Monitoring web applications for vulnerability discovery and removal under attack

Tese de mestrado, Engenharia Informática (Arquitetura, Sistemas e Redes de Computadores) Universidade de Lisboa, Faculdade de Ciências, 2018Web applications are ubiquitous in our everyday lives, as they are deployed in the most diverse contexts and support a variety of services. The correctness of these applications, however, can be compromised by vulnerabilities left in their source code, often incurring in nefarious consequences, such as the theft of private data and the adulteration of information. This dissertation proposes a solution for the automatic detection and removal of vulnerabilities in web applications programmed in the PHP language. By monitoring the user interactions with the web applications with traditional attack discovery tools, it is possible to identify malicious inputs that are eventually provided by attackers. These in- puts are then explored by a directed static analysis approach, allowing for the discovery of potential security issues and the correction of bugs in the program. The solution was implemented and validated with a set of vulnerable web applications. The experimental results demonstrate that the tool is capable of detecting and correcting SQL Injection and XSS vulnerabilities. In total 174 vulnerabilities were found in 5 web applications, where 2 of these were previously unknown by the research community(i.e., they were ”zero-day” vulnerabilities)

Costs and benefits of bevacizumab vial sharing for the treatment of retinal diseases

Antiangiogenic therapy has proved to be an important therapeutic tool for many retinal vascular diseases; however, its availability is limited in developing countries. This study sought to describe the bevacizumab vial sharing process and to evaluate the impact of this repackaging system on the costs incurred in a Brazilian public hospital. Method This retrospective study compared the number and costs of intravitreal antiangiogenic injections approved via court order in the first year of the study (2015) to the number and costs of the bevacizumab injections provided through the use of vial sharing in the second year of the study (2016). Vial sharing consists of the traditional process used to repackage bevacizumab; in this case, however, the drug samples used were the residual volume from the preparation of bevacizumab for oncology patients. The hospital adhered to the guidelines established by the Brazilian Health Surveillance Agency (ANVISA). Results In the first year of the study and using medication obtained through court orders, 550 intravitreal injections were performed in the ophthalmology ambulatory care center. Based on local pricing tables, the total cost of the medication was BRL$1,036,056.25 (USD$267,546.58), and the average cost of each application was BRL$1883.74 (USD$486.45). In the second year of the study, 1081 intravitreal applications were performed at the same hospital using doses obtained through bevacizumab vial sharing. The total cost was BRL$21,942.49 (USD$5663.30) and the per-unit cost was BRL$20.30, or USD$5.23 (a savings of 97.88%). Conclusion This study found that bevacizumab vial sharing led to a significant reduction in public health care costs associated with antiangiogenic treatment and increased the availability of the drug to public health care patients. These results can be extrapolated to other types of drugs and health care systems1

Optical fiber relative humidity sensor based on a FBG with a di-ureasil coating

In this work we proposed a relative humidity (RH) sensor based on a Bragg grating written in an optical fiber, associated with a coating of organo-silica hybrid material prepared by the sol-gel method. The organo-silica-based coating has a strong adhesion to the optical fiber and its expansion is reversibly affected by the change in the RH values (15.0–95.0%) of the surrounding environment, allowing an increased sensitivity (22.2 pm/%RH) and durability due to the presence of a siliceous-based inorganic component. The developed sensor was tested in a real structure health monitoring essay, in which the RH inside two concrete blocks with different porosity values was measured over 1 year. The results demonstrated the potential of the proposed optical sensor in the monitoring of civil engineering structures

