Miracle-dz/UniFAR-FTUs huggingface dataset:
Testing and Comparing Web Vulnerability Scanning Tools for SQL Injection and XSS Attacks

Web applications are typically developed with hard time constraints and are often deployed with security vulnerabilities. Automatic web vulnerability scanners can help to locate these vulnerabilities and are popular tools among developers of web applications. Their purpose is to stress the application from the attacker's point of view by issuing a huge amount of interaction within it. Two of the most widely spread and dangerous vulnerabilities in web applications are SQL injection and cross site scripting (XSS), because of the damage they may cause to the victim business. Trusting the results of web vulnerability scanning tools is of utmost importance. Without a clear idea on the coverage and false positive rate of these tools, it is difficult to judge the relevance of the results they provide. Furthermore, it is difficult, if not impossible, to compare key figures of merit of web vulnerability scanners. In this paper we propose a method to evaluate and benchmark automatic web vulnerability scanners using software fault injection techniques. The most common types of software faults are injected in the web application code which is then checked by the scanners. The results are compared by analyzing coverage of vulnerability detection and false positives. Three leading commercial scanning tools are evaluated and the results show that in general the coverage is low and the percentage of false positives is very high.
Automatic Animation Skeleton Construction Using Repulsive Force Field

A method is proposed in this paper to automatically generate the animation skeleton of a model such that the model can be manipulated according to the skeleton. With our method, users can construct the skeleton in a short time, and bring a static model both dynamic and alive.The primary steps of our method are finding skeleton joints, connecting the joints to form an animation skeleton, and binding skin vertices to the skeleton. Initially, a repulsive force field is constructed inside a given model, and a set of points with local minimal force magnitude are found based on the force field. Then, a modified thinning algorithm is applied to generate an initial skeleton, which is further refined to become the final result. When the skeleton construction completes, skin vertices are anchored to the skeleton joints according to the distances between the vertices and joints. In order to build the repulsive force field, hundreds of rays are shot radially from positions inside the model, and it leads to that the force field computation takes most of the execution time. Therefore, an octree structure is used to accelerate this process. Currently, the skeleton generated from a typical 3D model with 1000 to 10000 polygons takes less than 2 minutes on a Intel Pentium 4 2.4 GHz PC.
Technology in teaching : an analysis of one school staff's experience in developing personal computer skills through the implementation of the Alberta ICT curriculum

A policy of curricular technology integration has been initiated in all Alberta schools through huge investments in technological and human resources. Educators have been mandated by the government to provide technology-based learning opportunities, but are teachers truly in a position to deliver on those expectations? This project will examine teacher technology skill development at an Alberta school during the course of 1 year. This issue will be examined from a program improvement point of view with the recognition that technology program planning is more than an ordered shopping list; it involves the beliefs, skills, and attitudes of those who will be implementing the program. Success relative to long-term goals of curriculum integration depends far less on hightech equipment than it does on the people using the equipment. This project lends itself to both anecdotal and empirical investigation and both components will be incorporated into the evaluation design. Through pre-/post-surveys, a better understanding will emerge regarding teacher technology skill development at the school level. This new understanding will be critical in future planning of teacher professional development and support.
CoR²Ds: Context-Rooted Rotatable Draggables for Tabletop Interaction

We present a new popup widget, called CoR²Ds (ContextRooted Rotatable Draggables), designed for multi-user direct-touch tabletop environments. CoR²Ds are interactive callout popup objects that are visually connected (rooted) at the originating displayed object by a semi-transparent colored swath. CoR²Ds can be used to bring out menus, display drilled-down or off-screen ancillary data such as metadata and attributes, as well as instantiate tools. CoR²Ds can be freely moved, rotated, and re-oriented on a tabletop display surface by fingers, hands, pointing devices (mice) or marking devices (such as a stylus or light pen). CoR²Ds address five issues for interaction techniques on interactive tabletop display surfaces: occlusion, reach, context on a cluttered display, readability, and concurrent/coordinated multi-user interaction. In this paper, we present the design, interaction and implementation of CoR²Ds. We also discuss a set of current usage scenarios. Categories & Subject Descriptors: H.5. 2. [Information
Pairing-Based Proxy Signature Scheme with Proxy Signer's Privacy Protection

