Computer Sciences Commons^™

Precise Detection Of Injection Attacks On Concrete Systems, Clayton Whitelaw

USF Tampa Graduate Theses and Dissertations

Injection attacks, including SQL injection, cross-site scripting, and operating system command injection, rank the top two entries in the MITRE Common Vulnerability Enumeration (CVE) [1]. Under this attack model, an application (e.g., a web application) uses some untrusted input to produce an output program (e.g., a SQL query). Applications may be vulnerable to injection attacks because the untrusted input may alter the output program in malicious ways. Recent work has established a rigorous definition of injection attacks. Injections are benign iff they obey the NIE property, which states that injected symbols strictly insert or expand noncode tokens in the output …

A Comparative Study Of Formal Verification Techniques For Authentication Protocols, Hernan Miguel Palombo

USF Tampa Graduate Theses and Dissertations

Protocol verification is an exciting area of network security that intersects engineering and formal methods. This thesis presents a comparison of formal verification tools for security protocols for their respective strengths and weaknesses supported by the results from several case studies. The formal verification tools considered are based on explicit model checking (SPIN), symbolic analysis (Proverif) and theorem proving (Coq). We formalize and provide models of several well-known authentication and key-establishment protocols in each of the specification languages, and use the tools to find attacks that show protocols insecurity. We contrast the modelling process on each of the tools by …

Rapture Of The Geeks, Derek Schuurman

Faculty Work Comprehensive List

"If we are more than machines, what is it that defines our humanity? Is it our intelligence, creativity, or emotion?"

Posting about ­­­­­­­­the distinction between humans and artificial creatures from In All Things - an online hub committed to the claim that the life, death, and resurrection of Jesus Christ has implications for the entire world.

http://inallthings.org/the-rapture-of-the-geeks/

Qubit Measurement Error From Coupling With A Detuned Neighbor In Circuit Qed, Mostafa Khezri, Justin Dressel, Alexander N. Korotkov

Mathematics, Physics, and Computer Science Faculty Articles and Research

In modern circuit QED architectures, superconducting transmon qubits are measured via the state-dependent phase and amplitude shift of a microwave field leaking from a coupled resonator. Determining this shift requires integrating the field quadratures for a nonzero duration, which can permit unwanted concurrent evolution. Here we investigate such dynamical degradation of the measurement fidelity caused by a detuned neighboring qubit. We find that in realistic parameter regimes, where the qubit ensemble-dephasing rate is slower than the qubit-qubit detuning, the joint qubit-qubit eigenstates are better discriminated by measurement than the bare states. Furthermore, we show that when the resonator leaks much …

Security Slicing For Auditing Xml, Xpath, And Sql Injection Vulnerabilities, Julian Thome, Lwin Khin Shar, Lionel Briand

Research Collection School Of Computing and Information Systems

XML, XPath, and SQL injection vulnerabilities are among the most common and serious security issues for Web applications and Web services. Thus, it is important for security auditors to ensure that the implemented code is, to the extent possible, free from these vulnerabilities before deployment. Although existing taint analysis approaches could automatically detect potential vulnerabilities in source code, they tend to generate many false warnings. Furthermore, the produced traces, i.e. dataflow paths from input sources to security-sensitive operations, tend to be incomplete or to contain a great deal of irrelevant information. Therefore, it is difficult to identify real vulnerabilities and …

Systems And Methods For Emergency Situation Communications, Sriram Chellappan, Srinivas Thandu, Patrick Sullivan, Levi Malott

Computer Science Faculty Research & Creative Works

A system for enabling communications during an emergency situation is described. A system may be configured to generate graphical user interfaces including a map displaying a location and a status of the one or more users located at the scene of an emergency situation. The graphical user interfaces may be displayed on a user's portable computing device. The graphical user interfaces may be displayed at a computing device located at a dispatcher site.

Shopminer: Mining Customer Shopping Behavior In Physical Clothing Stores With Passive Rfids, Longfei Shangguan, Zimu Zhou, Xiaolong Zheng, Lei Yang, Yunhao Liu, Jinsong Han

Research Collection School Of Computing and Information Systems

Shopping behavior data are of great importance to understand the effectiveness of marketing and merchandising efforts. Online clothing stores are capable capturing customer shopping behavior by analyzing the click stream and customer shopping carts. Retailers with physical clothing stores, however, still lack effective methods to identify comprehensive shopping behaviors. In this paper, we show that backscatter signals of passive RFID tags can be exploited to detect and record how customers browse stores, which items of clothes they pay attention to, and which items of clothes they usually match with. The intuition is that the phase readings of tags attached on …

Gaussian Nonlinear Line Attractor For Learning Multidimensional Data, Theus H. Aspiras, Vijayan K. Asari, Wesam Sakla

Electrical and Computer Engineering Faculty Publications

The human brain’s ability to extract information from multidimensional data modeled by the Nonlinear Line Attractor (NLA), where nodes are connected by polynomial weight sets. Neuron connections in this architecture assumes complete connectivity with all other neurons, thus creating a huge web of connections. We envision that each neuron should be connected to a group of surrounding neurons with weighted connection strengths that reduces with proximity to the neuron. To develop the weighted NLA architecture, we use a Gaussian weighting strategy to model the proximity, which will also reduce the computation times significantly.

