sadat2307/MSciNLI huggingface dataset:
Domain: Security and privacy
Sentence 1: Then, the only InfoLeakage client pairs affected are clients whose VMs reside in machine 1 and 2 (i.e., only the co-residency between VM c,i and VMs in machine 1 and 2 are affected by this move).
Sentence 2: we consider it inefficient to try the moves across all machines when the number of affected co-residency pair is bounded.
Relationship: reasoning
Domain: Security and privacy
Sentence 1: Lastly, Equation 16 models the migration budget such that the total number of migrations should not exceed PercentBudget of the total workloads (i.e., total number of VMs that currently have place assignments).
Sentence 2: d was scaled such that the number of epochs, hence the number of migrations, in each experiment is roughly the same for both exper­iments (i.e., D = 4 min for 20 min completion time and D = 1 min for 3 4 min completion time).
Relationship: neutral
Domain: Security and privacy
Sentence 1: Note that each move conceptually changes the state of the system and thus the benefit of future moves may decrease or increase de­pending on the moves we have already made; e.g., moving VM c,i may mean that all previously considered swaps involving this in­stance may no longer provide any value.
Sentence 2: nomad offers a practical vector-agnostic and robust defense against arbitrary (and future) side channels.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Our whitelisting logic must guarantee that only the authorized scripts (scripts with legitimate signature) are allowed to enter the browser's JavaScript parser module, as mentioned in rule 1 in Section 3.2.
Sentence 2: our whitelisting module must be placed in a location where it is exposed to all the interfaces JavaScript parser has with client-side web components like HTML parser and CSS parser. In Chromium, the right point to place our whitelisting log.
Relationship: reasoning
Domain: Security and privacy
Sentence 1: Although we now handle a reactive functionality, we stress that the cash that is deposited at the beginning of the protocol is dis­tributed only at the end (i.e., no cash distribution occurs in any intermediate stage).
Sentence 2: secure cash distribution provides a means to keep the cash deposited in escrow while parties learn output from each stage's function evaluation, and thus can revise their inputs to a later stage.
Relationship: entailment
Domain: Security and privacy
Sentence 1: As GPU page tables support read-write access control in many modern GPUs (e.g. Nvidia GPUs [4], AMD GPUs [6] and recent Intel GPUs [23, 2]), the TDK can protect GPU command buffers by mapping their read-only accesses to GPU local page tables.
Sentence 2: some Intel GPUs provide different hardware protection mechanisms. 
Relationship: contrasting
Domain: Security and privacy
Sentence 1: In­tuitively, the security-sensitive GPU objects are those that can be programmed by untrusted software (e.g., malicious drivers, applications) to break the confidentiality or authen­ticity of trusted display output, and those which can be tainted by access to other sensitive GPU objects.
Sentence 2: new hardware architectures make the trapper's overhead negligible.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Attack attribution to identify attackers is generally considered as a hard problem because attackers may employ various methods to conceal their identities, e.g., obfuscating or re-packing binaries, changing the URLs and domains of servers, launching attacks from geographicallydistributed compromised machines.
Sentence 2: 55.5% of malicious downloaders are signed, accounting for 73.8% of the malicious influence graphs.
Relationship: contrasting
Domain: Security and privacy
Sentence 1:  However, node B downloads additional files, some of which (nodes C and F) are detected as malicious, suggesting that node B, and potentially node D downloaded from the same domain as node B, as well as all of the nodes reachable from them in the downloader graph, are likely involved in malware distribution.
Sentence 2: by analyzing the downloader graphs on a host we can identify large parts of the malware download activity, which may otherwise remain undetected.
Relationship: reasoning
Domain: Security and privacy
Sentence 1: It is easy to see that as long as the master CRS is of the perfectly sound type, the proofs that crs0/1 is an encryption of 1 will be perfect and hence the voters cannot stuff invalid ciphertexts in the virtual ballot box.
Sentence 2: as mentioned above, the EA might attempt to use a master CRS of the second type (simulatable) and then collaborate with a voter to violate integrity.
