nils-herrmann/clean_scirepeval huggingface dataset:
Penetration Testing

The TCB shall be found resistant to penetration. Near flawless penetration testing is a requirement for high-rated secure systems — those rated above B1 based on the Trusted Computer System Evaluation Criteria (TCSEC) and its Trusted Network and Database Interpretations (TNI and TDI). Unlike security functional testing, which demonstrates correct behavior of the product's advertised security controls, penetration testing is a form of stress testing which exposes weaknesses — that is, flaws — in the trusted computing base (TCB). This essay describes the Flaw Hypothesis Methodology (FHM), the earliest comprehensive and widely used method for conducting penetrations testing. It reviews motivation for penetration testing and penetration test planning, which establishes the goals, ground rules, and resources available for testing. The TCSEC defines " flaw " as " an error of commission, omission, or oversight in a system that allows protection mechanisms to be bypassed. " This essay amplifies the definition of a flaw as a demonstrated unspecified capability that can be exploited to violate security policy. The essay provides an overview of FHM and its analogy to a heuristic-based strategy game. The 10 most productive ways to generate hypothetical flaws are described as part of the method, as are ways to confirm them. A review of the results and representative generic flaws discovered over the past 20 years is presented. The essay concludes with the assessment that FHM is applicable to the European ITSEC and with speculations about future methods of penetration analysis using formal methods, that is, mathematically 270 Information Security specified design, theorems, and proofs of correctness of the design. One possible development could be a rigorous extension of FHM to be integrated into the development process. This approach has the potential of uncovering problems early in the design , enabling iterative redesign. A security threat exists when there are the opportunity, motivation, and technical means to attack: the when, why, and how. FHM deals only with the " how " dimension of threats. It is a requirement for high-rated secure systems (for example, TCSEC ratings above B1) that penetration testing be completed without discovery of security flaws in the evaluated product, as part of a product or system evaluation [DOD85, NCSC88b, NCSC92]. Unlike security functional testing, which demonstrates correct behavior of the product's advertised security controls, penetration testing is a form of stress testing, which exposes weaknesses or flaws in the trusted computing base (TCB). It has …
Performance comparison of SOAP and REST based Web Services for Enterprise Application Integration

Web Services are common means to exchange data and information over the network. Web Services make themselves available over the internet, where technology and platform are independent. Once web services are built it is accessed via uniform resource locator (URL) and their functionalities can be utilized in the application domain. Web services are self-contained, modular, distributed and dynamic in nature. These web services are described and then published in Service Registry e.g., UDDI and then they are invoked over the Internet. Web Services are basic Building blocks of Services Oriented Architecture (SOA). These web services can be developed based on two interaction styles such as Simple Object Access Protocol (SOAP) and Representational State Transfer Protocol (REST). It is important to select appropriate interaction styles i.e., either SOAP or REST for building Web Sevices. Choosing service interaction style is an important architectural decision for designers and developers, as it influences the underlying requirements for implementing web service solutions. In this study, the performance of application of web services for Enterprise Application Integration (EAI) based on SOAP and REST is compared. Since web services operate over network throughput and response time are considered as a metrics parameter for evaluation.
Executive control and decision-making in the prefrontal cortex

action sets thus comprise multiple stimulusaction and (stimulus)-action-outcome associations, which are learned and continuously adjusted online for maximizing rewards. Computational modeling suggest that stimulus-action and (stimulus)-action-outcome associations are learned and adjusted through reinforcement and statistical learning respectively [33 ,34], while abstract action sets emerge through probabilistic clustering processes [29]. Collectively, these flexible representations invoked together for driving action selection while the same external situation perpetuates, constitute a consistent behavioral strategy also referred to as a task set . Task sets and adaptive behavior Task sets are critical executive units for efficient adaptive behavior in everyday environments featuring external situations that often change and may reoccur periodically Current Opinion in Behavioral Sciences 2015, 1:101–106 102 Cognitive neuroscience
PhonMatrix: Visualizing co-occurrence constraints of sounds

This paper describes the online tool PhonMatrix, which analyzes a word list with respect to the co-occurrence of sounds in a specified context within a word. The cooccurrence counts from the user-specified context are statistically analyzed according to a number of association measures that can be selected by the user. The statistical values then serve as the input for a matrix visualization where rows and columns represent the relevant sounds under investigation and the matrix cells indicate whether the respective ordered pair of sounds occurs more or less frequently than expected. The usefulness of the tool is demonstrated with three case studies that deal with vowel harmony and similar place avoidance patterns.
AMNESIA: analysis and monitoring for NEutralizing SQL-injection attacks

