The lifetime of Android API vulnerabilities : case study on the JavaScript-to-Java interface

We examine the lifetime of API vulnerabilities on Android and propose an exponential decay model of the uptake of updates after the release of a fix. We apply our model to a case study of the JavaScript-to-Java interface vulnerability. This vulnerability allows untrusted JavaScript in a WebView to break out of the JavaScript sandbox allowing remote code execution on Android phones, this can often then be further exploited to gain root access. While this vulnerability was first reported in 2012-12-21 we predict that the fix will not have been deployed to 95% of devices until 2018-01-10, 5.2 years after the release of the fix. We show how this vulnerability is exploitable in many apps and the role that ad-libraries have in making this flaw so widespread

Optimisation d'un système de gestion des réclamations qualité sur un site de production pharmaceutique

S'inscrivant dan sle cadre de la ligne directrice ICH Q10 "système de management de la qualité" ainsi que dans une démarche d'amélioration continue de la qualité, l'optimisation du sytème de gestion des réclamations sur un site de production pharmaceutique met en évidence les rôles, intérêts de l'utilisation d'un système qualité pour la prise en charge des réclamations qualités, mais aussi les multiples enjeux de l'optimisation de ce système afin de le rendre plus performant et sécurisé tant du point de vue de la qualité pharmaceutique que du point de vue industriel. Le travail effectué pour cette thèse a pour objectif de présenter des méthodes d'optimisation de ce système qualité spécifique à l'aide d'une méthodologie et d'exemples concrets afin d'améliorer la prise en charge des réclamations au sein d'un site de production pharmaceutique. Les recherches documentées effectuées ont permis de définir le cadre des réclamations qualité ainsi que les impératifs liés à leur prise en charge, les principes et intérêts de l'utilisation de systèmes de management de la qualité, et de la présentation de différents outils et méthodes d'optimisation de la qualité. Ces travaux sont illustrés de manière concrète et pratique au travers de la réalisation d'un projet d'amélioration du système de getion des réclamations qualité réalisé au sein d'un site de production pharmaceutique.TOURS-BU Sciences Pharmacie (372612104) / SudocSudocFranceF

Supporting data for: "The Lifetime of Android API vulnerabilities:case study on the JavaScript-to-Java interface"

List of distinct manufacturers (manufacturers.csv name, count) List of different operators (operators.csv name) Table of API version distribution for Android over time from Google Play (androiddevolperdashboardhistory.ods, androiddevolperdashboardhistory.csv, updated version kept at http://androidvulnerabilities.org/play/historicplaydashboard ) Generated LaTeX macros used in the paper (macros.tex, dastats.tex, avostats.tex, vulnerable_apps.tex) latex_value python module used to record data into LaTeX macros (latex_value.py, updated version kept at https://github.com/ucam-cl-dtg/latex_value ) Fitted parameters for API version distribution curves (dastats.tex \daGPAPIPerAPIParametersTable) App ids of the 102174 APK files collected from the Google Play store along with the analysis of which category they fall into with respect to the JavaScript-to-Java interface (the APK files themselves are not included as we do not have distribution rights for them). (brresults.txt, For the number at the start of the line, '0' means always vulnerable (using addJavascriptInterface and target SDK = 17), '6' means not using addJavascriptInterface (ie not vulnerable). 128 and 255 indicate a problem scanning the APK. The timestamp that follows is the original creation date of the APK (as given by the timestamp of the APK manifest).) List of those app ids also included in Device Analyzer (https://deviceanalyzer.cl.cam.ac.uk/) (known_app_ids.txt, those not in Device Analyzer unknown_app_ids.txt) Python source code for processing this data (vulnerable_apps.py)EPSRC EP/P505445/

Study of the influence of temperature on the optical response of interferometric detector systems.