Relationship: contrasting
Domain: Security and privacy
Sentence 1: By contrast, Table 3 shows that traffic from the manual exchanges is predominantly directed at sites that advertise affiliate programs, other manual traffic exchanges, or pages advertising goods sold by the participants themselves.
Sentence 2: pages visited in the manual exchanges appear directed at luring humans (the exchange participants) to upgrade, join other exchanges or affiliate programs, or purchase products that do not have mainstream appeal.
Relationship: entailment
Domain: Security and privacy
Sentence 1: In the case of email addresses, for example, 21% of domain-keys have all their values matching the rule (i.e., the ratio is 1) and over half (58%) of the domain-keys have at least 20% of their values matching the seed rule.
Sentence 2: the name domain-key shows that the vast majority (over 90%) of domain-keys that have at least one matching value have less than 10% of all their values match.
Relationship: contrasting
Domain: Security and privacy
Sentence 1: The intuition behind this is that key names will likely be used coherently (i.e., for carrying the same type of information) within the same domain (e.g., google.com may use the keyword ggender to collect user s gender re­gardless the specific Google service).
Sentence 2: a same key might be used in the context of different domains with a different meanings (e.g., the key id may be used dif- Dataset HTTP flows Tuples Domain-keys Lab traffic 9,227 20,810 8,372 ISP traffic 40,775,119 51,368,712 3,113,696  Table 2: High-level statistics of our two datasets.
Relationship: contrasting
Domain: Security and privacy
Sentence 1: This property benefits not only the early adopters of the scheme, but also the overall security of other (non-adopting) systems.
Sentence 2: in this case, an adversary has access to the system, where she can observe authentication attempts, has access to user­names/passwords files, and can query the hardware-dependent function HDF; the only thing an adversary does not have ac­cess to is plaintext passwords and the secret HSM key.
Relationship: neutral
Domain: Security and privacy
Sentence 1: The canary initialization that occurs during the creation of threads and processes is exactly the same in DynaGuard and in glibc, with the only difference being that the Dy­naGuard canary is stored at a different location in the TLS area.
Sentence 2: the entropy of canaries is not affected, but now the TLS holds two different types of canaries: the stan­dard glibc canary and the DynaGuard canary.
Relationship: reasoning
Domain: Security and privacy
Sentence 1: However, this is not feasible in current canary-based pro­tectors, as hardened programs do not store any information regarding where (in their address space) their canaries are stored.
Sentence 2: once a child process is forked, there is no way for it to access the canaries in the frames it inherited from its parent process, as it cannot differentiate canaries from random data that may be residing in the stack.
Relationship: reasoning
Domain: Security and privacy
Sentence 1: The idea is to perform self-benchmarking of critical portions of code in order to ensure that debugging breakpoints have not been inserted, and an attacker has not tampered with critical portions of the virtual processor such as the native system calls, using timing analysis from within the V-OS firmware to detect such an attack in progress.
Sentence 2: while this concept works against some attacks, we have found this difficult to implement in production due to the native processor speed variation both between mobile devices as well as within an execution session due to multitasking.
Relationship: contrasting
Domain: Security and privacy
Sentence 1: Because the links between the application and its libraries are only resolved at load time and because they are stored in the form of easily readable symbol information, attackers can study which external functionality the program requires and influence the linking process to their own advantage.
Sentence 2: attackers can hook a shared library, which means that run-time invocations to shared library functionality are redirected to code controlled by the attacker.
Relationship: entailment
Domain: Security and privacy
Sentence 1: To prevent attackers from easily reverse engineering the distributed binaries, a software vendor can obfuscate the binaries he distributes, i.e., transform them into semantically equivalent ones that are significantly harder to understand and reverse engineer.
Sentence 2: when a vendor deploys an obfuscator tool on his software, this tool will only transform the code available at obfuscation time.
Relationship: contrasting
Domain: Security and privacy
Sentence 1: Custom Library Loader The original program entry point (point 1 in Figure 2 (a)) is replaced with a newly inserted library loader function (point 1 in Figure 2 (b)) that replaces the operating system s dynamic linker.
