VFFINDER: A Graph-based Approach for Automated Silent Vulnerability-Fix Identification

The increasing reliance of software projects on third-party libraries has raised concerns about the security of these libraries due to hidden vulnerabilities. Managing these vulnerabilities is challenging due to the time gap between fixes and public disclosures. Moreover, a significant portion of open-source projects silently fix vulnerabilities without disclosure, impacting vulnerability management. Existing tools like OWASP heavily rely on public disclosures, hindering their effectiveness in detecting unknown vulnerabilities. To tackle this problem, automated identification of vulnerability-fixing commits has emerged. However, identifying silent vulnerability fixes remains challenging. This paper presents VFFINDER, a novel graph-based approach for automated silent vulnerability fix identification. VFFINDER captures structural changes using Abstract Syntax Trees (ASTs) and represents them in annotated ASTs. VFFINDER distinguishes vulnerability-fixing commits from non-fixing ones using attention-based graph neural network models to extract structural features. We conducted experiments to evaluate VFFINDER on a dataset of 36K+ fixing and non-fixing commits in 507 real-world C/C++ projects. Our results show that VFFINDER significantly improves the state-of-the-art methods by 39-83% in Precision, 19-148% in Recall, and 30-109% in F1. Especially, VFFINDER speeds up the silent fix identification process by up to 47% with the same review effort of 5% compared to the existing approaches.Comment: Accepted by IEEE KSE 202

SWIPT-enabled cooperative wireless IoT networks with friendly jammer and eavesdropper: Outage and intercept probability analysis

Physical layer security (PLS) and simultaneous wireless information and power transfer (SWIPT) in cooperative relaying have gained great interest as technologies for security and energy enhance ment in Internet-of-Things (IoT) networks. In this work, we investigate PLS for a SWIPT- and AF-enabled cooperative wireless IoT system, consisting of one source, multiple energy harvesting (EH) relays, and one destination, in the presence of an eavesdropper that tries to overhear the confidential information. Furthermore, an EH-friendly jammer is deployed to transmit jamming signals aimed at the eavesdropper to improve the security system. In this context, a low-complexity, sub-optimal, but efficient relay selection method is proposed. More specifically, the relay is selected to convey information such that it has the best channel to the source. Based on the proposed system model, the performance analysis of the intercept probability (IP), asymptotic IP, and non-zero secrecy probability (NZSP) is analyzed by considering the time switching (TS)-based relaying strategy. Particularly, the exact closed-form expression of IP is achieved by applying modified Bessel function expansion. Monte-Carlo simulations are employed to corroborate the correctness and efficiency of our mathematical analysis. The time splitting factor α makes variations on the IP of about 3× as α ∈ [0.1, 0.8]. However, a dramatic reduction of the IP up to 317× is observed as α increases from 0.8 to 0.9.Web of Science11861778616

Hemorrhagic Meningioma With Symptom of Convulsion: A Rare Presentation of Parietal Meningioma

Meningioma is the most common, extra-axial, non-glial intracranial tumor with an incidence of 2.3-5.5/100 000, accounting for 20%-30% of all primary brain tumor diagnoses in adults. Meningiomas associated with intratumoral hemorrhage are very rare occurring in 0.5%-2.4%. of individuals. Herein, we report a rare case of hemorrhagic meningioma with the symptom of convulsion. The case was a 68-year-old woman admitted to the hospital with severe headache and convulsions. Computed tomography revealed an increase in heterogeneous lesion measuring 4 × 3 × 2.5 cm at the right parietal lobe. Brain magnetic resonance imaging (MRI) showed a grossly stable homogeneously enhancing extra-axial mass measuring 43 × 33 × 28 mm, small calcified peripheral, intratumoral hemorrhage. Histopathology showed a multi-celled meningioma with bleeding areas (WHO grade I)

Numerical simulation of all-normal dispersion visible to near-infrared supercontinuum generation in photonic crystal fibers with core filled chloroform

This study proposes a photonic crystal fiber made of fused silica glass, with the core infiltrated with chloroform as a new source of supercontinuum (SC) spectrum. We numerically study the guiding properties of the fiber structure in terms of characteristic dispersion and mode area of the fundamental mode. Based on the results, we optimized the structural geometries of the CHCl3-core photonic crystal fiber to support the broadband SC generations. The fiber structure with a lattice constant of 1 μm, a filling factor of 0.8, and the diameter of the first-ring air holes equaling 0.5 μm operates in all-normal dispersion. The SC with a broadened spectral bandwidth of 0.64 to 1.80 μm is formed by using a pump pulse with a wavelength of 850 nm, 120 fs duration, and power of 0.833 kW. That fiber would be a good candidate for all-fiber SC sources as cost-effective alternative to glass core fibers

Carbon dioxide reforming of methane over modified iron-cobalt alumina catalyst : Role of promoter

