814 research outputs found

    Alternating Control Flow Reconstruction

    Get PDF

    DroidSieve:Fast and Accurate Classification of Obfuscated Android Malware

    Get PDF
    With more than two million applications, Android marketplaces require automatic and scalable methods to efficiently vet apps for the absence of malicious threats. Recent techniques have successfully relied on the extraction of lightweight syntactic features suitable for machine learning classification, but despite their promising results, the very nature of such features suggest they would unlikely-on their own-be suitable for detecting obfuscated Android malware. To address this challenge, we propose DroidSieve, an Android malware classifier based on static analysis that is fast, accurate, and resilient to obfuscation. For a given app, DroidSieve first decides whether the app is malicious and, if so, classifies it as belonging to a family of related malware. DroidSieve exploits obfuscation-invariant features and artifacts introduced by obfuscation mechanisms used in malware. At the same time, these purely static features are designed for processing at scale and can be extracted quickly. For malware detection, we achieve up to 99.82% accuracy with zero false positives; for family identification of obfuscated malware, we achieve 99.26% accuracy at a fraction of the computational cost of state-of-The-Art techniques

    Analysis of the recovery phase after maximal exercise in children with repaired tetralogy of Fallot and the relationship with ventricular function

    Get PDF
    Background Few studies demonstrate delayed recovery after exercise in children and adults with heart disease. We assess the recovery patterns of gas exchange parameters and heart rate (HR) in children with repaired Tetralogy of Fallot (rToF) compared to healthy peers and investigate the correlation with ventricular function and QRS duration. Methods 45 children after rToF and 45 controls performed a maximal incremental cardiopulmonary exercise test. In the subsequent recovery period, patterns of VO2, VCO2 and HR were analysed. Half-life time (T-1/2) of the exponential decay and drop per minute (Rec(min)) were compared between groups. In the rToF group, correlations were examined between the recovery parameters and QRS-duration and ventricular function, described by fractional shortening (FS) and tricuspid annular plane systolic excursion (TAPSE) measured at baseline prior to exercise. Results Recovery of VO2 and VCO2 was delayed in rToF patients, half-life time values were higher compared to controls (T1/2VO2 52.51 11.29 s vs. 44.31 +/- 10.47 s; p = 0.001 and T1/2VCO2 68.28 +/- 13.84 s vs. 59.41 +/- 12.06 s; p = 0.002) and percentage drop from maximal value was slower at each minute of recovery (p<0.05). Correlations were found with FS (T1/2VO2: r = -0.517; p<0.001; Rec(1min)VO(2): r = -0.636, p<0.001; Rec(1min)VCO(2): r = -0.373, p = 0.012) and TAPSE (T1/2VO2: r = -0.505; p<0.001; Rec(1min)VO(2): r = -0.566, p<0.001; T1/2VCO2: r = -0.466; p = 0.001; Rec(1min)VCO(2): r = -0.507, p<0.001), not with QRS-duration. No difference was found in HR recovery between patients and controls. Conclusions Children after rToF show a delayed gas exchange recovery after exercise. This delay correlates to ventricular function, demonstrating its importance in recovery after physical activity

    A dynamic explanation for the origin of the western Mediterranean organic-rich layers

    Get PDF
    The eastern Mediterranean sapropels are among the most intensively investigated phenomena in the paleoceanographic record, but relatively little has been written regarding the origin of the equivalent of the sapropels in the western Mediterranean, the organic-rich layers (ORLs). ORLs are recognized as sediment layers containing enhanced total organic carbon that extend throughout the deep basins of the western Mediterranean and are associated with enhanced total barium concentration and a reduced diversity (dysoxic but not anoxic) benthic foraminiferal assemblage. Consequently, it has been suggested that ORLs represent periods of enhanced productivity coupled with reduced deep ventilation, presumably related to increased continental runoff, in close analogy to the sapropels. We demonstrate that despite their superficial similarity, the timing of the deposition of the most recent ORL in the Alboran Sea is different than that of the approximately coincident sapropel, indicating that there are important differences between their modes of formation. We go on to demonstrate, through physical arguments, that a likely explanation for the origin of the Alboran ORLs lies in the response of the western Mediterranean basin to a strong reduction in surface water density and a shoaling of the interface between intermediate and deep water during the deglacial period. Furthermore, we provide evidence that deep convection had already slowed by the time of Heinrich Event 1 and explore this event as a potential agent for preconditioning deep convection collapse. Important differences between Heinrich-like and deglacial-like influences are highlighted, giving new insights into the response of the western Mediterranean system to external forcing

    Extinction of the Kapitza Anomaly for Phonons along the Surface Normal Direction

    Get PDF
    We have succeeded in extinguishing the anomalous Kapitza transmission of phonons whose wave vector is normal to a surface treated by conventional means and handled in air. In the same experiments, phonons approaching the surface with oblique wave vectors are anomalously transmitted. We argue that these results demonstrate that the Kapitza anomaly is due to surface defects which couple to the phonon strain field

    Excitations in confined helium

    Full text link
    We design models for helium in matrices like aerogel, Vycor or Geltech from a manifestly microscopic point of view. For that purpose, we calculate the dynamic structure function of 4He on Si substrates and between two Si walls as a function of energy, momentum transfer, and the scattering angle. The angle--averaged results are in good agreement with the neutron scattering data; the remaining differences can be attributed to the simplified model used here for the complex pore structure of the materials. A focus of the present work is the detailed identification of coexisting layer modes and bulk--like excitations, and, in the case of thick films, ripplon excitations. Involving essentially two--dimensional motion of atoms, the layer modes are sensitive to the scattering angle.Comment: Phys. Rev. B (2003, in press
    corecore