Sentence 2: attackers can hook a shared library, which means that run-time invocations to shared library functionality are redirected to code controlled by the attacker.
Relationship: neutral
Domain: Security and privacy
Sentence 1: The results of this case study show that optimization and static obfuscating transformations (e.g., replacing with fun­damental instructions, embedding a specialized interpreter, flattening control flow and encoding arithmetic/data) have little effect on artificiality.
Sentence 2: dynamic obfuscating transfor­mations (e.g., instruction camouflage and code encryption), or a technique that inserts junk code fragments into the program, tend to increase the artificiality, which may have a significant impact on the stealth of the code.
Relationship: contrasting
Domain: Security and privacy
Sentence 1: Nowadays, the XACML (eXtensible Access Control Markup Language) [1] has become the de facto standard in the context of access control systems.
Sentence 2: the second row reports the name of mutation operators, the first column the Sun PDP classes involved in the experiment while in each table entry there is the obtained mutation score (the dash indicates that the mutation operator is not applicable to the Sun PDP class).
Relationship: neutral
Domain: Security and privacy
Sentence 1: In the first one, a framework-aware application is used, e.g. one that knows how to invoke the functionalities of the enforcement & publishing layer, which are exported through a set of layer API.
Sentence 2: coco Cloud supports several deployment and service models, since its services may be offered in a public, private, or hybrid Cloud, and in IaaS or SaaS services.
Relationship: neutral
Domain: Security and privacy
Sentence 1: At run time, the value of each field that was labeled as a source of private data is logged.
Sentence 2: the most basic extensions execute standard class behavior, but have code that allows Labyrinth to log all the private data entered by end users, such as user ID, password, and credit-card number, as well as data that the application retrieves from the environment, such as the device s location.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Bitansky Garg et al. and Canetti Holmgren et al. con­struct a semi-succinct garbling scheme for RAM programs, assuming non-succinct Indistinguishability Obfuscation (IO) and injective one way functions [BGL+15, CHJV15].
Sentence 2: they construct garbling schemes where the space and run­time of the garbled program are proportional to the space and runtime of the plaintext program, and where the size of the garbled program is proportional to the space complexity of the plaintext program.
Relationship: entailment
Domain: Security and privacy
Sentence 1: Koppula, Lewko and Waters [KLW15] devise a fully suc­cinct garbling scheme for Turing machines from non-succinct IO and one way functions, using techniques that extend those of [CHJV15].
Sentence 2: in their garbling scheme the runtime, space and description size of the garbled program are proportional to those of the Turing machine representa­tion of the plaintext program.
Relationship: entailment
Domain: Security and privacy
Sentence 1: To argue for the indistinguishability between Hybi and Hyb ' i, we note that the i-th decryption key is not used in the honest evaluation, since the computation after time step i is erased.
Sentence 2: we can puncture the random­ ness and erase the decryption key from the program (which uses CiO security as well), and reach a hybrid (from Hybi) where semantic security holds for the output ciphertext at time step i.
Relationship: reasoning
Domain: Security and privacy
Sentence 1: Toward that end, we propose a scale development study to specify the components of H and I in Figure 1 and subsequently test the entire model (i.e., letters A through I in Figure 1).
Sentence 2: we propose a study aimed at specifying perception-based trust in a way that is quite novel because it is grounded in the trust requirements and perceptions of system administrators.
Relationship: entailment
Domain: Security and privacy
Sentence 1: For the Sancus-based design of Soteria we thought of two possible concepts: (1) Putting a loader stub together with the code that should be encrypted into one module and decrypting it in-place, and (2) designing a separate loader module.
Sentence 2: we give upper bounds for the actual performance results which are expected to be even less than those shown in Table 2.
Relationship: neutral
Domain: Security and privacy
Sentence 1: In this paper, we demonstrate how to bypass the integrity checking of the rights object in the OMA DRM system through a case study of MelOn (a well-known music distribution service in South Korea) by reverse engineering its media player equipped with a DRM agent.
Sentence 2: we need to disable the integrity check of the rights object in the OMA DCF files if we want to use it without any usage constraint.
