Isolating JavaScript with Filters, Rewriting, and Wrappers

Abstract. We study methods that allow web sites to safely combine JavaScript from untrusted sources. If implemented properly, filters can prevent dangerous code from loading into the execution environment, while rewriting allows greater expressiveness by inserting run-time checks. Wrapping properties of the execution environment can prevent misuse without requiring changes to imported JavaScript. Using a formal semantics for the ECMA 262-3 standard language, we prove security properties of a subset of JavaScript, comparable in expressiveness to Facebook FBJS, obtained by combining three isolation mechanisms. The isolation guarantees of the three mechanisms are interdependent, with rewriting and wrapper functions relying on the absence of JavaScript constructs eliminated by language filters.

Refinement Types for Secure Implementations

We present the design and implementation of a typechecker for verifying security properties of the source code of cryptographic protocols and access control mechanisms. The underlying type theory is a λ-calculus equipped with refinement types for expressing pre- and post-conditions within first-order logic. We derive formal cryptographic primitives and represent active adversaries within the type theory. Well-typed programs enjoy assertion-based security properties, with respect to a realistic threat model including key compromise. The implementation amounts to an enhanced typechecker for the general purpose functional language F#; typechecking generates verification conditions that are passed to an SMT solver. We describe a series of checked examples. This is the first tool to verify authentication properties of cryptographic protocols by typechecking their source code. © 2008 IEEE

Assessing the Economic Value of a Regional Air Quality Plan

When developing an air quality plan, environmental authorities usually devise a number of individual actions, constituted by the application of both technical (end-of-pipe) and energy efficiency measures. They may range from the incentives to buy less polluting vehicles, to the enforcement of stricter rules on domestic heating. The assessment of the economic effectiveness for the society as a whole of the individual measures and of the overall plan requires a flexible support system able to quickly perform air quality impact evaluations on the specific area. One such system is RIAT+, a software package developed and tested during a series of European research projects, which has been used to evaluate costs and benefits of the Lombardy Region Air Quality Plan (PRIA), constituted by about 90 different actions to be implemented within 2020. The adoption of each measure means a certain change in the emission, which is distributed over the regional territory in different way, depending on the type of measure. A shift of the car fleet to a different EURO class, for instance, means an emission reduction only on the road network, while a reduced use of electricity may imply a lower emission of power plants at specific sites. To evaluate the effects of these emission changes, RIAT+ adopts a surrogate model approach, namely using a neural network calibrated on few results of a full chemical transport model. It is thus possible to rapidly evaluate the improvements in the population exposure and health and the consequent reduction of external costs. The final economic assessment is obtained by comparing the sum of energy savings and external cost reductions with the implementation costs of the corresponding measures

The effects of surface stripping ZnO nanorods with argon bombardment

ZnO nanorods are used in devices including field effects transistors, piezoelectric transducers, optoelectronics and gas sensors. However, for efficient and reproducible device operation and contact behaviour, surface contaminants must be removed or controlled. Here we use low doses of argon bombardment to remove surface contamination and make reproducible lower resistance contacts. Higher doses strip the surface of the nanorods allowing intrinsic surface measurements through a cross section of the material. Photoluminescence finds that the defect distribution is higher at the near-surface, falling away in to the bulk. Contacts to the n-type defect-rich surface are near-Ohmic, whereas stripping away the surface layers allows more rectifying Schottky contacts to be formed. The ability to select the contact type to ZnO nanorods offers a new way to customize device behaviour

Effects of Vacuum Annealing on the Conduction Characteristics of ZnO Nanosheets

This paper is open acess and available in full at http://www.nanoscalereslett.com/content/10/1/368 .ZnO nanosheets are a relatively new form of nanostructure and have demonstrated potential as gas-sensing devices and dye sensitised solar cells. For integration into other devices, and when used as gas sensors, the nanosheets are often heated. Here we study the effect of vacuum annealing on the electrical transport properties of ZnO nanosheets in order to understand the role of heating in device fabrication. A low cost, mass production method has been used for synthesis and characterisation is achieved using scanning electron microscopy (SEM), photoluminescence (PL), auger electron spectroscopy (AES) and nanoscale two-point probe. Before annealing, the measured nanosheet resistance displayed a non-linear increase with probe separation, attributed to surface contamination. Annealing to 300 °C removed this contamination giving a resistance drop, linear probe spacing dependence, increased grain size and a reduction in the number of n-type defects. Further annealing to 500 °C caused the n-type defect concentration to reduce further with a corresponding increase in nanosheet resistance not compensated by any further sintering. At 700 °C, the nanosheets partially disintegrated and the resistance increased and became less linear with probe separation. These effects need to be taken into account when using ZnO nanosheets in devices that require an annealing stage during fabrication or heating during use

