Automatic Removal of Flaws in Embedded System Software

Tese de mestrado, Segurança Informática, Universidade de Lisboa, Faculdade de Ciências, 2022Currently, embedded systems are present in a myriad of devices, such as Internet of Things, drones, and Cyber-physical Systems. The security of these devices can be critical, depending on the context they are integrated and the role they play (e.g., water plant, car). C is the core language used to develop the software for these devices and is known for missing the bounds of its data types, which leads to vulnerabilities such as buffer overflows. These vulnerabilities, when exploited, cause severe damage and can put human life in danger. Therefore, the software of these devices must be secure. One of the concerns with vulnerable C programs is to correct the code automatically, employing secure code that can remove the existing vulnerabilities and avoid attacks. However, such task faces some challenges after finding the vulnerabilities, namely determining what code is needed to remove them and where to insert that code, maintaining the correct behavior of the application after applying the code correction, and verifying that the generated code correction is secure and effectively removes the vulnerabilities. Another challenge is to accomplish all these elements automatically. This work aims to study diverse types of buffer overflow vulnerabilities in the C programming lan guage, forms to build secure code for invalidating such vulnerabilities, including functions from the C language that can be used to remove flaws. Based on this knowledge, we propose an approach that automatically, after discovering and confirming potential vulnerabilities of an application, applies code correction to fix the vulnerable code of those vulnerabilities verified and validate the new code with fuzzing/attack injection. We implemented our approach and evaluated it with a set of test cases and with real applications. The experimental results showed that the tool detected the intended vulnerabilities and generated corrections capable of removing the vulnerabilities found

FTA-LAMP based biosensor for a rapid in-field detection of Globodera pallida—the pale potato cyst nematode

The combination of a sensitive and specific magnetoresistive sensing device with an easy DNA extraction method and a rapid isothermal amplification is presented here targeting the on-site detection of Globodera pallida, a potato endoparasitic nematode. FTA-cards were used for DNA extraction, LAMP was the method developed for DNA amplification and a nanoparticle functionalized magnetic-biosensor was used for the detection. The combinatorial effect of these three emerging technologies has the capacity to detect G. pallida with a detection limit of one juvenile, even when mixed with other related species. This combined system is far more interesting than what a single technology can provide. Magnetic biosensors can be combined with any DNA extraction protocol and LAMP forming a new solution to target G. pallida. The probe designed in this study consistently distinguished G. pallida (∆Vacbinding/Vacsensor above 1%) from other cyst nematodes (∆Vacbinding/Vacsensor below 1%). It was confirmed that DNA either extracted with FTA-cards or Lab extraction Kit was of enough quantity and quality to detect G. pallida whenever present (alone or in mixed samples), ensuring probe specificity and sensitivity. This work provides insights for a new strategy to construct advanced devices for pathogens in-field diagnostics. LAMP runs separately but can be easily integrated into a single device

Influenza seroprotection correlates with predominant circulating viruses during 2014/15 and 2015/16 seasons in Portugal

Rede Portuguesa de Laboratórios para o Diagnóstico da GripeBACKGROUND: Population immune profile for influenza is highly affected by circulating influenza viruses, thus changing the risk of infection for influenza. This study aims to assess influenza immunity in the Portuguese population by age groups, during 2014 and 2015 and establish a relationship between seroprotection and circulating influenza viruses in 2014/15 and 2015/16 seasons. METHODS: Two cross-sectional studies were developed based on a convenience serum sample collected in June 2014 (n=626) and July 2015 (n=675) in hospitals from mainland and Azores and Madeira.Serums equally represent all age groups. Antibody titers were evaluated by HI assay for strains recommended for seasonal influenza vaccine northern hemisphere,2014/15 and 2015/2016. Seroprevalences were estimated for each strain by age group and the association with seasonal cumulative influenza-like illness (ILI) rates for influenza virus during both seasons was analised. RESULTS: In June 2014 the highest seroprotection was observed for influenza A(H3) (39.0%; 95% CI: 36.2-43.8%) and A(H1)pdm09 (29.7; 95% CI: 26.3-33.4%), with higher levels in children 5-14 years old. In 2014/2015 a dominant circulation of influenza B/Yamagata was observed with high incidence rates in individuals under 65 years old, the ones that had lower seroprotection. Although before the start of the season high protection for A(H3) was observed, the circulation of the new drift A(H3) strains had gained an immunological advantage,in accordance with A(H3) elevated incidence rates observed during 2014/15. In July 2015 the highest seroprotection was observed for influenza B/ Yamagata (55.1%; 95% CI: 51.4-58.9%), 2.4 times the estimated 2014.This increase was even more pronounced in younger (≤ 4 years old), 6.3 times increase in 2015.This fact is in agreement with the predominant influenza B virus detected and the high ILI incidence rate observed in children during 2014/2015 epidemic. Seroprotection levels for influenza A in July 2015 were not significantly different from 2014.During 2015/16 season, influenza A(H1N1)pdm09 was predominant, with high incidence rate in < 65 year old. Influenza B/Victoria lineage,although detected at low levels increased in frequency, in agreement with the lowest level of seroprotection detected in the general population before the start of 2015/2016 season (21.8%; 95% CI: 18.7-24.0%). CONCLUSIONS There was a correlation between virus circulation, incidence rates for each age group and the previous seroprotection for seasonal influenza viruses.Our study highlights the value of measuring the serological profile for influenza to establishe risk groups for infection for which an increase preventive measures, including vaccination, should be fostered.info:eu-repo/semantics/publishedVersio

