Miracle-dz/UniFAR-FTUs huggingface dataset:
All your Credentials are Belong to Us: On Insecure WPA2-Enterprise Configurations

In this paper, we perform the first multifaceted measurement study to investigate the widespread insecure practices employed by tertiary education institutes (TEIs) around the globe when offering WPA2-Enterprise Wi-Fi services. The security of such services critically hinges on two aspects: (1) the connection configuration on the client-side; and (2) the TLS setup on the authentication servers. Weaknesses in either can leave users susceptible to credential theft. Typically, TEIs prescribe to their users either manual instructions or pre-configured profiles (e.g., eduroam CAT). For studying the security of configurations, we present a framework in which each configuration is mapped to an abstract security label drawn from a strict partially ordered set. We first used this framework to evaluate the configurations supported by the user interfaces (UIs) of mainstream operating systems (OSs), and discovered many design weaknesses. We then considered 7045 TEIs in 54 countries/regions, and collected 7275 configuration instructions from 2061 TEIs. Our analysis showed that majority of these instructions lead to insecure configurations, and nearly 86% of those TEIs can suffer from credential thefts on at least one OS. We also analyzed a large corpus of pre-configured eduroam CAT profiles and discovered several misconfiguration issues that can negatively impact security. Finally, we evaluated the TLS parameters used by authentication servers of thousands of TEIs and discovered perilous practices, such as the use of expired certificates, deprecated versions of TLS, weak signature algorithms, and suspected cases of private key reuse among TEIs. Our long list of findings have been responsibly disclosed to the relevant stakeholders, many of which have already been positively acknowledged.
TooLate: Cryptographic Data Access Control for Offline Devices through Efficient Key Rotation

The design of an access control technique for devices not connected to the Internet can present some very difficult challenges. Among others, how to properly handle user revocation stands out. In this paper, we present TooLate, a cryptosystem that allows an authority to grant access to a user over a set of encrypted files stored on an offline device. The authority has no connection with the device but is able to centrally manage access control to the remote datastore, providing users with decryption keys whose validity is limited in time and only to specific resources. The system uses a lightweight cryptographic technique suitable for non-tamper-proof, low-power devices. An active security module periodically re-encrypts the entire datastore using keys dynamically generated from a hash chain. Key rotation ensures that, even by tampering with the device, attackers cannot gain access to the data without a valid key, as the re-encryption occurs and they arrive too late.
Demons in the Shared Kernel: Abstract Resource Attacks Against OS-level Virtualization

Due to its faster start-up speed and better resource utilization efficiency, OS-level virtualization has been widely adopted and has become a fundamental technology in cloud computing. Compared to hardware virtualization, OS-level virtualization leverages the shared-kernel design to achieve high efficiency and runs multiple user-space instances (a.k.a., containers) on the shared kernel. However, in this paper, we reveal a new attack surface that is intrinsic to OS-level virtualization, affecting Linux, FreeBSD, and Fuchsia. The root cause is that the shared-kernel design in OS-level virtualization results containers in sharing thousands of kernel variables and data structures directly and indirectly. Without exploiting any kernel vulnerabilities, a non-privileged container can easily exhaust the shared kernel variables and data structure instances to cause DoS attacks against other containers. Compared with the physical resources, these kernel variables or data structure instances (termed abstract resources) are more prevalent but under-protected. To show the importance of confining abstract resources, we conduct abstract resource attacks that target different aspects of the OS kernel. The results show that attacking abstract resources is highly practical and critical. We further conduct a systematic analysis to identify vulnerable abstract resources in the Linux kernel, which successfully detects 1,010 abstract resources and 501 of them can be repeatedly consumed dynamically. We also conduct the attacking experiments in the self-deployed shared-kernel container environments on the top 4 cloud vendors. The results show that all environments are vulnerable to abstract resource attacks. We conclude that containing abstract resources is hard and give out multiple strategies for mitigating the risks.
ORP5/8 AND MIB/MICOS LINK ER-MITOCHONDRIA AND INTRAMITOCHONDRIAL CONTACTS FOR NON-VESICULAR TRANSPORT OF PHOSPHATIDYLSERINE

Mitochondria are dynamic organelles essential for cell survival whose structural and functional integrity rely on selective and regulated transport of lipids from/to the endoplasmic reticulum (ER) and across the mitochondrial intermembrane space. As they are not connected by vesicular transport, the exchange of lipids between ER and mitochondria occurs at sites of close organelle apposition called membrane contact sites. However, the mechanisms and proteins involved in these processes are only beginning to emerge. Here, we show that the main physiological localization of the lipid transfer proteins ORP5 and ORP8 is at mitochondria-associated ER membranes (MAMs) subdomains, physically linked to the MIB/MICOS complexes that bridge the two mitochondrial membranes. We also show that ORP5/8 mediate non-vesicular transport of phosphatidylserine (PS) lipids from the ER to mitochondria by cooperating with the MIB/MICOS complexes. Overall our study reveals a novel physical and functional link between ER-mitochondria contacts involved in lipid transfer and intra-mitochondrial membranes contacts maintained by the MIB/MICOS complexes.
Medical Aspects of Chemical and Biological Warfare