Relationship: neutral
Domain: Security and privacy
Sentence 1: Federated identity services have gained widespread popularity among users as a simplifying means for managing their online identities.
Sentence 2: federated identity providers (e.g., Facebook and PayPal) employ authentication protocols such as OAuth [20, 21] and OpenID [34] to offer their users the convenience of using single identity and thus a single credential  to log into and access various third-party applications (e.g., Wiki and StackOverflow).
Relationship: entailment
Domain: Security and privacy
Sentence 1: Al­though [2] overcomes the major drawbacks of the recom­bined fingerprinting approach, it still exhibits the following shortcomings: (1) the system still requires a two-layer anti­collusion encoding of the fingerprint, which results in long fingerprints; and (2) the hash of the fingerprint is used to trace an illegal re-distributor in case of collusion of several buyers and, hence, such a hash must be a valid codeword of some anti-collusion code.
Sentence 2: the transaction monitor still requires the cooperation of the proxies to construct a valid hash-level codeword.
Relationship: reasoning
Domain: Security and privacy
Sentence 1: Finally, we will discuss the open research problems about the security and privacy of genomic data.
Sentence 2: we will discuss (i) genomic data sharing between different enti­ties, (ii) privacy vs. utility of genomic data, (iii) integrat­ing genomic data in individuals electronic health records, (iv) access control issues, (v) credibility and liability issues of genomic data, and (vi) standardization efforts by Global Alliance for Genomics and Health (GA4GH).
Relationship: entailment
Domain: Security and privacy
Sentence 1: Each access control server is responsible for verifying the access control requirements bound to specific object/permission combinations, issuing signed tokens attesting to such verification, and verifying the signatures of the tokens it receives.
Sentence 2: each AC server must faithfully store a private token signing key in a secure manner and verify both the access control requirements governing specific token requests and the signatures and claims on all incoming tokens.
Relationship: reasoning
Domain: Security and privacy
Sentence 1: In the ROS, data messages exchanged between the master and the node, called a Bag, Bag file can be used to play this back when you need it and repeat the same action to the Robot.
Sentence 2: the configuration environment for the ROS authentication scheme is ROS Indigo version, and Fig. 1 shows the Raspberry pi 2 environment running the master, and Fig. 2 shows the attacker's environment. 
Relationship: neutral
Domain: Security and privacy
Sentence 1: Similar to other MLE instantiations, convergent encryption suffers from a number of attacks such as dictionary attacks [7]; here, if the cloud server can predict the content of a message/file, then it can derive the corresponding encryption key and decrypt the message.
Sentence 2: one generic mitigation of side channels in the cloud is frequent migration, i.e. switching to a separate set of the underlying resources.
Relationship: neutral
Domain: Security and privacy
Sentence 1: 2.2 Efects of MV Based Steganography on Video Statistics According to current MV based steganography [1, 3, 6, 10, 27, 29], one or two components of a MV can be modified during e emmbeding.
Sentence 2: the features in [20] and [26] are based on the first-order distributions (histograms) of NMVDs and the joint distributions of NMVDs.
Relationship: neutral
Domain: Software and its engineering
Sentence 1: For example, the rule for an if expression type checks each branch under the assumption that the condition is true or false.
Sentence 2: it will then examine the congruence equivalence class of these expressions to see if they contain any suitable values any value v is suitable for a, a function value rec f x.a0 for f, and a value headed by a data constructor for b and then unfold the resulting expression (rec f x.a0) v. (If there are several suitable values, one is selected arbitrarily).
Relationship: neutral
Domain: Software and its engineering
Sentence 1: The total-store-ordering semantics [23] provides that all instructions are executed in program order (or, more precisely, cannot be observed to be executed out of program order), each write is visible either globally or only to its own thread, and writes become globally visible in program order.
Sentence 2: visibility and execution-order edges compile away to nothing, and pushes can be implemented by mfences.
Relationship: reasoning
Domain: Software and its engineering
Sentence 1: The process ABI includes higherlevel abstractions, such as file descriptors, signals, and network sockets, whereas a VM manipulates emulated hardware abstractions, such as a virtual disk, CPU interrupts, and a virtual network card.