Influenza severe cases in hospitals, between 2014 and 2016 in Portugal

Rede Portuguesa de Laboratórios para o Diagnóstico da GripeBackground: Since 2009, the Portuguese Laboratory Network (PLNID) for Influenza Diagnosis has integrated 15 Laboratories in mainland and Atlantic Islands of Azores and Madeira. This PLNID added an important contribute to the National Influenza Surveillance Program regarding severe and hospitalized influenza cases. The present study aims to describe influenza viruses detected in influenza like illness (ILI) cases: outpatients (Outp), hospitalized (Hosp), and intensive care units (ICU), between 2014 and 2016. Methods: The PLNID performs influenza virus diagnosis by biomolecular methodologies. Weekly reports to the National Influenza Reference Laboratory ILI cases tested for influenza. Reports include data on detecting viruses, hospital assistance, antiviral therapeutics, and information on death outcome. Were reported during two winter seasons 8059 ILI cases,being 3560 cases in 2014/15 (1024 in Outp, 1750 Hosp, and 606 in ICU) and 4499 cases in 2015/2016 (1933 in Outp, 1826 Hosp, and 740 in ICU). Results: The higher percentage of influenza positive cases were detected in Outp in both seasons, 18% during 2014/15 and 20% in 2015/16. In 2014/15,influenza cases were more frequent in individuals older than 65 years old and these required more hospitalizations,even in ICU. In 2015/16,the influenza cases were mainly detected in individuals between 15-64 years old. A higher proportion of influenza positive cases with hospitalization in ICU were observed in adults between 45-64 years old.During the study period,the predominant circulating influenza viruses were different in the two seasons: influenza B and A(H3) co-circulated in 2014/15,and influenza A(H1)pdm09 was predominant during 2015/16. Even when influenza A is notthe dominant virus, A(H3) and A(H1)pdm09 subtypes correlate with higher detection rate in hospitalized cases (Hosp and UCI), with higher frequencies in adults older than 45. Influenza B,detected in higher proportion in outpatients, was frequently relatedwith influenza cases in younger age groups: 0-4 and 5-14 years old. Conclusions: This study highlights the correlation of theinfluenza virus type/subtype that circulates in each season with the possible need for hospitalization and intensive care in special groups of the population. Circulation of influenza A subtypes can cause more frequentdisease in individuals older than 45, with need of hospitalization including intensive care. On the other hand, influenza B is more frequently associated with less severe cases and with infection in children and younger adults. Influenza B circulation might predict lower number of hospitalizations.The identification of influenza type in circulation,byPLNID ineach season, could guide action planning measures in population health care.info:eu-repo/semantics/publishedVersio

Mundos em miniatura: aproximação a alguns aspectos da cartografia portuguesa do Brasil (séculos XVI a XVIII)

This paper discusses the challenges of "miniaturizing" the world in Portuguese cartography at the dawn of the Modern Age. It draws attention to the process of amassing experience and geographic knowledge, and their deployment in the cartographic representations of Brazil throughout the first three centuries of its colonization