Abstract : This volume was prepared for military medical educational use. The focus of the information is to foster discussion that may form the basis of doctrine and policy. Until this decade, our military forces had not faced chemical and biological weapons since World War I, and the prevailing attitude has been "out of sight, out of mind. " The Persian Gulf War changed all that. Just the threat that such weapons would be used was itself an effective weapon, as it required us to expend tremendous logistical resources to supply our troops in the desert. Now we know that we must master all relevant aspects of defense against chemical and biological warfare. The Biological Weapons Convention, ratified in 1975, did not slow the massive Soviet program, which continued until early 1992, nor did it prevent the buildup in Iraq between 1985 and 1990. At this time, experts are severely questioning whether verification of compliance with the treaty can be certain. Similar concerns delayed ratification of the Chemical Weapons Convention by the U.S. Senate; nevertheless, the senate ratified the treaty on 24 April 1997. A primary value of the Textbook of Military Medicine series is to preserve the lessons of past wars and, by so doing, demonstrate how current doctrine is built on knowledge that was gained at so high a cost. Medical officers should read this volume, Medical Aspects of Chemical and Biological Warfare, and learn its lessons well. Civilians expect that we in the military will know how to manage chemical and biological casualties. Indeed, if we do not, then who will? The nation expects us to be prepared to defend against all attacks and will be unforgiving of any incapacity on our part.
Adaptive jitter rejection technique applicable to airborne laser communication systems

Satellite jitter adversely affects pointing, acquisition and tracking (PAT) functions of an intersatellite laser communication system. Reliable aircraft- based testing of PAT systems requires that the detrimental effects of aircraft jitter be controlled and a realistic satellite jitter environment be emulated. A novel jitter rejection technique, the self-tuning feedforward compensation scheme, is developed to minimize effects of aircraft vibration on the PAT terminal. The self-tuning results in the implicit characterization of the mechanical jitter propagation path thus facilitating the injection of prerecorded satellite jitter in the control circuitry of steering mirrors.
Developing a Framework to Improve Critical Infrastructure Cybersecurity (Response to NIST Request for Information Docket No. 130208119-3119-01)

The National Institute of Standards and Technology (NIST) has issued a request for information (RFI) regarding its charge of developing a framework to improve critical infrastructure cybersecurity. As NIST correctly points out in the RFI, “[t]he national and economic security of the United States depends on the reliable functioning of critical infrastructure. ” The following two suggestions are offered in an attempt to aid NIST as it develops a national cybersecurity framework (the Framework) to reduce cybersecurity risks throughout the nation: 1. The Framework should expressly require public interest representation in developing and selecting standards for a national cybersecurity infrastructure. 2. The Framework should adopt approaches that prevent patent disputes from disrupting the broadest possible adoption of cybersecurity standards. Such approaches may include selecting standards for inclusion in the cybersecurity infrastructure only if patent holders have (a) agreed to offer licenses on a royalty-free basis, (b) consented to observe an aggregate royalty cap for all patents covering the standard, or (c) waived their rights to seek injunctive relief.
Interpreting Attributions and Interactions of Adversarial Attacks: Supplementary

We define regional attributions and interactions between perturbation pixels based on Shapley values [6]. We compare Shapley-based attributions with other explanation methods from the following perspectives. • Theoretical rigor. A good attribution method must satisfy certain desirable properties. The Shapley value has been proved to be the unique attribution that satisfies four desirable properties, i.e. the linearity property, the dummy property, the symmetry property, and the efficiency property [3]. In comparison, some explanation methods like Grad-CAM [5] and GBP [7] do not have theoretic supports for the correctness of these methods. • Objectivity. The attribution of one input element depends on contexts of neighboring pixels. The Shapley value considers all possible contexts to compute the attribution of an input unit, which ensures the objectiveness of the attribution. In contrast, some attention methods, such as the adversarial saliency map [4], only consider the marginal gradient, which is biased to a specific context from this perspective. • Trustworthiness. The theoretic foundation in game theory makes the Shapley values trustworthy. In contrast, some seemingly transparent explanation methods simply do not have clear theoretical support, which hurts the trustworthiness of the explanation. Actually, [1] has shown some explanation methods like GBP [7] can not reflect the true attribution. • Broad applicability. The Shapley values can be extended to measure interactions between two input elements. [8] has proved the theoretical foundation and advantages for defining interactions using the Shapley value in game theory [3]. However, some gradient-based explanation methods assume the model is locally linear, which fails to measure interactions between two input elements.
Vacuum tunneling in gravity