Once all data has been trained in …

Efficient Aerial Data Collection With Uav In Large-Scale Wireless Sensor Networks, Chengliang Wang, Fei Ma, Junhui Yan, Debraj De, Sajal K. Das

Computer Science Faculty Research & Creative Works

Data collection from deployed sensor networks can be with static sink, ground-based mobile sink, or Unmanned Aerial Vehicle (UAV) based mobile aerial data collector. Considering the large-scale sensor networks and peculiarity of the deployed environments, aerial data collection based on controllable UAV has more advantages. In this paper, we have designed a basic framework for aerial data collection, which includes the following five components: deployment of networks, nodes positioning, anchor points searching, fast path planning for UAV, and data collection from network. We have identified the key challenges in each of them and have proposed efficient solutions. This includes proposal …

Why The Graph Isomorphism Problem Is Easier Than Propositional Satisfiability: A Possible Qualitative Explanation, Vladik Kreinovich, Olga Kosheleva

Departmental Technical Reports (CS)

A recent result has shown that the graph isomorphism problem can be solved in quasi-polynomial time, while the general belief is that only exponential time algorithms are possible for propositional satisfiability. This is somewhat counter-intuitive, since for propositional satisfiability, we need to look for one of 2ⁿ options, while in graph isomorphism, we need to look for one of n! options, and n! is much larger than 2ⁿ. Our qualitative explanation for this counter-intuitive fact comes from the fact that, in general, a graph isomorphism problem has a unique solution -- in contrast to propositional satisfiability which, …

Smart Sensing And Mobile Computing, Guihai Chen, Dakshnamoorthy Manivannan, Chen Qian, Fangming Liu, Jinsong Han

Computer Science Faculty Publications

No abstract provided.

Vireo-Tno @ Trecvid 2015: Multimedia Event Detection, Hao Zhang, Yi-Jie Lu, Maaike De Boer, Frank Ter Haar, Zhaofan Qiu, Klamer Schutte, Wessel Kraaij, Chong-Wah Ngo

Research Collection School Of Computing and Information Systems

This paper presents an overview and comparative analysis of our systems designed for the TRECVID 2015 [1] multimedia event detection (MED) task. We submitted 17 runs, of which 5 each for the zeroexample, 10-example and 100-example subtasks for the Pre-Specified (PS) event detection and 2 runs for the 10-example subtask for the Ad-Hoc (AH) event detection. We did not participate in the Interactive Run. This year we focus on three different parts of the MED task: 1) extending the size of our concept bank and combining it with improved dense trajectories; 2) exploring strategies for semantic query generation (SQG); and …

Event Detection In Wireless Sensor Networks In Random Spatial Sensors Deployments, Pengfei Zhang, Ido Nevat, Gareth W. Peters, Gaoxi Xiao, Hwee-Pink Tan

Research Collection School Of Computing and Information Systems

We develop a new class of event detection algorithms in Wireless Sensor Networks where the sensors are randomly deployed spatially. We formulate the detection problem as a binary hypothesis testing problem and design the optimal decision rules for two scenarios, namely the Poisson Point Process and Binomial Point Process random deployments. To calculate the intractable marginal likelihood density, we develop three types of series expansion methods which are based on an Askey-orthogonal polynomials. In addition, we develop a novel framework to provide guidance on which series expansion is most suitable (i.e., most accurate) to use for different system parameters. Extensive …

A Passive Testing Approach For Protocols In Wireless Sensor Networks, Xiaoping Che, Stephane Maag, Hwee Xian Tan, Hwee-Pink Tan, Zhangbing Zhou

Research Collection School Of Computing and Information Systems

Smart systems are today increasingly developed with the number of wireless sensor devices drastically increasing. They are implemented within several contexts throughout our environment. Thus, sensed data transported in ubiquitous systems are important, and the way to carry them must be efficient and reliable. For that purpose, several routing protocols have been proposed for wireless sensor networks (WSN). However, one stage that is often neglected before their deployment is the conformance testing process, a cruicial and challenging step. Compared to active testing techniques commonly used in wired networks, passive approaches are more suitable to the WSN environment. While some works …

