ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware

Billions of users rely on the security of the Android platform to protect phones, tablets, and many different types of consumer electronics. While Android's permission model is well studied, the enforcement of the protection policy has received relatively little attention. Much of this enforcement is spread across system services, taking the form of hard-coded checks within their implementations. In this paper, we propose Authorization Check Miner (ACMiner), a framework for evaluating the correctness of Android's access control enforcement through consistency analysis of authorization checks. ACMiner combines program and text analysis techniques to generate a rich set of authorization checks, mines the corresponding protection policy for each service entry point, and uses association rule mining at a service granularity to identify inconsistencies that may correspond to vulnerabilities. We used ACMiner to study the AOSP version of Android 7.1.1 to identify 28 vulnerabilities relating to missing authorization checks. In doing so, we demonstrate ACMiner's ability to help domain experts process thousands of authorization checks scattered across millions of lines of code

2016-2017 Sanctuary Series - January 26, 2017

https://spiral.lynn.edu/sanctuary_series/1006/thumbnail.jp

Report of the ICES Working Group on Marine Mammal Ecology (WGMME)

131 pages.-- This work is licensed under the Creative Commons Attribution 4.0 International License (CC BY 4.0)Five terms of reference (ToRs) were addressed at the working group. The first three terms of reference were standing ones. Under ToR A, new information on cetacean and seal population abundance, distribution, and population/stock structure, was reviewed, including information on vagrancy in cetacean and pinniped species. For cetaceans, coverage from the latest SCANS-IV survey (summer 2022) was presented as well as the results of recent regional/national surveys, particularly those in the Bay of Biscay and around the Iberian Peninsula. Updates on population estimates and distribution were provided for particular species studies, such as some coastal bottlenose dolphin populations. For seals, latest monitoring results were given for harbour, grey, and Baltic and Saimaa ringed seals. In addition, where possible, local long-term trends were illustrated for those species, based on earlier efforts by WGMME to assemble these data into a seal database. For both species’ groups, recent records of vagrant species were summarised. Under ToR B, cetacean and seal management frameworks in the North Atlantic were discussed, with an overview of the EU Maritime Spatial Planning Directive, and examples from the United Kingdom, Spain and the Faroe Islands of national management frameworks regarding marine mammals.ToR C provided an overview of new published information with regards to anthropogenic threats to marine mammal populations following on from the review by WGMME in 2015 (ICES, 2015) and subsequent updates. These were considered under the following headings: cumulative effects, fishery interactions, chemical pollution including marine debris, underwater noise, ship strikes and other physical trauma, tourism disturbance, climate change, and new pathogens (including avian influenza). ToR D focused upon bycatch. In support of WGBYC, this ToR aimed to contribute to the Roadmap for ICES PETS bycatch advice. ToR E involved liaison with other WGs. The Chairs of the newly-formed WGJCDP introduced to WGMME members, the Joint Cetacean Database Programme, which is to be hosted by the ICES Data Centre. The scope to collect information on other marine species besides cetaceans was discussed. A meeting with another newly formed ICES working group, on Marine Protected Areas, was planned but was deferred at the request of that group. On behalf of the working group, the Chairs would like to thank The Swedish Museum of Natural History for hosting the meetingN

Influence of macrofaunal assemblages and environmental heterogeneity on microphytobenthic production in experimental systems

Despite the complexity of natural systems, heterogeneity caused by the fragmentation of habitats has seldom been considered when investigating ecosystem processes. Empirical approaches that have included the influence of heterogeneity tend to be biased towards terrestrial habitats; yet marine systems offer opportunities by virtue of their relative ease of manipulation, rapid response times and the well-understood effects of macrofauna on sediment processes. Here, the influence of heterogeneity on microphytobenthic production in synthetic estuarine assemblages is examined. Heterogeneity was created by enriching patches of sediment with detrital algae (Enteromorpha intestinalis) to provide a source of allochthonous organic matter. A gradient of species density for four numerically dominant intertidal macrofauna (Hediste diversicolor, Hydrobia ulvae, Corophium volutator, Macoma balthica) was constructed, and microphytobenthic biomass at the sediment surface was measured. Statistical analysis using generalized least squares regression indicated that heterogeneity within our system was a significant driving factor that interacted with macrofaunal density and species identity. Microphytobenthic biomass was highest in enriched patches, suggesting that nutrients were obtained locally from the sediment–water interface and not from the water column. Our findings demonstrate that organic enrichment can cause the development of heterogeneity which influences infaunal bioturbation and consequent nutrient generation, a driver of microphytobenthic production

Species effects on ecosystem processes are modified by faunal responses to habitat composition.

Heterogeneity is a well-recognized feature of natural environments, and the spatial distribution and movement of individual species is primarily driven by resource requirements. In laboratory experiments designed to explore how different species drive ecosystem processes, such as nutrient release, habitat heterogeneity is often seen as something which must be rigorously controlled for. Most small experimental systems are therefore spatially homogeneous, and the link between environmental heterogeneity and its effects on the redistribution of individuals and species, and on ecosystem processes, has not been fully explored. In this paper, we used a mesocosm system to investigate the relationship between habitat composition, species movement and sediment nutrient release for each of four functionally contrasting species of marine benthic invertebrate macrofauna. For each species, various habitat configurations were generated by selectively enriching patches of sediment with macroalgae, a natural source of spatial variability in intertidal mudflats. We found that the direction and extent of faunal movement between patches differs with species identity, density and habitat composition. Combinations of these factors lead to concomitant changes in nutrient release, such that habitat composition effects are modified by species identity (in the case of NH4-N) and by species density (in the case of PO4-P). It is clear that failure to accommodate natural patterns of spatial heterogeneity in such studies may result in an incomplete understanding of system behaviour. This will be particularly important for future experiments designed to explore the effects of species richness on ecosystem processes, where the complex interactions reported here for single species may be compounded when species are brought together in multi-species combinations