Based on bilinear pairings, a proxy signature scheme with proxy signer's privacy protection is proposed, in which a proxy signer signs messages on behalf of the original signer while the proxy signer is anonymous to anyone but the original signer. If necessary, the anonymity can be revoked by the original signer to identify the proxy signer. Neither this scheme needs any trusted third party nor the proxy signers need publish the extra public keys corresponding to their alias. On the other hand, both the original signer and the proxy signers can open the identities of the proxy signers from a valid proxy signature. Then, neither the original signer nor the proxy signer can deny the identity of a valid proxy signature. So, the proposed scheme can be used in e- voting, e-auction and other environment where individual privacy needs careful protection.
Nature Inspired Meta-heuristics: A Survey

: Nature provides a major inspiration for solving many complex problems in computer science. One of such problem is Optimization. The field of optimization contains many algorithms inspired from nature to find the best and optimal solutions. Many novel techniques had been developed for the purpose of optimization. This paper gives an overview of various nature-inspired meta-heuristics and algorithms which are being used currently for solving the global optimization problems. The algorithms will be discussed on the basis of their concept, working, accuracy and speed. The applications of the algorithms are also presented in detail.
Timemark correction for the ClearPET TM scanners

The small animal PET scanners developed by the Crystal Clear Collaboration (ClearPET TM ) detect coincidences by analyzing timemarks which are attached to each event. The scanners are able to save complete single list mode data which allows analysis and modification of the timemarks after data acquisition. The timemarks are obtained from the digitally sampled detector pulses by calculating the baseline crossing of the rising edge of the pulse which is approximated as a straight line. But the limited sampling frequency causes a systematic error in the determination of the timemark. This error depends on the phase of the sampling clock at the time of the event. A statistical method that corrects these errors will be presented.
Logic Minimization Based proach for CO ata

We propose a novel approach for the lofsless compression of binary images using logic minimization. The image is divided into windows or blocks of size r x c pixels and each block is transformed into a Boolean . switching function in cubical form, treating the pixel values as output of the function. Compression is performed by minimizing these switching functions using ESPRESSO, a cube-based two-level logic minimizer. To reduce the bits required to encode the minimized cubes (product terms), a code set which satisfies the prefix property is used. If this technique fails to produce compression for a window, the pixels are stored as such. The main motivation of the work has been to investigate the potential of logic minimization as a tool for image data compression. Our technique outperforms UNIX compress in terms of compression ratio on most of the test images. The compression scheme is relatively slower while the decompression time is comparable to that of UNIX compress.
Exploring the relationships of regions for visual content understanding

An image can be considered as a collection of small regions. Most researches of image understanding extract features of these regions, and investigate relationships between these regions and keywords of images that are annotated manually. There are also some researches that explore the ontology of words. However, little attention has been paid to the relationships among regions in an image. In this paper, we make a close study of this type of relationships without the assumption that they are independent for visual content understanding. We first analyze the co-occurrence of regions using a statistical relevance probability model (SRP). Since human attention in the perception process of an image first focuses in one region and then moves on to other relevant regions, we propose a novel model called region sequence prediction model (RSP) to describe it. In RSP, annotation keywords for region sequences of the image and their probabilities are generated by a hidden Markov model. Experimental results of both image annotation and retrieval on the Corel dataset (an open image dataset) show that mining the relationships of image regions will achieve comparative or better performance in visual content understanding.
Information Retrieval and Visualization Based on Documents Geospatial Semantics

Local cultural heritage document collections are characterized by contents strongly attached to a territory and its history. Our contribution aims at enhancing such a content retrieval process efficiently each time a query includes geographic criteria. We propose a core model for a formal representation of geographic information. It takes into account the characteristics of different expression modes: written language and captures of drawings, maps, photographs, etc. We have developed a prototype fully implementing geographic information extraction (IE) and geographic information retrieval (IR) processes. We approach geographic IE from semantic processings additionally to classic IE approaches. This paper focuses on IR and information visualization (IV) proposals relying on the geospatial characteristics of documents.
Optimal Transmission Range with Delay Constraints for Mobile Wireless Networks

Assuming that all mobile nodes (MNs) have the same transmission range, the actual hop count between any two MNs is proportional to the distance between them. Based on the found relation between distance and hop count, the required hop count between two MNs can be accurately estimated, given the distance between them. Using the distribution of distance between MNs, this paper also suggests the optimal transmission range of MNs, which can guarantee delay constraints of a requested ratio of connections in an entire network.
Energy Fair Cloud Server Scheduling in Mobile Computation Offloading