The use of web applications has become increasingly popular in our routine activities, such as reading the news, paying bills, and shopping on-line. As the availability of these services grows, we are witnessing an increase in the number and sophistication of attacks that target them. In particular, SQL injection, a class of code-injection attacks in which specially crafted input strings result in illegal queries to a database, has become one of the most serious threats to web applications. In this paper we present and evaluate a new technique for detecting and preventing SQL injection attacks. Our technique uses a model-based approach to detect illegal queries before they are executed on the database. In its static part, the technique uses program analysis to automatically build a model of the legitimate queries that could be generated by the application. In its dynamic part, the technique uses runtime monitoring to inspect the dynamically-generated queries and check them against the statically-built model. We developed a tool, AMNESIA, that implements our technique and used the tool to evaluate the technique on seven web applications. In the evaluation we targeted the subject applications with a large number of both legitimate and malicious inputs and measured how many attacks our technique detected and prevented. The results of the study show that our technique was able to stop all of the attempted attacks without generating any false positives.
Cellular and molecular mechanisms of HIV-1 integration targeting

Integration is central to HIV-1 replication and helps mold the reservoir of cells that persists in AIDS patients. HIV-1 interacts with specific cellular factors to target integration to interior regions of transcriptionally active genes within gene-dense regions of chromatin. The viral capsid interacts with several proteins that are additionally implicated in virus nuclear import, including cleavage and polyadenylation specificity factor 6, to suppress integration into heterochromatin. The viral integrase protein interacts with transcriptional co-activator lens epithelium-derived growth factor p75 to principally position integration within gene bodies. The integrase additionally senses target DNA distortion and nucleotide sequence to help fine-tune the specific phosphodiester bonds that are cleaved at integration sites. Research into virus–host interactions that underlie HIV-1 integration targeting has aided the development of a novel class of integrase inhibitors and may help to improve the safety of viral-based gene therapy vectors.
Stochastic Predictive Control of Autonomous Vehicles in Uncertain Environments

Autonomous vehicles operating in dynamic urban environments must account for the uncertainty arising from the behavior of other objects in the environment. For this purpose, we develop an integrated environment modeling and stochastic Model Predictive Control (MPC) framework. The trade–off between risk and conservativeness is managed by a risk factor which is a parameter in the control design process. The environment model consists of an Interacting Multiple Model Kalman Filter to estimate and predict the positions of target vehicles. The uncertain predictions are used to formulate a chance–constrained MPC problem. The overall goal is to develop a framework for safe autonomous navigation in the presence of uncertainty and study the effect of the risk parameter on controller performance. Simulations of an autonomous vehicle driving in the presence of moving vehicles show the effectiveness of the proposed framework.
On Valid Optimal Assignment Kernels and Applications to Graph Classification

The success of kernel methods has initiated the design of novel positive semidefinite functions, in particular for structured data. A leading design paradigm for this is the convolution kernel, which decomposes structured objects into their parts and sums over all pairs of parts. Assignment kernels, in contrast, are obtained from an optimal bijection between parts, which can provide a more valid notion of similarity. In general however, optimal assignments yield indefinite functions, which complicates their use in kernel methods. We characterize a class of base kernels used to compare parts that guarantees positive semidefinite optimal assignment kernels. These base kernels give rise to hierarchies from which the optimal assignment kernels are computed in linear time by histogram intersection. We apply these results by developing the Weisfeiler-Lehman optimal assignment kernel for graphs. It provides high classification accuracy on widely-used benchmark data sets improving over the original Weisfeiler-Lehman kernel.
Pediatric injuries from needles discarded in the community: epidemiology and risk of seroconversion.

Although anxiety exists concerning the perceived risk of transmission of bloodborne viruses after community-acquired needlestick injuries, seroconversion seems to be rare. The objectives of this study were to describe the epidemiology of pediatric community-acquired needlestick injuries and to estimate the risk of seroconversion for HIV, hepatitis B virus, and hepatitis C virus in these events.



The study population included all of the children presenting with community-acquired needlestick injuries to the Montreal Children's Hospital between 1988 and 2006 and to Hôpital Sainte-Justine between 1995 and 2006. Data were collected prospectively at Hôpital Sainte-Justine from 2001 to 2006. All of the other data were reviewed retrospectively by using a standardized case report form.