Rede Portuguesa de Laboratórios para o Diagnóstico da Gripe: inverno 2013/2014

A Rede Portuguesa de Laboratórios para o Diagnóstico da Gripe (RPLDG) integra, atualmente, 15 laboratórios maioritariamente hospitalares e é coordenada pelo Laboratório Nacional de Referência para o Vírus da Gripe (LNRVG) do Departamento de Doenças Infecciosas do Instituto Nacional de Saúde Doutor Ricardo Jorge, I.P. A RPLDG realiza o diagnóstico laboratorial do vírus da gripe assim como de outros vírus respiratórios, permitindo um conhecimento mais preciso da etiologia das infeções respiratórias, particularmente em casos hospitalizados de infeção respiratória aguda grave, constituindo um complemento valioso para o PNVG. Os casos de SG provenientes de emergências hospitalares e casos de Infecção Respiratória Aguda Grave, incluindo casos com internamento em unidade de cuidados intensivos, foram notificados pelos laboratórios da Rede ao LNRVG. Dos 15 laboratórios da Rede, 13 notificaram casos de doença respiratória durante a época de 2013/2014. Os dados recolhidos foram inseridos em suporte informático tendo as bases de dados sido agregadas numa base de dados comum submetida a um processo de validação de congruência de dados. Os dados analisados correspondem ao período que decorreu entre a semana 38 de 2013 e a semana 21 de 2014. Foram notificados pelos Laboratórios da Rede um total de 3790 casos de infeção respiratória. O maior número de notificações foi observado no mês de janeiro e fevereiro (semanas 2/2014 a 8/2014), com um pico de ocorrência na semana 4/2014 com a notificação de 454 casos de infeção respiratória. O vírus da gripe foi detetado em 822 casos de infeção respiratória. O vírus influenza A foi identificado em 807 (98,2%) dos casos positivos, destes 403 (49,0%) pertencem ao subtipo A(H1)pdm09, 98 (12,0%) ao subtipo A(H3) e 306 (37,0%) vírus influenza A não foram subtipados. O vírus influenza B foi detetado em 14 (2,0%) casos. Foi identificada 1 infecção mista por vírus influenza A(H1)pdm09 e A(H3) (0,1%). A maior percentagem de casos de gripe foi observada em indivíduos entre os 15 e os 64 anos sendo o vírus influenza A(H1)pdm09 o predominantemente detetado. Nas crianças com menos de 4 anos o vírus influenza foi detetado numa proporção reduzida, apenas em 8,8% dos casos analisados laboratorialmente, sendo o agente mais detetado neste grupo etário, o vírus sincicial respiratório (dados não mostrados). A Rede Portuguesa de Laboratórios para o Diagnóstico da Gripe permitiu a deteção dos vírus da gripe em meio hospitalar, incluindo doentes em internamento e UCI. Os vírus influenza A foram predominantes e detetados em maior percentagem nos jovens e adultos

COVID-19 symptoms at hospital admission vary with age and sex: results from the ISARIC prospective multinational observational study

Background: The ISARIC prospective multinational observational study is the largest cohort of hospitalized patients with COVID-19. We present relationships of age, sex, and nationality to presenting symptoms. Methods: International, prospective observational study of 60 109 hospitalized symptomatic patients with laboratory-confirmed COVID-19 recruited from 43 countries between 30 January and 3 August 2020. Logistic regression was performed to evaluate relationships of age and sex to published COVID-19 case definitions and the most commonly reported symptoms. Results: ‘Typical’ symptoms of fever (69%), cough (68%) and shortness of breath (66%) were the most commonly reported. 92% of patients experienced at least one of these. Prevalence of typical symptoms was greatest in 30- to 60-year-olds (respectively 80, 79, 69%; at least one 95%). They were reported less frequently in children (≤ 18 years: 69, 48, 23; 85%), older adults (≥ 70 years: 61, 62, 65; 90%), and women (66, 66, 64; 90%; vs. men 71, 70, 67; 93%, each P &lt; 0.001). The most common atypical presentations under 60 years of age were nausea and vomiting and abdominal pain, and over 60 years was confusion. Regression models showed significant differences in symptoms with sex, age and country. Interpretation: This international collaboration has allowed us to report reliable symptom data from the largest cohort of patients admitted to hospital with COVID-19. Adults over 60 and children admitted to hospital with COVID-19 are less likely to present with typical symptoms. Nausea and vomiting are common atypical presentations under 30 years. Confusion is a frequent atypical presentation of COVID-19 in adults over 60 years. Women are less likely to experience typical symptoms than men