This thesis considers the issue of energy fairness in mobile computation offloading. In computation offloading, mobile users reduce their energy consumption by executing jobs on a remote cloud server, rather than processing the jobs locally. This can result in energy unfairness however, when the processed jobs are subject to hard deadline constraints. In this thesis we consider how energy unfairness can be compensated for, by smart scheduling at the cloud server. We first derive an optimum offline scheduler using an integer linear program (ILP) that uses a min-max energy objective and preemptive cloud server scheduling. We then introduce several online scheduling algorithms. The first one is referred to as First-Generated-First-Scheduled (FGFS), where jobs that are generated earlier are given cloud server priority. A modified version, referred to as γRatio Accepted FGFS (γ-FGFS) is proposed, where the acceptance of job submission is subject to an energy threshold test. A version of this algorithm, γ-Ratio Accepted Earliest Deadline First (γ-EDF), is considered that uses earliest deadline first (EDF) scheduling to test for job feasibility. We also include comparisons using an analytic model that shows the performance possible when the system uses optimum open loop job submission (OLJS) with firstcome-first-served (FCFS) cloud server scheduling. Various performance results are iv presented that show the improvements in energy fairness possible with the proposed schedulers.
Updating a CMYK Printer Model Using a Sparse Data Set

Two distinct approaches for updating a CMYK printer model in response to systematic changes in print device behavior are presented. In the first method, a corrective model is constructed from a sparse set of newly acquired characterization data and used in addition to the initial printer model. A number of corrective models are investigated, including linear, quadratic, and artificial neural net- work models. The second method involves directly updating the pa- rameters within the printer model. The updated model parameters are obtained using both the original characterization data and a set of newly acquired data. Both methods are evaluated in a set of experiments in which either the paper stock or the cyan toner car- tridge is changed. The corrective model approach is found to be the most effective. The most successful corrective models removed be- tween 76% and 100% of the systematic error. © 2006 Society for Imaging Science and Technology. DOI: 10.2352/J.ImagingSci. Technol.200650:6556
Development of an instrument to evaluate the quality of delivered systems

Delivered information systems are an integral part of many organisations' information technology infrastructure. Their dynamic nature creates challenges, not the least of which is the need to measure the quality/effectiveness of these systems. Given the size of investment in these systems, it would be invaluable for business to formulate afresh, simple, easy to administer, multidimensional instrument capable of measuring the quality of delivered information systems or applications. Such an instrument would provide a practical and efficient means to pinpoint areas that key stakeholders, ranging from end-users to managers, perceive as requiring attention. In this paper, we report on the development of one such instrument. This instrument addresses key areas of performance and uses multiple statements to enhance stakeholders' understanding of these areas.
Practical Free-Form Search over Relational Databases

This paper presents a tool that enables non- technical end-users to use free-form queries in exploring relational databases with simple and direct technique, in a fashion similar to using search engines to search text files on the web. This allows web designers and database developers specially in small business sectors to publish their databases for web browsers exploring in practical way. We assume that each database to be processed in our approach is 'about' a particular type of object, where only certain tables and certain attributes will be the 'public' ones and likely to be searchable on the web. The proposed approach can be used for both Internet and Intranet application areas. Our technique has been borrowed from the similar techniques used for information retrieval (IR), mainly for text and document databases; it supports working smoothly with the structured information stored in relational databases.
Face Detection Based on Skin Gaussian Model and KL Transform

For face detection in complex background pictures with single or multiple faces, this paper presents a new face-detection method. In YCbCr chrominance space, the distribution of the skin color is described as a Gaussian model and presented as a likelihood image. Otsu method is used to segment the skin pixels; At the same time, the skin regions are located in the KL skin color space, finally the two segmentation results under two chrominance spaces (YCbCr and KL) are fused at the pixel level. Experimental results show that this approach gets a more robust and accurate performance in detecting faces than in any single color space.
Hints and Notifications

With current Internet protocols, users may ex- perience low and unpredictable forwarding quality at wireless links. This is due to varying link properties caused by chang- ing radio conditions. Decreased forwarding quality can cause severe degradation in utilization. This is undesirable since for- warding capacity often is expensive at wireless links because of limited radio spectrum. Allowing the application and transport layers to communicate with wireless link layers can improve forwarding quality and utilization. We propose to enable inter-layer communication by adding hints and notifications (HAN) to the Internet architecture. Hints can be introduced and used without notifications, while notifications need hints or a similar mechanism to operate. By using IP options and ICMP messages to implement HAN, a backward-compatible partial deployment is possible. With HAN, the network layer becomes truly wireless friendly and radio spectrum can be used efficiently while supporting both real-time and traditional data applications.
Performance Analysis of Multiple Packets Combining Decoding in HARQ

