Detecting Objective-C Malware through Memory Forensics

Memory forensics is increasingly used to detect and analyze sophisticated malware. In the last decade, major advances in memory forensics have made analysis of kernel-level malware straightforward. Kernel-level malware has been favored by attackers because it essentially provides complete control over a machine. This has changed recently as operating systems vendors now routinely enforce driving signing and strategies for protecting kernel data, such as Patch Guard, have made userland attacks much more attractive to malware authors. In this thesis, new techniques for detecting userland malware written in Objective-C on Mac OS X are presented. As the thesis illustrates, Objective-C provides a rich set of APIs that malware uses to manipulate and steal data and to perform other malicious activities. The novel memory forensics techniques presented in this thesis deeply examine the state of the Objective-C runtime, identifying a number of suspicious activities, from keystroke logging to pointer swizzling

An Ecology Not Taking-Place: Analysing Ecocriticism\u27s Move from Place and Space to Spacing and Displacement through Derrida, Morton, and Haraway

Deconstructive readings of place-space dichotomies in ecological thinking reveal not only a repetition of the subject-object divide examined by Derrida and others, but also a spacing in between these categories. Morton and DiCaglio establish the importance of the in-between to ecological thinking and writing, and they demonstrate how literary and physical irony can reveal this spacing to the reader through an experience of displacement. By choosing to reject norms and instead linger in the spacing, individuals can enact a non-lieu-tenance that radically undermines sovereign systems, defers place, and opens up the possibility of new kinds of intimacy and community. By reading Haraway, Morton, and Derrida’s works as critiques of one another, the in-between emerges as a literal (in multiple senses) ethical possibility recognising that, while survival might mean “living-on” one another, it also implies a responsibility to minimise violence against every individual, human or otherwise

Analysis of Summer Thunderstorms in Central Alabama Using the NASA Land Information System

Forecasters have difficulty predicting "random" afternoon thunderstorms during the summer months. Differences in soil characteristics could be a contributing factor for storms. The NASA Land Information System (LIS) may assist forecasters in predicting summer convection by identifying boundaries in land characteristics. This project identified case dates during the summer of 2009 by analyzing synoptic weather maps, radar, and satellite data to look for weak atmospheric forcing and disorganized convective development. Boundaries in land characteristics that may have lead to convective initiation in central Alabama were then identified using LIS

Fault detection and diagnosis of a plastic film extrusion process

This paper presents a new approach to the design of a model-based fault detection and diagnosis system for application to a plastic film extrusion process. The design constructs a residual generator via parity relations. A multi-objective optimisation problem must be solved in order for the residual to be sensitive to faults but insensitive to disturbances and modelling errors. In this paper, we exploit a genetic algorithm for solving this multi-objective optimisation problem and the resulting fault detection and diagnosis system is applied to a first-principles model of a plastic film extrusion process. Simulation results demonstrate that various types of faults can be detected and diagnosed successfully

Evaluating the Contribution of NASA Remotely-Sensed Data Sets on a Convection-Allowing Forecast Model

The Short-term Prediction Research and Transition (SPoRT) Center is a collaborative partnership between NASA and operational forecasting partners, including a number of National Weather Service forecast offices. SPoRT provides real-time NASA products and capabilities to help its partners address specific operational forecast challenges. One challenge that forecasters face is using guidance from local and regional deterministic numerical models configured at convection-allowing resolution to help assess a variety of mesoscale/convective-scale phenomena such as sea-breezes, local wind circulations, and mesoscale convective weather potential on a given day. While guidance from convection-allowing models has proven valuable in many circumstances, the potential exists for model improvements by incorporating more representative land-water surface datasets, and by assimilating retrieved temperature and moisture profiles from hyper-spectral sounders. In order to help increase the accuracy of deterministic convection-allowing models, SPoRT produces real-time, 4-km CONUS forecasts using a configuration of the Weather Research and Forecasting (WRF) model (hereafter SPoRT-WRF) that includes unique NASA products and capabilities including 4-km resolution soil initialization data from the Land Information System (LIS), 2-km resolution SPoRT SST composites over oceans and large water bodies, high-resolution real-time Green Vegetation Fraction (GVF) composites derived from the Moderate-resolution Imaging Spectroradiometer (MODIS) instrument, and retrieved temperature and moisture profiles from the Atmospheric Infrared Sounder (AIRS) and Infrared Atmospheric Sounding Interferometer (IASI). NCAR's Model Evaluation Tools (MET) verification package is used to generate statistics of model performance compared to in situ observations and rainfall analyses for three months during the summer of 2012 (June-August). Detailed analyses of specific severe weather outbreaks during the summer will be presented to assess the potential added-value of the SPoRT datasets and data assimilation methodology compared to a WRF configuration without the unique datasets and data assimilation

Forecasting Lake-Effect Precipitation in the Great Lakes Region Using NASA Enhanced-Satellite Data

