF
    Secure software, meaning software free from vulnerabilities, is desirable in today\u27s marketplace. Consumers are beginning to value a product\u27s security posture as well as its functionality. Software development companies are recognizing this trend, and they are factoring security into their entire software development lifecycle. Secure development practices like threat modeling, static analysis, safe programming libraries, run-time protections, and software verification are being mandated during product development. Mandating these practices improves a product\u27s security posture before customer delivery, and these practices increase the difficulty of discovering and exploiting vulnerabilities. Since the 1980\u27s, security researchers have uncovered software defects by fuzz testing an application. In fuzz testing\u27s infancy, randomly generated data could discover multiple defects quickly. However, as software matures and software development companies integrate secure development practices into their development life cycles, fuzzers must apply more sophisticated techniques in order to retain their ability to uncover defects. Fuzz testing must evolve, and fuzz testing practitioners must devise new algorithms to exercise an application in unexpected ways. This dissertation\u27s objective is to create a proof-of-concept genetic algorithm fuzz testing framework to exercise an application\u27s file format parsing routines. The framework includes multiple genetic algorithm variations, provides a configuration scheme, and correlates data gathered from static and dynamic analysis to guide negative test case evolution. Experiments conducted for this dissertation illustrate the effectiveness of a genetic algorithm fuzzer in comparison to standard fuzz testing tools. The experiments showcase a genetic algorithm fuzzer\u27s ability to discover multiple unique defects within a limited number of negative test cases. These experiments also highlight an application\u27s increased execution time when fuzzing with a genetic algorithm. To combat increased execution time, a distributed architecture is implemented and additional experiments demonstrate a decrease in execution time comparable to standard fuzz testing tools. A final set of experiments provide guidance on fitness function selection with a CHC genetic algorithm fuzzer with different population size configurations

    Practices and trends of telework in the Portuguese industry: the results of surveys in the textile, metal and software sectors

    Get PDF
    The aim of the TeleRisk Project on labour relations and professional risks within the context of teleworking in Portugal – supported by IDICT – Institute for Development and Inspection of Working Conditions (Ministry of Labour), is to study the practices and forms of teleworking in the manufacturing sectors in Portugal. The project chose also the software industry as a reference sector, even though it does not intend to exclude from the study any other sector of activity or the so-called “hybrid” forms of work. However, the latter must have some of the characteristics of telework. The project thus takes into account the so-called “traditional” sectors of activity, namely textile and machinery and metal engineering (machinery and equipment), not usually associated to this type of work. However, telework could include, in the so-called “traditional” sectors, other variations that are not found in technologically based sectors. One of the evaluation methods for the dynamics associated to telework consisted in carrying out surveys by means of questionnaires, aimed at employers in the sectors analysed. This paper presents some of the results of those surveys. It is important to mention that, being a preliminary analysis, it means that it does not pretend to have exhausted all the issues in the survey, but has meant that it shows the bigger tendencies, in terms of teleworking practices, of the Portuguese industry.teleworking; organisation of work; Portugal; manufacturing

    Evolving practices of end user articulation in software co-design

    Get PDF
    The work is focused on new techniques and practices that support end user to get involved in software co-design. Social networks, variations of self-documentation and new interactive technologies enable new forms of user involvement in software development projects. The potential of new practices and also the issues that come with these methods will be reflected.Die Arbeit thematisiert neue Technologien und Praktiken zur Unterstützung der Nutzereinbindung im Software Co-Design. Soziale Netzwerke, Variationen der Selbstdokumentation und neue interaktive Technologien ermöglichen neue Formen der Beteiligung an Software Entwicklungsprojekten. Das Potential neuer Praktiken und auch die Herausforderungen bei der Anwendung solcher Methoden werden reflektiert

    Analisis Pengaruh Pembelian Strategik dan Pengembangan Pemasok Terhadap Kinerja Pemasok serta Pengaruhnya Terhadap Kelangsungan Hubungan Dengan Pemasok (Studi Kasus di PT DJARUM)

    Get PDF
    This research is motivated by supply chain management practices within companies that use variations of the strategy in accordance with the desired policy in creating advantage through supplier management. Further analysis on the performance of suppliers to consider the variables that may affect the performance of suppliers and it affects the strategic purchasing, supplier development, and continuity of relationships with suppliers. The research object is PT Djarum. This research uses statistical techniques to aid the analysis of path analysis through SPSS 19.0 software. Data were obtained from the respondents to the manager or head of population in the purchase of PT Djarum. Analysis results meet the criteria of 0.8639 Goodness of Fit. t-test results on the first and fifth regression equation indicate that the variable strategic purchasing and supplier development have significance value less than 5% significance level. Empirical findings of this research indicate that the effect on the strategic purchasing on supplier performance and sustainability of relationships with suppliers can be optimized through supplier developmen

    Designing for mod development: user creativity as product development strategy on the firm-hosted 3D software platform

    Get PDF
    The thesis is designed to improve our understanding of user participation in Web-based development practices in the commercial setting of the 3D software industry. It aims to investigate whether the creative capacities of users and their contributions to the online firm-hosted 3D platform are indicative of a novel configuration of production that influences the processes of product development across firm boundaries. The thesis mobilizes the user participation literature developing in media research as its main theoretical framework. It builds on insights derived from work on user participation in media sites as seen through a cultural lens, in particular, as developed in Henry Jenkins' notions of 'participatory' and 'convergence culture'. The user participation literature is supported by a combination of insights drawn from work on communities of practice and user-centred innovation so as to offer a more robust approach to examine and appreciate the firm-hosted 3D platform as a site of user participation. More specifically, the conceptual framework for the study provides a basis for an examination of the ways a software developer finn encourages user participation in a market and of how this enables and facilitâtes particular modes of user creativity. These are shown to shape and maintain a firm-hosted platform that aids product development efforts that are expected to benefit the developer fimi. An empirical study of the platform, Second Life, provides the basis for the analysis of finn-user interactions which are shown to underpin a distinctive finn leaming process in the context of product development that occurs across permeable fimi boundaries. The thesis yields insight into the way a developer firm invites its user base to partner with it in product development, indicating how aspects of user participation associated with non-market dynamics are embedded in commercial activity and professionalism. The pivotal role of users is revealed in the design, development and sustainability of a firm-hosted 3D product. The findings point to interesting relationships between the distinctive creative capacities of users and the range of capabilities afforded by the firm-provided design space. Variations in user participation and contributions to product development suggest that particular patterns of learning opportunities occur. The analysis yields several new concepts including a 'modification effect market' which are used to extend existing conceptualizations of user participation in digitai development practices in the commercial setting of the 3D software industry
    • …
    corecore