A total of 274 patients were identified over a period of 19 years. Mean age was 7.9 +/- 3.4 years. A total of 176 (64.2%) were boys. Most injuries occurred in streets (29.2%) or parks (24.1%), and 64.6% of children purposely picked up the needle. Only 36 patients (13.1%) noted blood on the device. Among the 230 patients not known to be immune for hepatitis B virus, 189 (82.2%) received hepatitis B immunoglobulin, and 213 (92.6%) received hepatitis B virus vaccine. Prophylactic antiretroviral therapy was offered beginning in 1997. Of the 210 patients who presented thereafter, 82 (39.0%) received chemoprophylaxis, of whom 69 (84.1%) completed a 4-week course of therapy. The use of a protease inhibitor was not associated with a significantly higher risk of adverse effects or early discontinuation of therapy. At 6 months, 189 were tested for HIV, 167 for hepatitis B virus, and 159 for hepatitis C virus. There were no seroconversions.



We observed no seroconversions in 274 pediatric community-acquired needlestick injuries, thereby confirming that the risk of transmission of bloodborne viruses in these events is very low.
Health Monitoring and Fault Diagnosis in Induction Motor-A Review

Induction motor especially three phase induction motor plays vital role in the industry due to their advantages over other electrical motors. Therefore, there is a strong demand for their reliable and safe operation. If any fault and failures occur in the motor it can lead to excessive downtimes and generate great losses in terms of revenue and maintenance. Therefore, an early fault detection is needed for the protection of the motor. In the current scenario, the health monitoring of the induction motor are increasing due to its potential to reduce operating costs, enhance the reliability of operation and improve service to the customers. The health monitoring of induction motor is an emerging technology for online detection of incipient faults. The on-line health monitoring involves taking measurements on a machine while it is in operating conditions in order to detect faults with the aim of reducing both unexpected failure and maintenance costs. In the present paper, a comprehensive survey of induction machine faults, diagnostic methods and future aspects in the health monitoring of induction motor has been discussed.
J-NERD: Joint Named Entity Recognition and Disambiguation with Rich Linguistic Features

Methods for Named Entity Recognition and Disambiguation (NERD) perform NER and NED in two separate stages. Therefore, NED may be penalized with respect to precision by NER false positives, and suffers in recall from NER false negatives. Conversely, NED does not fully exploit information computed by NER such as types of mentions. This paper presents J-NERD, a new approach to perform NER and NED jointly, by means of a probabilistic graphical model that captures mention spans, mention types, and the mapping of mentions to entities in a knowledge base. We present experiments with different kinds of texts from the CoNLL’03, ACE’05, and ClueWeb’09-FACC1 corpora. J-NERD consistently outperforms state-of-the-art competitors in end-to-end NERD precision, recall, and F1.
Link Prediction in Multi-modal Social Networks

Online social networks like Facebook recommend new friends to users based on an explicit social network that users build by adding each other as friends. The majority of earlier work in link prediction infers new interactions between users by mainly focusing on a single network type. However, users also form several implicit social networks through their daily interactions like commenting on people’s posts or rating similarly the same products. Prior work primarily exploited both explicit and implicit social networks to tackle the group/item recommendation problem that recommends to users groups to join or items to buy. In this paper, we show that auxiliary information from the useritem network fruitfully combines with the friendship network to enhance friend recommendations. We transform the well-known Katz algorithm to utilize a multi-modal network and provide friend recommendations. We experimentally show that the proposed method is more accurate in recommending friends when compared with two single source path-based algorithms using both synthetic and real data sets.
Anthropomorphic Low-Inertia High-Stiffness Manipulator for High-Speed Safe Interaction

In this paper, a manipulator is proposed for safe human–robot interaction at high speed. The manipulator has both low mass and inertia and high stiffness and strength. It is basically a cable-driven manipulator; nevertheless, by using a unique lightweight tension-amplification mechanism, the manipulator retains high stiffness and strength. The joint stiffness, which is strongly related to the motion control performance, is amplified by the quadratic order. Both 1-degree of freedom (DOF) and 3-DOF joint mechanisms using the tension-amplification mechanism are presented and combined to develop a 7-DOF anthropomorphic manipulator named LIMS. The mass and inertia beyond the shoulder were 2.24 kg and 0.599 kg·m2, respectively, which are lower than those of a human. The stiffness of the developed elbow joint was 1410 N·m/rad, which is approximately seven times higher than that of a human. Considering the ratio of stiffness to inertia, the manipulator is expected to show a control performance that is comparable to those of conventional industrial manipulators. Comprehensive experiments, including joint stiffness tests and high-speed interaction tests, were conducted to verify the feasibility of the developed manipulator.
Document Image Dewarping Contest

Dewarping of documents captured with hand-held cameras in an uncontrolled environment has triggered a lot of interest in the scientific community over the last few years and many approaches have been proposed. However, there has been no comparative evaluation of different dewarping techniques so far. In an attempt to fill this gap, we have organized a page dewarping contest along with CBDAR 2007. We have created a dataset of 102 documents captured with a hand-held camera and have made it freely available online. We have prepared text-line, text-zone, and ASCII text ground-truth for the documents in this dataset. Three groups participated in the contest with their methods. In this paper we present an overview of the approaches that the participants used, the evaluation measure, and the dataset used in the contest. We report the performance of all participating methods. The evaluation shows that none of the participating methods was statistically significantly better than any other participating method.
Recombination Without Respect: Schema Combination and Disruption in Genetic Algorithm Grossover