Lake-effect precipitation is common in the Great Lakes region, particularly during the late fall and winter. The synoptic processes of lake-effect precipitation are well understood by operational forecasters, but individual forecast events still present a challenge. Locally run, high resolution models can assist the forecaster in identifying the onset and duration of precipitation, but model results are sensitive to initial conditions, particularly the assumed surface temperature of the Great Lakes. The NASA Short-term Prediction Research and Transition (SPoRT) Center has created a Great Lakes Surface Temperature (GLST) composite, which uses infrared estimates of water temperatures obtained from the MODIS instrument aboard the Aqua and Terra satellites, other coarser resolution infrared data when MODIS is not available, and ice cover maps produced by the NOAA Great Lakes Environmental Research Lab (GLERL). This product has been implemented into the Weather Research and Forecast (WRF) model Environmental Modeling System (WRF-EMS), used within forecast offices to run local, high resolution forecasts. The sensitivity of the model forecast to the GLST product was analyzed with a case study of the Lake Effect Storm Echinacea, which produced 10 to 12 inches of snowfall downwind of Lake Erie, and 8 to 18 inches downwind of Lake Ontario from 27-29 January 2010. This research compares a forecast using the default Great Lakes surface temperatures from the Real Time Global sea surface temperature (RTG SST), in the WRF-EMS model to the enhanced NASA SPoRT GLST product to study forecast impacts. Results from this case study show that the SPoRT GLST contained less ice cover over Lake Erie and generally cooler water temperatures over Lakes Erie and Ontario. Latent and sensible heat fluxes over Lake Ontario were decreased in the GLST product. The GLST product decreased the quantitative precipitation forecast (QPF), which can be correlated to the decrease in temperatures and heat fluxes. A slight increase in precipitation coverage was noted over Lake Erie due to a decrease in ice cover. Both the RTG SST and the GLST products predicted the precipitation south of the actual location of precipitation. This single case study is the first part of an examination to determine how MODIS data can be applied to improve model forecasts in the Great Lakes region

Forecasting Lake-Effect Snow in the Great Lakes Using NASA Satllite Data

This slide presentation reviews the forecast of the lake effect snow in the Great Lakes region using models and infrared estimates of Great Lake Surface Temperatures (GLSTs) from the MModerate Resolution Imaging Spectroradiometer (MODIS) instrument on Terra and Aqua satellites, and other satellite data. This study analyzes Lake Erie and Lake Ontario which produce storm total snowfall ranged from 8-18 inches off of Lake Ontario and 10-12 inches off of Lake Erie for the areas downwind

Evaluating the Impacts of NASA/SPoRT Daily Greenness Vegetation Fraction on Land Surface Model and Numerical Weather Forecasts

The NASA Short-term Prediction Research and Transition (SPoRT) Center develops new products and techniques that can be used in operational meteorology. The majority of these products are derived from NASA polar-orbiting satellite imagery from the Earth Observing System (EOS) platforms. One such product is a Greenness Vegetation Fraction (GVF) dataset, which is produced from Moderate Resolution Imaging Spectroradiometer (MODIS) data aboard the NASA EOS Aqua and Terra satellites. NASA SPoRT began generating daily real-time GVF composites at 1-km resolution over the Continental United States (CONUS) on 1 June 2010. The purpose of this study is to compare the National Centers for Environmental Prediction (NCEP) climatology GVF product (currently used in operational weather models) to the SPoRT-MODIS GVF during June to October 2010. The NASA Land Information System (LIS) was employed to study the impacts of the new SPoRT-MODIS GVF dataset on land surface models apart from a full numerical weather prediction (NWP) model. For the 2010 warm season, the SPoRT GVF in the western portion of the CONUS was generally higher than the NCEP climatology. The eastern CONUS GVF had variations both above and below the climatology during the period of study. These variations in GVF led to direct impacts on the rates of heating and evaporation from the land surface. The second phase of the project is to examine the impacts of the SPoRT GVF dataset on NWP using the Weather Research and Forecasting (WRF) model. Two separate WRF model simulations were made for individual severe weather case days using the NCEP GVF (control) and SPoRT GVF (experimental), with all other model parameters remaining the same. Based on the sensitivity results in these case studies, regions with higher GVF in the SPoRT model runs had higher evapotranspiration and lower direct surface heating, which typically resulted in lower (higher) predicted 2-m temperatures (2-m dewpoint temperatures). The opposite was true for areas with lower GVF in the SPoRT model runs. These differences in the heating and evaporation rates produced subtle yet quantifiable differences in the simulated convective precipitation systems for the selected severe weather case examined

Analysis of Summertime Convective Initiation in Central Alabama Using the Land Information System

During the summer months in the southeastern United States, convective initiation presents a frequent challenge to operational forecasters. Thunderstorm development has traditionally been referred to as random due to their disorganized, sporadic appearance and lack of atmospheric forcing. Horizontal variations in land surface characteristics such as soil moisture, soil type, land and vegetation cover could possibly be a focus mechanism for afternoon convection during the summer months. The NASA Land Information System (LIS) provides a stand-alone land surface modeling framework that incorporates these varying soil and vegetation properties, antecedent precipitation, and atmospheric forcing to represent the soil state at high resolution. The use of LIS as a diagnostic tool may help forecasters to identify boundaries in land surface characteristics that could correlate to favored regions of convection initiation. The NASA Shortterm Prediction Research and Transition (SPoRT) team has been collaborating with the National Weather Service Office in Birmingham, AL to help incorporate LIS products into their operational forecasting methods. This paper highlights selected convective case dates from summer 2009 when synoptic forcing was weak, and identifies any boundaries in land surface characteristics that may have contributed to convective initiation. The LIS output depicts the effects of increased sensible heat flux from urban areas on the development of convection, as well as convection along gradients in land surface characteristics and surface sensible and latent heat fluxes. These features may promote mesoscale circulations and/or feedback processes that can either enhance or inhibit convection. With this output previously unavailable to operational forecasters, LIS provides a new tool to forecasters in order to help eliminate the randomness of summertime convective initiation