THINK4JOBS TOOLKIT Ten work-based learning scenarios

The current report is the first Intellectual Output (Output 1) of the THINK4JOBS initiative, which aims at improving students’ CT skills and dispositions by promoting collaboration between Higher Education Institutions (HEIs) and Labour Market Organizations (LMOs). This is the case since according to relevant research findings, LMOs seem to expect employees to acquire CT skills in order for them to successfully address the needs of their work positions. Under this rationale, partners of the two aforementioned fields have decided to redesign and ameliorate HEI curricula by blending both HEIs and LMOs’ experience, knowledge and recommendations, while instilling this evidence into students’ apprenticeships. Apprenticeships offering practice in professional skills can actively lead to students’ understanding of their working environment and simultaneously scaffold CT development with the employment of mentoring. For this reason, the THINK4JOBS initiative exploits apprenticeships as a means of CT exploration and learning through which bridging the gap between HEIs and LMOs can be attained. Therefore, it is considered that in this fashion, students will be acquainted with the concept of CT and also be in the position of transferring it into their work settings, when entering the workplace. It should be noted that partners of the THINK4JOBS project are representatives from five disciplines (teacher training, English as a foreign language – EFL, business economics, business informatics and veterinary medicine), who formed teams between HEI and LMOs for each of these disciplines in order for ideas to be pluralized and CT to be explored across a variety of domains. The current report has a twofold aim: · to trace and map the methods and/or techniques that CT is currently employed in HEIs and LMOs’ apprenticeships and apprenticeships focusing on any possible convergent or divergent points; · to thoroughly describe and suggest work-based, learning scenarios that could bridge the gap between HEIs and LMOs’ curricula and simultaneously attempt to safeguard the requirements for graduates’ CT development and improvement. Mapping the Gap Regarding the first aim of the report, three research methods (observation, focus groups and documentary analysis) were employed in combination with three instruments (observational matrix, focus group rubric and documentary analysis rubric). Each research instrument includes a set of variables, which are majorly organized in three categories: I. Pedagogical aspects of CT development (including class objectives, teaching strategies/methods, tools/materials and evaluation regarding CT) II. CT aspects (including the ways CT is nurtured, triggered and explicitly taught during instruction) III. Implementation of CT (including elements of CT presence in these disciplines) For each variable, a set of indicators, drawing on CT and pedagogical theory was also developed in order for the aforementioned research instruments to be constructed. Stakeholders (HEI students and instructors as well as LMO tutors, employers and employees) participated in the mapping process. Data were collected during the winter semester 2020-2021 and a total of 134 participants from all partner countries participated in the focus groups discussions. Regarding the other two research methods, observation was carried out in at least three apprenticeships or courses, with at least four observation sessions for each of them. As far as it concerns the documentary analysis, documents supporting the courses/apprenticeships, which were observed, were analyzed according to the relevant rubric. Findings from each research instrument were triangulated according to each discipline and are thoroughly described in the current report in separate sections. However, some general conclusions seem to derive from a holistic approach to data analysis. Initially, it was suggested that even though a definitive “gap” between HEIs and LMOs does not seem to exist, there is a different context in CT approach since universities usually employ different learning activities focusing more on career preparation with long-term goals while LMOs follow compact and short-term, learning and teaching strategies. Additionally, findings suggested that CT is a newly-added requirement for the workplace and that HEIs and LMOs do not opt for the same terminology when referring to the concept –meaning that HEIs usually select scientific terms. Another element, which is evident is that CT in HEIs is commonly expressed through a declarative manner, while in LMOs application to specific cases follows the procedural manner. Learning Scenarios Regarding the second aim of this report, each team of HEI and LMO constructed two learning scenarios according to the findings, the sets of recommendations and the already identified educational needs. From the ten work-based scenarios developed, one from every discipline was organized in a syllabus form so that it can be further utilized for the CT blended apprenticeship curricula. This information highlights the importance of the scenarios, since they will set the stage for introducing CT at programme and course levels by utilizing Intellectual Output 3 activities to design work-based curricula for each country and dynamically enhance collaboration between HEIs and LMOs. Under this rationale, this scenario includes descriptive information about the themes, concepts, aims and learning outcomes, the duration, the teaching approach, the learning environment and the evaluation regarding both domain specific and CT related elements. First Intellectual Output Impact The current report is of major importance for the continuation of the THINK4JOBS project since it sets the stage for a sequence of activities carried out during the Second and Third Intellectual Outputs aiming at the successful application of the blended apprenticeships curricula. Besides the report’s importance for the project continuation, it may also stand as a useful Toolkit for teachers, students and employers regarding the development of CT in the workplace. In general, according to research findings, HEIs and LMOs are differently goal-oriented regarding CT and the reason for this divergence lies in the very nature and general context of the two organizations. In other words, HEIs intend to prepare students for all jobs related to a domain, while LMOs aim at preparing an employee for a specific job in a specific organization. This conclusion seems to indicate a paradox: the two organizations work in parallel but they do not share common understanding. This is the reason why the First Intellectual Output may be an invaluable means in the exploration of CT through different perspectives; actively supporting HEI and LMO collaboration in the quest for common ground

Pervasive gaps in Amazonian ecological research

Biodiversity loss is one of the main challenges of our time,1,2 and attempts to address it require a clear un derstanding of how ecological communities respond to environmental change across time and space.3,4 While the increasing availability of global databases on ecological communities has advanced our knowledge of biodiversity sensitivity to environmental changes,5–7 vast areas of the tropics remain understudied.8–11 In the American tropics, Amazonia stands out as the world’s most diverse rainforest and the primary source of Neotropical biodiversity,12 but it remains among the least known forests in America and is often underrepre sented in biodiversity databases.13–15 To worsen this situation, human-induced modifications16,17 may elim inate pieces of the Amazon’s biodiversity puzzle before we can use them to understand how ecological com munities are responding. To increase generalization and applicability of biodiversity knowledge,18,19 it is thus crucial to reduce biases in ecological research, particularly in regions projected to face the most pronounced environmental changes. We integrate ecological community metadata of 7,694 sampling sites for multiple or ganism groups in a machine learning model framework to map the research probability across the Brazilian Amazonia, while identifying the region’s vulnerability to environmental change. 15%–18% of the most ne glected areas in ecological research are expected to experience severe climate or land use changes by 2050. This means that unless we take immediate action, we will not be able to establish their current status, much less monitor how it is changing and what is being lostinfo:eu-repo/semantics/publishedVersio

How genomics can help biodiversity conservation

The availability of public genomic resources can greatly assist biodiversity assessment, conservation, and restoration efforts by providing evidence for scientifically informed management decisions. Here we survey the main approaches and applications in biodiversity and conservation genomics, considering practical factors, such as cost, time, prerequisite skills, and current shortcomings of applications. Most approaches perform best in combination with reference genomes from the target species or closely related species. We review case studies to illustrate how reference genomes can facilitate biodiversity research and conservation across the tree of life. We conclude that the time is ripe to view reference genomes as fundamental resources and to integrate their use as a best practice in conservation genomics.info:eu-repo/semantics/publishedVersio

The era of reference genomes in conservation genomics

Progress in genome sequencing now enables the large-scale generation of reference genomes. Various international initiatives aim to generate reference genomes representing global biodiversity. These genomes provide unique insights into genomic diversity and architecture, thereby enabling comprehensive analyses of population and functional genomics, and are expected to revolutionize conservation genomics

The era of reference genomes in conservation genomics

info:eu-repo/semantics/publishedVersio

The era of reference genomes in conservation genomics

Progress in genome sequencing now enables the large-scale generation of reference genomes. Various international initiatives aim to generate reference genomes representing global biodiversity. These genomes provide unique insights into genomic diversity and architecture, thereby enabling comprehensive analyses of population and functional genomics, and are expected to revolutionize conservation genomics