One-point (or n-point) crossover has the property that schemata exhibited by both parents are ‘respected’transferred to the offspring without disruption. In addition, new schemata may, potentially, be created by combination of the genes on which the parents differ. Some argue that the preservation of similarity is the important aspect of crossover, and that the combination of differences (key to the building-block hypothesis) is unlikely to be valuable. In this paper, we discuss the operation of recombination on a hierarchical buildingblock problem. Uniform crossover, which preserves similarity, fails on this problem. Whereas, one-point crossover, that both preserves similarity and combines differences, succeeds. In fact, a somewhat perverse recombination operator, that combines differences but destroys schemata that are common to both parents, also succeeds. Thus, in this problem, combination of schemata from dissimilar parents is required, and preserving similarity is not required. The test problem represents an extreme case, but it serves to illustrate the different aspects of recombination that are available in regular operators such as one-point crossover.
A literature review of electronic portal imaging for radiotherapy dosimetry.

Electronic portal imaging devices (EPIDs) have been the preferred tools for verification of patient positioning for radiotherapy in recent decades. Since EPID images contain dose information, many groups have investigated their use for radiotherapy dose measurement. With the introduction of the amorphous-silicon EPIDs, the interest in EPID dosimetry has been accelerated because of the favourable characteristics such as fast image acquisition, high resolution, digital format, and potential for in vivo measurements and 3D dose verification. As a result, the number of publications dealing with EPID dosimetry has increased considerably over the past approximately 15 years. The purpose of this paper was to review the information provided in these publications. Information available in the literature included dosimetric characteristics and calibration procedures of various types of EPIDs, strategies to use EPIDs for dose verification, clinical approaches to EPID dosimetry, ranging from point dose to full 3D dose distribution verification, and current clinical experience. Quality control of a linear accelerator, pre-treatment dose verification and in vivo dosimetry using EPIDs are now routinely used in a growing number of clinics. The use of EPIDs for dosimetry purposes has matured and is now a reliable and accurate dose verification method that can be used in a large number of situations. Methods to integrate 3D in vivo dosimetry and image-guided radiotherapy (IGRT) procedures, such as the use of kV or MV cone-beam CT, are under development. It has been shown that EPID dosimetry can play an integral role in the total chain of verification procedures that are implemented in a radiotherapy department. It provides a safety net for simple to advanced treatments, as well as a full account of the dose delivered. Despite these favourable characteristics and the vast range of publications on the subject, there is still a lack of commercially available solutions for EPID dosimetry. As strategies evolve and commercial products become available, EPID dosimetry has the potential to become an accurate and efficient means of large-scale patient-specific IMRT dose verification for any radiotherapy department.
Neural networks for classification: a survey

Classification is one of the most active research and application areas of neural networks. The literature is vast and growing. This paper summarizes the some of the most important developments in neural network classification research. Specifically, the issues of posterior probability estimation, the link between neural and conventional classifiers, learning and generalization tradeoff in classification, the feature variable selection, as well as the effect of misclassification costs are examined. Our purpose is to provide a synthesis of the published research in this area and stimulate further research interests and efforts in the identified topics.
Challenges in health information systems integration: Zanzibar experience

The healthcare milieu of most developing countries is often characterized by multiplicity of health programs supported by myriad of donors geared towards reversing disease trends in these countries. However, donor policies tend to support implementation of vertical programs which maintain their own management structures and information systems. The emerging picture overtime is proliferation of multiple and uncoordinated health information systems (HIS), that are often in conflict with the primary health care goals of integrated district based health information systems. As a step towards HIS strengthening, most countries are pursuing an integration strategy of the vertical HIS. Nevertheless, the challenges presented by the vertical reporting HIS reinforced by funds from the donors renders the integration initiatives ineffective, some ending up as total failure or as mere pilot projects. The failure of the systems after implementation transcends technical fixes. This paper drew on an empirical case to analyze the challenges associated with the effort to integrate the HIS in a context characterized by multiple vertical health programs. The study revealed the tensions that exists between the ministry of health which strived to standardize and integrate the HIS and the vertical programs which pushed the agenda to maintain their systems alongside the national HIS. However, as implied from the study, attaining integration entails the ability to strike a balance between the two forces, which can be achieved by strengthening communication and collaboration linkages between the stakeholders.