Metarhizium anisopliae Pathogenesis of Mosquito Larvae: A Verdict of Accidental Death

Metarhizium anisopliae, a fungal pathogen of terrestrial arthropods, kills the aquatic larvae of Aedes aegypti, the vector of dengue and yellow fever. The fungus kills without adhering to the host cuticle. Ingested conidia also fail to germinate and are expelled in fecal pellets. This study investigates the mechanism by which this fungus adapted to terrestrial hosts kills aquatic mosquito larvae. Genes associated with the M. anisopliae early pathogenic response (proteinases Pr1 and Pr2, and adhesins, Mad1 and Mad2) are upregulated in the presence of larvae, but the established infection process observed in terrestrial hosts does not progress and insecticidal destruxins were not detected. Protease inhibitors reduce larval mortality indicating the importance of proteases in the host interaction. The Ae. aegypti immune response to M. anisopliae appears limited, whilst the oxidative stress response gene encoding for thiol peroxidase is upregulated. Cecropin and Hsp70 genes are downregulated as larval death occurs, and insect mortality appears to be linked to autolysis through caspase activity regulated by Hsp70 and inhibited, in infected larvae, by protease inhibitors. Evidence is presented that a traditional host-pathogen response does not occur as the species have not evolved to interact. M. anisopliae retains pre-formed pathogenic determinants which mediate host mortality, but unlike true aquatic fungal pathogens, does not recognise and colonise the larval host

Body shape and size in 6-year old children: assessment by three-dimensional photonic scanning.

BACKGROUND: Body shape and size are typically described using measures such as body mass index (BMI) and waist circumference, which predict disease risks in adults. However, this approach may underestimate the true variability in childhood body shape and size. OBJECTIVE: To use a comprehensive three-dimensional photonic scan approach to describe variation in childhood body shape and size. SUBJECTS/METHODS: At age 6 years, 3350 children from the population-based 2004 Pelotas birth cohort study were assessed by three-dimensional photonic scanner, traditional anthropometry and dual X-ray absorptiometry. Principal component analysis (PCA) was performed on height and 24 photonic scan variables (circumferences, lengths/widths, volumes and surface areas). RESULTS: PCA identified four independent components of children's body shape and size, which we termed: Corpulence, Central:peripheral ratio, Height and arm lengths, and Shoulder diameter. Corpulence showed strong correlations with traditional anthropometric and body composition measures (r>0.90 with weight, BMI, waist circumference and fat mass; r>0.70 with height, lean mass and bone mass); in contrast, the other three components showed weak or moderate correlations with those measures (all r<0.45). There was no sex difference in Corpulence, but boys had higher Central:peripheral ratio, Height and arm lengths and Shoulder diameter values than girls. Furthermore, children with low birth weight had lower Corpulence and Height and arm lengths but higher Central:peripheral ratio and Shoulder diameter than other children. Children from high socio-economic position (SEP) families had higher Corpulence and Height and arm lengths than other children. Finally, white children had higher Corpulence and Central:peripheral ratio than mixed or black children. CONCLUSIONS: Comprehensive assessment by three-dimensional photonic scanning identified components of childhood body shape and size not captured by traditional anthropometry or body composition measures. Differences in these novel components by sex, birth weight, SEP and skin colour may indicate their potential relevance to disease risks.This article is based on data from the study ‘Pelotas Birth Cohort, 2004’ conducted by the Postgraduate Program in Epidemiology at Federal University of Pelotas, in collaboration with Brazilian Public Health Association (ABRASCO). The 2004 birth cohort study is supported by the Wellcome Trust through the scheme called ‘Major Awards for Latin America on Health Consequences of Population Change’. The World Health Organization, Brazilian National research Council (CNPq) and Brazilian Ministry of Health have supported previous phase of the study. LPS is supported by ‘Science without Borders’ Brazilian scheme under protocol number 201801/2014-0.This is the final version of the article. It first appeared from Nature Publishing Group via http://dx.doi.org/10.1038/ijo.2016.3