Cobalt-based catalysts are widely employed in methane dry reforming but tend to deactivate quickly due to coke deposits and metal sintering. To enhance the performance, iron, a cost-effective promoter, is added, improving cobalt's metal dispersibility, reducibility, and basicity on the support. This addition accelerates carbon gasification, effectively inhibiting coke deposition. Methods: A series of iron-doped cobalt alumina MFe-5Co/Al2O3 (M= 0, 0.4, 0.8, 1, 2 wt.%) were prepared via simple incipient-wetness impregnation. The catalysts were thoroughly characterized via modern techniques including BET, XRD, H2-TPR, CO2-TPD. Significant findings: The addition of iron had a minimal impact on the properties of γ-Al2O3, but it significantly affected the dispersibility of cobalt. At an optimal dosage of 0.8 wt.%, there was a notable decrease of 29.44% in Co3O4 particle size. However, excessive iron loading induced agglomeration of Co3O4, which was reversible. The presence of iron also resulted in a decrease in the reduction temperature of Co3O4. The material's basicity was primarily influenced by the loading of iron, reaching its highest value of 705.7 μmol CO2 g−1 in the 2Fe-5Co/Al2O3. The correlation between catalytic activity and the physicochemical properties of the material was established. The 0.8Fe-5Co/Al2O3 sample exhibited excellent performance due to the favorable dispersibility of cobalt, its reducibility, and its affordable basicity

A Framework for Securing Component-Based Applications

JAIST 21世紀COEシンポジウム2008「検証進化可能電子社会」= JAIST 21st Century COE Symposium 2008 Verifiable and Evolvable e-Society, 開催：2008年3月3日～4日, 開催場所：北陸先端科学技術大学院大学GRP研究員発表会　セッションB-2発表資

Early outcomes of total hip arthroplasty using point-of-care manufactured patient-specific instruments: a single university hospital’s initial experience

Abstract Background The use of 3D-printed Patient-Specific Instruments (PSI) has been investigated to enhance the postoperative functional results in total hip arthroplasty (THA) and has been recognized as an innovative approach for the optimal alignment of hip implant components. Point-of-care production is gradually becoming the norm for PSI manufacturing. The purpose of this article is to assess the accuracy and safety of PSI for total hip arthroplasty performed at the point-of-care in Vietnam. Methods 34 THA cases were assessed in this prospective study. A template for the size and orientation of the implant and the design of the PSI was generated using data from preoperative 3D computed tomography (CT) scanning of the lower limb. The principal surgeon determined the implants’ position and PSI design directly using the software. The PSI is then produced using a 3D-compatible resin printer in our manufacturing hospital. The PSI, consisting of an acetabulum and a femoral component placed press-fit on the bony surface, guided surgeons to precisely ream the acetabulum and cut the femoral neck according to the pre-planned plane. Postoperative CT scanning was obtained and superimposed onto the 3D model of the implant to evaluate the accuracy of the procedure by comparing the orientation values of the cup and the alignment of the stem between the planned and the actual results. Intra- and postoperative clinical parameters of surgery, including surgical time, intra-operative blood loss, complications, and the first ambulation, were also recorded to evaluate the safety of the surgery. Results The preparation for PSI required an average of 3 days. 94% of cup size and 91% of stem size were correctly selected. The mean values of postoperative inclination and anteversion were 44.2° ± 4.1° and 19.2° ± 5.6°, respectively. 64.7% of cases deviated from planned within the ± 50 range and 94.1% within the ± 10° range. There was no significant statistical difference between the planned and the achieved values of stem anteversion, osteotomy height, and leg length discrepancy (p > 0.05). The average surgical time was 82.5° ± 10.8 min, and the intraoperative blood loss was estimated at 317.7° ± 57.6 ml. 64.7% of patients could walk on the day of surgery. There were no complications reported. Conclusions The point-of-care manufactured PSI is a useful solution for improving the accuracy of total hip arthroplasty surgery, especially in restoring implant orientation and reducing leg length discrepancy. However, long-term clinical follow-up evaluation is needed to confirm the efficacy and safety of this approach

Low pump power coherent supercontinuum generation in heavy metal oxide solid-core photonic crystal fiber infiltrated with carbon tetrachloride covering 930 – 2500 nm

All-normal dispersion supercontinuum (ANDi SC) generation in a lead-bismuth- gallate glass solid-core photonic crystal fiber (PCF) with cladding air-holes infiltrated with carbon tetrachloride (CCl4) is experimentally investigated and numerically verified. The liquid infiltration results in additional degrees of freedom that are complimentary to conventional dispersion engineering techniques and that allow the design of soft-glass ANDi fibers with an exceptionally flat near-zero dispersion profile. The unique combination of high nonlinearity and low normal dispersion enables the generation of a coherent, low-noise SC covering 0.93–2.5 μm requiring only 12.5 kW of pump peak power delivered by a standard ultrafast erbium-fiber laser with 100 MHz pulse repetition rate (PRR). This is a much lower peak power level than has been previously required for the generation of ANDi SC with bandwidths exceeding one octave in silica- or soft-glass fibers. Our results show that liquid-composite fibers are a promising pathway for scaling the PRR of ANDi SC sources by making the concept accessible to pump lasers with hundreds of megahertz of gigahertz PRR that have limited peak power per pulse but are often required in applications such as high-speed nonlinear imaging, optical communications, or frequency metrology. Furthermore, due to the overlap of the SC with the major gain bands of many rare-earth fiber amplifiers, our source could serve as a coherent seed for low-noise ultrafast lasers operating in the short-wave infrared spectral region