From the essence, HARQ is a joint multiple packets decoding technique. Two existing schemes, diversity combining and code combining, only make use of channel output symbols before decoding. Considering the correcting ability of FEC, output code combination is proposed. The output of decoder can be viewed as another output packet of transmission packet passing through a better channel. So it can be combined with new received channel erroneous packet. By means of analytical derivations and simulation, new combining scheme outperforms existing schemes. It greatly reduces system transmission delay without remarkable complexity increases
The Creation of an Online Learning Community in Interpreter Training

In a traditional interpreting classroom, the interpreting trainer is often regarded as the only source of knowledge and skills, providing the training materials to be practiced and pointing out students' mistakes as they occur during the practices. This teacher-centered teaching approach is a reflection of the long tradition of training by apprenticeship in interpreting pedagogy and as a result, there is usually very little chance for interaction among students themselves in the interpreting classroom. This paper focuses on how using an online course management system to offer students opportunities for collaboration outside of class can create an online learning community. The study describes how an interpreting trainer has blended the traditional face-to-face instruction with web-based activities by designing a variety of online activities via a free on line course management system, MOODLE, in a consecutive interpretation classroom. The data sources of this study include all the postings the participants made online, students' responses to the questionnaire distributed at the end of the semester, and the instructor's observations and self-reflections towards the process of incorporating the online course management system into the curriculum. The results of the study show that blended learning, or a combination of online and face-to-face learning, can create an online learning community that extends and, often, transforms the traditional teacher-and exercise-oriented interpreting classroom.
Effectiveness of directional technology in open‐canal hearing instruments

After years of advanced algorithm development in an effort to bring more consumers to the hearing aid table, it just might be that the re-emergence of the “open” fit will do more for hearing aid sales than any other attempt of the decade. Open fittings, per se, aren’t new. The IROS (ipsilateral routing of signal) style has a 40-plus-year history. That era of opening the canal using a non-occluding earmold, or simply inserting #13 tubing into the ear canal, served to provide some high-frequency gain without the concomitant negative occlusion effects resulting from a closed earmold. The benefit provided was limited, however, because of the unavoidable feedback. The current era provides for adjustable gain in multiple channels, unoccluded sound quality, better cosmetic design, and, perhaps most significantly, good feedbackmanagement schemes (see Mueller in this issue for a review of potential benefits1). One question posed by many practicing clinicians about these open-canal (OC) fittings is whether or not they can provide directional microphone benefit. In this article, we will identify the factors involved in providing directional benefit with an OC fitting.
A FOG Online Calibration Research Based on High-Precision Three-axis Turntable

With the development of fiber-optic gyroscopes, strapdown inertial navigation system has become a trend in the development of inertial navigation system (INS), and strapdown inertial system error calibration technique has become one of the key technologies. This paper combined engineering practice with study an on-line calibration method of INS, which based on the high-precision multi-functional three-axis turntable. First of all, aim at the actual system used in fiber-optic gyroscopes, accelerometers quartz flexible components, set up corresponding system error model respectively. Then, take the high-precision three-axis turntable as platform to design the calibrate path, through the on-line combination calibration . Use Kalman filter algorithm to process data on-line, completed the corresponding experiments, and verified by tests. Experimental results show that the calibration method is feasible in project and effective, and increased level of automation.
An object-oriented model of access control based on role

At present, majority access control models mainly deal with data-protection at the back-end of applications. However, they are not applicable for large and complex multi-user applications. Though Object Technology has turned into one of the mainstream approaches for large and complex applications development, it still lacks a general model of application-level access control. While the existing models of role-based access control could simplify privilege management, they neglect the dynamic features of activated roles. This paper proposes an object-oriented model in Unified Modeling Language supporting application-level access control based on users' roles. In the model, an interface type is provided containing a set of operations as user services, which are authorized to users via their roles. To represent the activated roles, Role-Playing is introduced, and it is modeled as an active class. Every object of Role-Playing runs in particular context, which restrict users' rights dynamically and control users' interaction actively. The model is suitable for multi-user interactive computing and distributed information-processing systems.