Metarhizium brunneum Blastospore Pathogenesis in Aedes aegypti Larvae: Attack on Several Fronts Accelerates Mortality

Aedes aegypti is the vector of a wide range of diseases (e.g. yellow fever, dengue, Chikungunya and Zika) which impact on over half the world's population. Entomopathogenic fungi such as Metarhizium anisopliae and Beauveria bassiana have been found to be highly efficacious in killing mosquito larvae but only now are the underlying mechanisms for pathogenesis being elucidated. Recently it was shown that conidia of M. anisopliae caused stress induced mortality in Ae. aegypti larvae, a different mode of pathogenicity to that normally seen in terrestrial hosts. Blastospores constitute a different form of inoculum produced by this fungus when cultured in liquid media and although blastospores are generally considered to be more virulent than conidia no evidence has been presented to explain why. In our study, using a range of biochemical, molecular and microscopy methods, the infection process of Metarhizium brunneum (formerly M. anisopliae) ARSEF 4556 blastospores was investigated. It appears that the blastospores, unlike conidia, readily adhere to and penetrate mosquito larval cuticle. The blastospores are readily ingested by the larvae but unlike the conidia are able infect the insect through the gut and rapidly invade the haemocoel. The fact that pathogenicity related genes were upregulated in blastospores exposed to larvae prior to invasion, suggests the fungus was detecting host derived cues. Similarly, immune and defence genes were upregulated in the host prior to infection suggesting mosquitoes were also able to detect pathogen-derived cues. The hydrophilic blastospores produce copious mucilage, which probably facilitates adhesion to the host but do not appear to depend on production of Pr1, a cuticle degrading subtilisin protease, for penetration since protease inhibitors did not significantly alter blastospore virulence. The fact the blastospores have multiple routes of entry (cuticle and gut) may explain why this form of the inoculum killed Ae. aegypti larvae in a relatively short time (12-24hrs), significantly quicker than when larvae were exposed to conidia. This study shows that selecting the appropriate form of inoculum is important for efficacious control of disease vectors such as Ae. aegypti

A Multicenter Retrospective Survey regarding Diabetic Ketoacidosis Management in Italian Children with Type 1 Diabetes

We conducted a retrospective survey in pediatric centers belonging to the Italian Society for Pediatric Diabetology and Endocrinology. The following data were collected for all new-onset diabetes patients aged 0-18 years: DKA (pH < 7.30), severe DKA (pH < 7.1), DKA in preschool children, DKA treatment according to ISPAD protocol, type of rehydrating solution used, bicarbonates use, and amount of insulin infused. Records (n = 2453) of children with newly diagnosed diabetes were collected from 68/77 centers (87%), 39 of which are tertiary referral centers, the majority of whom (n = 1536, 89.4%) were diagnosed in the tertiary referral centers. DKA was observed in 38.5% and severe DKA in 10.3%. Considering preschool children, DKA was observed in 72%, and severe DKA in 16.7%. Cerebral edema following DKA treatment was observed in 5 (0.5%). DKA treatment according to ISPAD guidelines was adopted in 68% of the centers. In the first 2 hours, rehydration was started with normal saline in all centers, but with different amount. Bicarbonate was quite never been used. Insulin was infused starting from third hour at the rate of 0.05-0.1 U/kg/h in 72% of centers. Despite prevention campaign, DKA is still observed in Italian children at onset, with significant variability in DKA treatment, underlying the need to share guidelines among centers

Enhanced Long-Path Electrical Conduction in ZnO Nanowire Array Devices Grown via Defect-Driven Nucleation

Vertical arrays of nanostructures have been widely used as major components in some of the most ground-breaking modern research-based devices, and ZnO nanowires have received particular attention because of their favorable electronic properties. Using a local multiprobe technique to measure the properties of individual ZnO nanowires in vertical arrays, we show for the first time that for metal-catalyzed ZnO nanowire growth the electrical contribution of individual wires to a device is highly dependent on the fate of the catalyst nanoparticle during growth. To overcome the limitations of metal-catalyzed growth, nanowires grown from a defect-driven nucleation process are shown to provide high-quality device structures with excellent long-path electrical conduction