A Lab-on-a-Chip Approach for the Detection of the Quarantine Potato Cyst Nematode <i>Globodera pallida</i>

The potato cyst nematode (PCN), Globodera pallida, has acquired significant importance throughout Europe due to its widespread prevalence and negative effects on potato production. Thus, rapid and reliable diagnosis of PCN is critical during surveillance programs and for the implementation of control measures. The development of innovative technologies to overcome the limitations of current methodologies in achieving early detection is needed. Lab-on-a-chip devices can swiftly and accurately detect the presence of certain nucleotide sequences with high sensitivity and convert the presence of biological components into an understandable electrical signal by combining biosensors with microfluidics-based biochemical analysis. In this study, a specific DNA-probe sequence and PCR primers were designed to be used in a magnetoresistive biosensing platform to amplify the internal transcribed spacer region of the ribosomal DNA of G. pallida. Magnetic nanoparticles were used as the labelling agents of asymmetric PCR product through biotin–streptavidin interaction. Upon target hybridization to sensor immobilized oligo probes, the fringe field created by the magnetic nanoparticles produces a variation in the sensor’s electrical resistance. The detection signal corresponds to the concentration of target molecules present in the sample. The results demonstrate the suitability of the magnetic biosensor to detect PCR target product and the specificity of the probe, which consistently distinguishes G. pallida (DV/V > 1%) from other cyst nematodes (DV/V < 1%), even when DNA mixtures were tested at different concentrations. This shows the magnetic biosensor’s potential as a bioanalytical device for field applications and border phytosanitary inspections

Fc receptor-like 3 (−169T>C) polymorphism increases the risk of tendinopathy in volleyball athletes: a case control study

Abstract Background Tendinopathy pathogenesis is associated with inflammation. Regulatory T (Treg) cells contribute to early tissue repair through an anti-inflammatory action, with the forkhead box P3 (FOXP3) transcription factor being essential for Treg function, and the FC-receptor-like 3 (FCRL3) possibly negatively regulating Treg function. FCRL3 –169T>C and FOXP3 –2383C>T polymorphisms are located near elements that regulate respective genes expression, thus it was deemed relevant to evaluate these polymorphisms as risk factors for tendinopathy development in athletes. Methods This case-control study included 271 volleyball athletes (146 tendinopathy cases and 125 controls) recruited from the Brazilian Volleyball Federation. Genotyping analyses were performed using TaqMan assays, and the association of the polymorphisms with tendinopathy evaluated by multivariate logistic regression. Results Tendinopathy frequency was 63% patellar, 22% rotator cuff and 15% Achilles tendons respectively. Tendinopathy was more common in men (OR = 2.87; 95% CI = 1.67–4.93). Higher age (OR = 8.75; 95% CI = 4.33–17.69) and more years of volleyball practice (OR = 8.38; 95% CI = 3.56–19.73) were risk factors for tendinopathy. The FCRL3 –169T>C frequency was significantly different between cases and controls. After adjustment for potential confounding factors, the FCRL3 –169C polymorphism was associated with increased tendinopathy risk (OR = 1.44; 95% CI = 1.02–2.04), either considering athletes playing with tendon pain (OR = 1.98; 95% CI = 1.30–3.01) or unable to train due to pain (OR = 1.89; 95% CI = 1.01–3.53). The combined variant genotypes, FCRL3 –169TC or –169CC and FOXP3 –2383CT or –2383TT, were associated with an increased risk of tendinopathy among athletes with tendon pain (OR = 2.24; 95% CI: 1.14–4.40 and OR = 2.60; 95% CI: 1.11–6.10). The combined analysis of FCRL3 –169T>C and FOXP3 –2383C>T suggests a gene-gene interaction in the susceptibility to tendinopathy. Conclusions FCRL3 –169C allele may increase the risk of developing tendinopathy, and together with knowledge of potential risk factors (age, gender and years playing) could be used to personalize elite athletes’ training or treatment in combination with other approaches, with the aim of minimizing pathology development risk