Infinite-Noise Criticality: Nonequilibrium Phase Transitions In Fluctuating Environments, Thomas Vojta, José A. Hoyos

Physics Faculty Research & Creative Works

We study the effects of time-varying environmental noise on nonequilibrium phase transitions in spreading and growth processes. Using the examples of the logistic evolution equation as well as the contact process, we show that such temporal disorder gives rise to a distinct type of critical points at which the effective noise amplitude diverges on long time scales. This leads to enormous density fluctuations characterized by an infinitely broad probability distribution at criticality. We develop a real-time renormalization-group theory that provides a general framework for the effects of temporal disorder on nonequilibrium processes. We also discuss how general this exotic critical …

Lesinn: Detecting Anomalies By Identifying Least Similar Nearest Neighbours, Guansong Pang, Kai Ming Ting, David Albrecht

Research Collection School Of Computing and Information Systems

We introduce the concept of Least Similar Nearest Neighbours (LeSiNN) and use LeSiNN to detect anomalies directly. Although there is an existing method which is a special case of LeSiNN, this paper is the first to clearly articulate the underlying concept, as far as we know. LeSiNN is the first ensemble method which works well with models trained using samples of one instance. LeSiNN has linear time complexity with respect to data size and the number of dimensions, and it is one of the few anomaly detectors which can apply directly to both numeric and categorical data sets. Our extensive …

Using Digital Genomics To Create An Intelligent Enterprise, Mario Domingo

Asian Management Insights

Every business knows that it needs to leverage customer data, but few know the potential it has to transform business processes, decisions and performance.

Reversible Peg Solitaire On Graphs, John Engbers, Christopher Stocker

Mathematics, Statistics and Computer Science Faculty Research and Publications

The game of peg solitaire on graphs was introduced by Beeler and Hoilman in 2011. In this game, pegs are initially placed on all but one vertex of a graph G. If xyz forms a path in G and there are pegs on vertices x and y but not z, then a jump places a peg on z and removes the pegs from x and y. A graph is called solvable if, for some configuration of pegs occupying all but one vertex, some sequence of jumps leaves a single peg. We study the game of reversible peg …

Stack Layout Randomization With Minimal Rewriting Of Android Binaries, Yu Liang, Xinjie Ma, Daoyuan Wu, Xiaoxiao Tang, Debin Gao, Guojun Peng, Chunfu Jia, Huanguo Zhang

Research Collection School Of Computing and Information Systems

Stack-based attacks typically require that attackers have a good understanding of the stack layout of the victim program. In this paper, we leverage specific features on ARM architecture and propose a practical technique that introduces randomness to the stack layout when an Android application executes. We employ minimal binary rewriting on the Android app that produces randomized executable of the same size which can be executed on an unmodified Android operating system. Our experiments on applying this randomization on the most popular 20 free Android apps on Google Play show that the randomization coverage of functions increases from 65% (by …

Analysis Of Aspects And Star Ratings In Consumer Reviews, Maruthi Prithivirajan, Vivian Lai, Kyong Jin Shim

Research Collection School Of Computing and Information Systems

This paper presents an analysis of star ratings in consumer reviews in Yelp, an online social platform for sharing consumer reviews about local businesses. In particular, we analyze consumer reviews about food businesses. We analyze how well or poorly the star ratings (on a scale of one star to five stars) associated with these reviews tally with the sentiment derived from the textual portion of the consumer review.

Interactive Machine Assistance: A Case Study In Linking Corpora And Dictionaries, Kevin P. Black

Theses and Dissertations

Machine learning can provide assistance to humans in making decisions, including linguistic decisions such as determining the part of speech of a word. Supervised machine learning methods derive patterns indicative of possible labels (decisions) from annotated example data. For many problems, including most language analysis problems, acquiring annotated data requires human annotators who are trained to understand the problem and to disambiguate among multiple possible labels. Hence, the availability of experts can limit the scope and quantity of annotated data. Machine-learned pre-annotation assistance, which suggests probable labels for unannotated items, can enable expert annotators to work more quickly and thus …

Detecting Broken Pointcuts Using Structural Commonality And Degree Of Interest, Raffi Khatchadourian, Awais Rashd, Hidehiko Masuhara, Takuya Watanabe

Publications and Research

Pointcut fragility is a well-documented problem in Aspect-Oriented Programming; changes to the base code can lead to join points incorrectly falling in or out of the scope of pointcuts. Deciding which pointcuts have broken due to base-code changes is daunting, especially in large and complex systems. We present an automated approach that recommends pointcuts that are likely to require modification due to a certain base-code change and ones that do not. Our hypothesis is that join points selected by a pointcut exhibit common structural characteristics. Patterns describing such commonalities recommend pointcuts that have potentially broken to the developer. The approach …