Topologically non-trivial vacuum structure in gravity models with Cartan variables (vielbein and contortion) is considered. We study the possibility of vacuum space-time tunneling in Einstein gravity assuming that the vielbein may play a fundamental role in quantum gravitational phenomena. It has been shown that in the case of RP 3 space topology the tunneling between non-trivial topological vacuums can be realized by means of Eguchi-Hanson gravitational instanton. In Riemann-Cartan geometric approach to quantum gravity the vacuum tunneling can be provided by means of contortion quantum fluctuations. We define double self-duality condition for the contortion and give explicit self-dual configurations which can contribute to vacuum tunneling amplitude.
The use of Relative Goodness of Fit Tests for training Generative Adversarial Networks

When training a GAN one often faces the problem of determining the quality of the intermediate and final results. Since the aim of the generative model is to reproduce the distribution typically in a highdimensional space it is hard to confirm or reject that the output is of sufficient quality. The relative goodness of fit statistical tests may help to solve this issue. The recent tests based on the maximum mean discrepancy (MMD) and on the unnormalized mean embeddings (UME) are suitable for highdimensional data.
Diagnostic Efficacy of Endometrial Aspiration Cytology in Abnormal Uterine Bleeding-A Cross Sectional Study at a Tertiary Care Hospital

Background: Application of cytology in evaluation of endometrial lesions is emerging and is a valuable diagnostic tool which includes endometrial aspiration cytology and imprint cytology. This study was conducted to analyze the morphological patterns of endometrium in abnormal uterine bleeding by endometrium aspiration cytology and to compare its diagnostic efficacy of with histopathology. Material and method: This was a prospective analytical study which included 127 cases with abnormal uterine bleeding. Aspiration was done using nasogastric tube. This was followed by dilatation and curettage, material obtained and serial imprints were taken. The endometrial biopsy was then sent for histopathological examination. The aspirates and biopsy were stained appropriately. Cytomorphology was studied and subsequently correlated with histopathological features. Results: Mean age was 41.57 ± 8.42 years and menorrhagia was the most common pattern of bleeding. The most common endometrial pattern observed was of cyclic endometrium by both the techniques. The sensitivity, specificity, positive predictive value and negative predictive value of endometrial aspiration cytology in diagnosing malignancy was 66.67 %, 100%, 100% and 99.07% respectively. Conclusion: Endometrial cytology is a simple, rapid, safe and cost-effective tool in evaluating abnormal uterine bleeding in identification of specific pathology. Pathologist must be aware of the cytomorphology and potential pitfalls especially in distinction of atypical hyperplasia and grade 1 adenocarcinomas to improve diagnostic accuracy.
Automatic Brain Tumour Segmentation Using Probabilistic Neural Network And Gaussian Mixture Model.

: Segmentation of the growing mind is wanted for the take a look at of regular fetal mind improvement and neurodevelopmental problems. Manual segmentation of thoughts MRI facts is time-eating, tedious and subjective. Previously, a extensive variety of methodologies has been proposed for computerized segmentation of the mature thoughts. Compared to man or woman snapshots, MRI time series brings a numerous facts. This statistics permits scientific docs to discover tumor in human thoughts. Medical imagery can be very sensitivity as it is related to human health. Actually,
Concept, Design, and Implementation of a General Dynamic Parametric Equalizer

The classic operations of dynamics processing and parametric equalization control two separate domains of an audio signal. The operational nature of the two processors give insight into a manner in which they may be combined into a single processor. This integrated processor can perform as the equivalent of a stand-alone dynamics processor or parametric equalizer, but it can also modify the boost and/or cut of an equalizer stage over time following a dynamics curve. The design of a digital version of this concept is discussed, along with implementation issues and proposals for their resolutions.
Status changes in the wild bees of north‐eastern North America over 125 years revealed through museum specimens

Though recent literature highlights widespread bee declines, detailed information on local communities and individual species remains scarce. In order to accurately direct conservation initiatives and to evaluate the status of wild bees, regional long‐term data on these populations are critical. This study analysed 119 wild bee species within New Hampshire, USA, over 125 years (1891–2016) using museum data. Examining pollinator communities across regional spatial scales has the power to highlight small‐scale changes that go undetected in larger investigations. In the light of unknown effects of introduced species and cumulative range expansions of exotic taxa, monitoring wild communities closely and extensively over time is becoming increasingly important. The composition of the New Hampshire wild bee community has changed between the historical and contemporary time periods with 14 species found to be statistically significantly declining and eight species found to be statistically significantly increasing. Over half of the species found to be in statistically significant decline experienced a significant elevational or latitudinal range shift, many are regionally important crop pollinators, and all are native New Hampshire taxa. Guild affiliations were not found to be indicators of change, suggesting that the requirements and behaviour of individual species must be examined in order to evaluate the current and future stability of the wild bee community. Many of these species occur in varied landscapes, climates, and habitats; thus, monitoring changes at regional scales is critical to informing conservation recommendations broadly and focusing future research directions.
Readings in Planning

