44 research outputs found

    Putting Structure into Fluidized Bed – From Concept to Industrial Applications

    Get PDF
    Structures of particles, particle agglomerates, distributors, and internals have significantly influence on hydrodynamics and transfer behaviors of the dense gas-solid fluidized bed. For nanomaterial production, the particle surface and their agglomerated structures directly influence the fluidization behaviors; while for coal to chemical process, the distributors, internals play an important role in regime transient, and hydrodynamics. Carbon nanotubes mass production, coal to chemicals process. and fuel production were employed as examples to describe the concept of putting structures into fluidized bed, and then to put these structures into industrial applications

    Obfuscation-resilient Android Malware Analysis Based on Contrastive Learning

    Full text link
    Due to its open-source nature, Android operating system has been the main target of attackers to exploit. Malware creators always perform different code obfuscations on their apps to hide malicious activities. Features extracted from these obfuscated samples through program analysis contain many useless and disguised features, which leads to many false negatives. To address the issue, in this paper, we demonstrate that obfuscation-resilient malware analysis can be achieved through contrastive learning. We take the Android malware classification as an example to demonstrate our analysis. The key insight behind our analysis is that contrastive learning can be used to reduce the difference introduced by obfuscation while amplifying the difference between malware and benign apps (or other types of malware). Based on the proposed analysis, we design a system that can achieve robust and interpretable classification of Android malware. To achieve robust classification, we perform contrastive learning on malware samples to learn an encoder that can automatically extract robust features from malware samples. To achieve interpretable classification, we transform the function call graph of a sample into an image by centrality analysis. Then the corresponding heatmaps are obtained by visualization techniques. These heatmaps can help users understand why the malware is classified as this family. We implement IFDroid and perform extensive evaluations on two widely used datasets. Experimental results show that IFDroid is superior to state-of-the-art Android malware familial classification systems. Moreover, IFDroid is capable of maintaining 98.2% true positive rate on classifying 8,112 obfuscated malware samples

    Multi-path exploration guided by taint and probability against evasive malware

    Get PDF
    Static analysis is often impeded by malware obfuscation techniques, such as encryption and packing, whereas dynamic analysis tends to be more resistant to obfuscation by leveraging concrete execution information. Unfortunately, malware can employ evasive techniques to detect the analysis environment and alter its behavior accordingly. While known evasive techniques can be explicitly dismantled, the challenge lies in generically dismantling evasions without full knowledge of their conditions or implementations, such as logic bombs that rely on uncertain conditions, let alone unsupported evasive techniques, which contain evasions without corresponding dismantling strategies and those leveraging unknown implementations. In this paper, we present Antitoxin, a prototype for automatically exploring evasive malware. Antitoxin utilizes multi-path exploration guided by taint analysis and probability calculations to effectively dismantle evasive techniques. The probabilities of branch execution are derived from dynamic coverage, while taint analysis helps identify paths associated with evasive techniques that rely on uncertain conditions. Subsequently, Antitoxin prioritizes branches with lower execution probabilities and those influenced by taint analysis for multi-path exploration. This is achieved through forced execution, which forcefully sets the outcomes of branches on selected paths. Additionally, Antitoxin employs active anti-evasion countermeasures to dismantle known evasive techniques, thereby reducing exploration overhead. Furthermore, Antitoxin provides valuable insights into sensitive behaviors, facilitating deeper manual analysis. Our experiments on a set of highly evasive samples demonstrate that Antitoxin can effectively dismantle evasive techniques in a generic manner. The probability calculations guide the multi-path exploration of evasions without requiring prior knowledge of their conditions or implementations, enabling the dismantling of unsupported techniques such as C2 and significantly improving efficiency compared to linear exploration when dealing with complex control flows. Additionally, taint analysis can accurately identify branches related to logic bombs, facilitating preferential exploration

    Recurrent exercise-induced acute kidney injury by idiopathic renal hypouricemia with a novel mutation in the SLC2A9 gene and literature review

    Get PDF
    OBJETIVO: Comparar a sensibilidade do método de difusão em ágar e do método de extração utilizando as linhagens celulares RC-IAL (células fibroblásticas de rim de coelho) e HeLa (células epiteliais de carcinoma do colo do útero humano), na avaliação da citotoxicidade "in vitro" de materiais de uso médico-hospitalar. MATERIAL E MÉTODO: Foram testadas 50 amostras escolhidas por sorteio, entre as já conhecidamente positivas e negativas e identificadas como: algodão, espuma, borracha, látex, celulose e acrílico. Além, das amostras citadas foram testadas experimentalmente várias concentrações de SDS (duodecil sulfato de sódio) nas culturas celulares RC-IAL e HeLa. RESULTADOS: Das 50 amostras testadas , 44 (88%) foram positivas para os dois métodos. Mas quando comparado o SDS nos dois métodos foram observados resultados positivos nas concentrações de 0,5 a 0,05 µg/ml no método de difusão em ágar e no método de extração somente foi observado efeito citotóxico até a concentração de 0,25 µg/ml. CONCLUSÃO: Os resultados encontrados são similares aos observados por outros autores que testaram materiais como, por exemplo, ligas metálicas. Quando foi usado o SDS observou-se, nas duas linhagens celulares, diferenças favoráveis ao método de difusão em ágar em duas concentrações, isto é, a sensibilidade deste método foi significantemente maior, por inspecção, em relação ao método de extração, além de se constituir em método mais simples de ser realizado
    corecore