International audienceIn this paper, we will demonstrate a theoretical approach to determining the optical response of interferometric detector systems to external stimuli. The wavelength dispersion of the refractive index and the thermo-optic coefficient of transparent polymer blend waveguide materials are inserted into modeling software in order to simulate the optical response of both Multimode Interferometer (MMI) and Bragg grating (BG) architectures. The optical output of such devices is very sensitive to variations in the refractive index of the constituent materials, and they may be used to detect phenomena such as local temperature changes or relative humidity variations [1]. When the input intensity of the sensor system is normalized to unity, we demonstrate theoretical thermal sensitivities of 2 × 10−4/K for BG architectures and 3 × 10−5/K for MMI devices. A differential measurement system for BG or MMI components is discussed and simulated. We shall also discuss the use of such systems as gas detectors when a catalyst capable of accelerating the exothermic oxidation of combustible gasses is deposited onto the optical circuit

Wavelength and temperature dispersion of refractive index of thin films

International audienc

Analyse des risques psychosociaux et de la qualité de vie au travail. Diagnostic et préconisations (unité DMEM)

il s'agit d'un type de produit dont les métadonnées ne correspondent pas aux métadonnées attendues dans les autres types de produit : ACTIVITY_REPORTAnalyse des risques psychosociaux et de la qualité de vie au travail. Diagnostic et préconisations (unité DMEM

Analyse des risques psychosociaux et de la qualité de vie au travail. Diagnostic et préconisations (unité DMEM)

il s'agit d'un type de produit dont les métadonnées ne correspondent pas aux métadonnées attendues dans les autres types de produit : ACTIVITY_REPORTAnalyse des risques psychosociaux et de la qualité de vie au travail. Diagnostic et préconisations (unité DMEM

Furan fatty acid extracted from Hevea brasiliensis latex increases muscle mass in mice

Skeletal muscle is essential for locomotion and plays a crucial role in energy homeostasis. It is regulated by nutrition, genetic factors, physical activity and hormones. Furan fatty acids (FuFAs) are minor fatty acids present in small quantities in food from plants and animals origin. Recently, we showed that a preventive nutritional supplementation with furan fatty acid in a DIO mouse model reduces metabolic disorders. The present study was designed to determine the influence of FuFA-F2 extracted from Hevea brasiliensis latex on skeletal muscle phenotype. In C2C12 myotubes we found that FuFA-F2 whatever the concentration used increased protein content. We revealed that in C2C12 myotubes FuFA-F2 (10 µM) increases protein synthesis as shown by the stimulation of mTOR phosphorylation. Next, to confirm in vivo our results C57Bl6 mice were supplemented by oral gavage with vehicle or FuFA-F2 (20 mg/kg) for 3 and a half weeks. We found that mice supplemented with FuFA-F2 had a greater lean mass than the control mice. In line with this observation, we revealed that FuFA-F2 increased muscle mass and promoted more oxidative muscle metabolism in mice as attested by cytochrome c oxidase activity. In conclusion, we demonstrated that FuFA-F2 stimulates muscle anabolism in mice in vitro and in vivo, mimicking in part physical activity. This study highlights that in vivo FuFA-F2 may have health benefits by increasing muscle mass and oxidative metabolism

Combination of guided mode and photometric optical metrology methods for precise determination of refractive index dispersion: application to polymer blend and ceramic thin films for gas sensors

Two optical techniques, m-lines and spectroscopic ellipsometry, are compared for their suitability for obtaining the wavelength and the temperature dispersion of the refractive index of thin-film layers used in gas detector devices. Two types of materials that are often integrated into gas sensors are studied: a polymer organic-inorganic blend deposited by spin coating typically used in near-infrared waveguides and the ceramic semiconductor SrTi1-xFexO3 (strontium titanate) doped with iron at concentrations x = 0.075 and 0.1 deposited by electron beam deposition. The refractive index dispersion obtained by m-lines and ellipsometry is compared, and the differences between the measured parameters for the two materials are discussed. The chromatic dispersion will be represented by a three-term Cauchy law. An intuitive method for verifying the measured indices using an integrating sphere and reflexion coefficient modeling techniques are also demonstrated. Thermo-optic coefficients in the order of -1 × 10-4/K for both materials are reported, and very low chromatic dispersions are also measured, thanks to the high sensitivity of the m-lines technique. The uniaxial anisotropic properties of the polymerblend films are measured and discussed in the case of the semiconductor films.ANRCAPES/COFECU