From the Publisher: Although numerous review articles on planning have appeared over the years, no systematic attempt has been made to collect the major papers in this field into one volume. The goal of this book is to remedy this situation by bringing together in one place a set of readings that can be used to develop a familiarity with the planning literature, with the major AI theory underlying planning, and with the exciting directions of current research. The first section of the book introduces the techniques and terminology of the AI planning community. The second section collects papers describing planning systems developed over the past 30 years. A third section presents research in the area of formal models of planning. Finally, a fourth section collects recent work representative of the field's current direction. The editors, three accomplished researchers, provide introductory material surveying the field of planning as well as introductions to groups of papers placing the work in perspective. A useful reference for AI system developers and researchers, this work is also suitable for use as a text for a planning course or as a supplemental text for a more general AI course.
Detecting stage of lung cancer based on tumor size - By using segmentation and feature extraction in medical image processing

Cancer is an extensive global and universal disease nowadays which pretends to be the utmost cause for a large impermanence rate among men and women every era. Approximately 80-85% of the people who get affected by cancer are being succumbed to death. Recognition of cancer at the first stage is the only aspect in front of us to give proper treatment. Among numerous types of cancers, lung cancer is a very fearful and complicated one. Lung cancer means the growth of tumor cells briskly and having chances of spreading those cancer cells to other organs which in turn damaging other normal tissue cells of the body. Noticing tumor prematurely can help to cure the disease completely and it becomes pivotal to find out whether the tumor has been changed to cancer or not, if the prognostication is made at an initial stage, then countless lives that are at risk could be rescued and accurate prediction can help the doctors to start their treatment at the earliest. In this paper, we have proposed a simple, easy, and precise method for accurate prediction of the stage of cancer using CT images of the lungs in Image processing. For this process, a CT image will be considered, and then the image will be pre-processed for noise removal. Further segmentation is done to identify and separate desired tumor nodule and extraction of morphological features such as area, perimeter, eccentricity, and diameter is carried out under feature extraction. Finally, the classification of lung cancer into different stages based on the size of tumor results has been proposed using MATLAB which is more accurate and less time-consuming when compared to other lung cancer prediction systems. The method proposed in this paper to detect a tumor in the lungs is simpler when compared to applying other difficult algorithms.
STREET LIGHT CONTROL AND AIR QUALITY MONITORING SYSTEM

The proposed work is designed and executed the IoT systems for energy saving of street lights and Air quality monitoring. The present system is like, the street lights will be switched on in the evening before the sun sets and they are switched off the next day morning after there is sufficient light on the roads, this paper gives the best solution for electrical power wastage. Also, the manual operation of the lighting system is completely eliminated. In this paper the two sensors are used which are Light Dependent Resistor LDR sensor to indicate a day/night time and the photoelectric sensors to detect the movement on the street. This movement helps the vehicle to alert in advance through indication, before it reaches near the crossing. Here Air Quality is been also monitored. This proposed model will monitor the air quality and display the real-time level of the air. The air ppm values will be divided into certain parameters threshold levels through which system can decide the quality of air. Above model also include live dashboard where user can view the status of air online in cloud. The live data is been generated and communicated with Arduino.io cloud to store the data for further analysis. This model will help in maintaining the air quality around street. Additionally, it also checks for fault among the street lights where it’s shown in the dashboard. The Microcontroller is used as brain to control the street light system, where the programming language used for developing the software to the microcontroller is Clanguage. Finally, the system is using MQTT protocol for the communication purpose which ensures the data reliability and instant actuations between controller and cloud.
The Role of Private Sector in the Development of Higher Education in India

It is understood that higher education is the basis of knowledge based society. All the countries in the world are trying to strengthen their higher education base. With the globalization and development of knowledge worldwide, the scope of higher education has been extended. People with excellence are welcome by every country. As knowledge creates knowledge, the talented persons get the chance of widening their education. Exchange of education between countries helps us to improve our knowledge. Due to increase in population growth the demand for higher education also increases rapidly.To satisfy the demand for higher education sufficient infrastructure should be developed. Though the Government is primarily responsible for the said development but the scope of development is so wide and expensive that the Government alone cannot cope with this. Consequently, private sector enters into the system. The paper explores need, challenges and role of privatization of higher education in India and also this paper analyzes infrastructure of higher education in India.