Sentence 2: adding VM support to a legacy OS, such as adding KVM to Linux, requires replacing the system call table with a hypercall table, the ability to trap accesses to privileged hardware, and a PC hardware model, generally running as a separate process.
Relationship: entailment
Domain: Software and its engineering
Sentence 1: In formal notations, we use API to denote { CLAPI }, and operations on APIs are naturally set operations (e.g. API1 - API2 is set substraction, which excludes class declarations in API2 from API1 ).
Sentence 2: we use the notation APIs to denote the source API, CLAPI , and APId to denote the target API, CL'API , respectively.
Relationship: entailment
Domain: Software and its engineering
Sentence 1: Splitting the heap into two generations enables the GC to use a run-time-efficient collection strategy for objects that are likely to die (i.e., young objects) and a more memory-efficient strategy for objects that are unlikely to die (i.e., old objects).
Sentence 2: the run-time-efficient Scavenge algorithm (minor GC) is used for the young generation, whereas the Mark and Compact algorithm (major GC) is used if all spaces need collecting.
Relationship: reasoning
Domain: Software and its engineering
Sentence 1: We face a trade off in choosing Tthreshold: with a smaller value of Tthreshold, the software approach can infer in a more timely manner if a device has pending tasks and can capture shorter periods in which a device has no pending task.
Sentence 2: a smaller Tthreshold leads to more aggressive PM; however, to avoid false report of no pending task, Tthreshold needs to be greater than the largest possible interval between register accesses when a device has pending tasks.
Relationship: reasoning
Domain: Software and its engineering
Sentence 1: For example, assuming the aggregator has 10 ISNs, if we want to process 90% of user requests within 100 ms, then each ISN needs to reply within 100 ms with probability around 0.99.  
Sentence 2: for a total latency of 100 ms at the 90th-percentile response time, the response time of each ISN must be at most 100 ms at the 99th-percentile.
Relationship: entailment
Domain: Software and its engineering
Sentence 1: OS designers are experts in how their systems work: they represent the best opportunity to enhance the security of the system.
Sentence 2: by selecting this abstraction, the outer kernel still manages all aspects of the virtual memory subsystem; however, the nested kernel interposes on all pMMU updates, thereby allowing the nested kernel to isolate the pMMU and enforce any other access control policy in the system, such as the one used to protect nested kernel code and data.
Relationship: neutral
Domain: Software and its engineering
Sentence 1: If consistency-control scheme is designed based on WAL scheme, the file system reflects the updates from the logging area to the file system area, whenever read request is issued.
Sentence 2: since MinL2R reflects the updates to the file system area directly with rollback-recovery scheme, the application can read the requested data from file system area of SCM storage, regardless of logged data.
Relationship: contrasting
Domain: Software and its engineering
Sentence 1: The MVC pattern advocates separation of concerns between three entities: models capturing app data, views describing the visual appearance and the controller which handles transformations between models and views along with navigation control.
Sentence 2: to encourage rapid adoption, it is more pragmatic to augment existing popular frameworks with new abstractions, e.g., by creating framework-specific plugins/libaries, instead of creating a new ecosystem from scratch.
Relationship: neutral
Domain: Software and its engineering
Sentence 1: Thus, we believe that within this operating range (up to 250 booted, 300 frozen VMs) all transition times remain largely constant, regardless of the number of booted and frozen VMs.
Sentence 2: we represent the average transition times (within the operating range) as the transition matrix T3×3 (shown in Table 2, where ti, j=time to transition from state Si to Sj).
Relationship: reasoning
Domain: Software and its engineering
Sentence 1: Two-stroke engines also exist and are sometimes used in aircraft and marine engines, as well as some trucks and motorcycles, due to a more compact size, a lighter weight, and greater efficiency.
Sentence 2: due to exhaust pollution, twostroke engines are losing out to, and being replaced by, fourstroke engines in many applications, especially in modern cars (which is our focus).
Relationship: contrasting