Extending The Teknomo-Fernandez Background Image Generation Algorithm On The Hsv Colour Space, Patricia Angela R. Abu, Proceso L. Fernandez Jr

Department of Information Systems & Computer Science Faculty Publications

Background subtraction, a procedure required in many video analysis applications such as object tracking , is dependent on the model background image. One efficient algorithm for background image generation is the Teknomo-Fernandez (TF) Algorithm, which uses modal values and a tournament-like strategy to produce a good background image very quickly. A previous study showed that the TF algorithm can be extended from the original 3 frames per tournament (T F 3) to T F 5 and T F 7, resulting in increased accuracies at a cost of increased processing times. In this study, we explore extending the T F 3, …

Using Gamification As A Collaboration Motivator For Software Development Teams: A Preliminary Framework, Flavio Steffens, Sabrina Marczak, Fernando Figueira Filho, Christoph Treude, Leif Singer, David Redmiles, Ban Al-Ani

Research Collection School Of Computing and Information Systems

Gamification is the use of game elements in non-game context to engage and to motivate people to achieve goals. Its use is becoming very popular in software development organizations due to work being based upon human-centric and brain-intensive activity. This paper presents the topics of collaboration and gamification in the context of software engineering, and proposes a framework that identifies the most common collaboration issues that affect software development teams, and how to apply game elements to motivate a change on their behaviors.

Dictionary Pair Learning On Grassmann Manifolds For Image Denoising, Xianhua Zeng, Wei Bian, Wei Liu, Jialie Shen, Dacheng Tao

Research Collection School Of Computing and Information Systems

Image denoising is a fundamental problem in computer vision and image processing that holds considerable practical importance for real-world applications. The traditional patch-based and sparse coding-driven image denoising methods convert 2D image patches into 1D vectors for further processing. Thus, these methods inevitably break down the inherent 2D geometric structure of natural images. To overcome this limitation pertaining to the previous image denoising methods, we propose a 2D image denoising model, namely, the dictionary pair learning (DPL) model, and we design a corresponding algorithm called the DPL on the Grassmann-manifold (DPLG) algorithm. The DPLG algorithm first learns an initial dictionary …

Interpolation Guided Compositional Verification, Shang-Wei Lin, Jun Sun, Truong Khanh Nguyen, Yang Liu, Jin Song Dong

Research Collection School Of Computing and Information Systems

Model checking suffers from the state space explosion problem. Compositional verification techniques such as assume-guarantee reasoning (AGR) have been proposed to alleviate the problem. However, there are at least three challenges in applying AGR. Firstly, given a system M1 M2, how do we automatically construct and refine (in the presence of spurious counterexamples) an assumption A2, which must be an abstraction of M2? Previous approaches suggest to incrementally learn and modify the assumption through multiple invocations of a model checker, which could be often time consuming. Secondly, how do we keep the state space small when checking M1 A2 |= …

Towards Sustainable Digital Humanities Software, George K. Thiruvathukal, Shilpika Shilpika, Nicholas J. Hayward, Saulo Aguiar, Konstantin Läufer

Computer Science: Faculty Publications and Other Works

Our work in software quality for digital humanities was borne of an effort to address sustainable practices in scientific software development, where the speaker (Thiruvathukal) co-authored a position paper on the case for software engineering in scientific software development as part of an all-encompassing strategy to create more sustainable scientific software (an example of a well-known scientific software package is LINPACK). In this position paper, we addressed how “progress in scientific research is dependent on the quality and accessibility of software at all levels". This progress depends on embracing the best traditional--and emergent--practices in software engineering, especially agile practices that …

Human Action Recognition In Unconstrained Videos By Explicit Motion Modeling, Yu-Gang Jiang, Qi Dai, Wei Liu, Xiangyang Xue, Chong-Wah Ngo

Research Collection School Of Computing and Information Systems

Human action recognition in unconstrained videos is a challenging problem with many applications. Most state-of-the-art approaches adopted the well-known bag-of-features representations, generated based on isolated local patches or patch trajectories, where motion patterns, such as object-object and object-background relationships are mostly discarded. In this paper, we propose a simple representation aiming at modeling these motion relationships. We adopt global and local reference points to explicitly characterize motion information, so that the final representation is more robust to camera movements, which widely exist in unconstrained videos. Our approach operates on the top of visual codewords generated on dense local patch trajectories, …

Automating The Performance Deviation Analysis For Multiple System Releases: An Evolutionary Study, Felipe Pinto, Uirá Kulesza, Christoph Treude

Research Collection School Of Computing and Information Systems

This paper presents a scenario-based approach for the evaluation of the quality attribute of performance, measured in terms of execution time (response time). The approach is implemented by a framework that uses dynamic analysis and repository mining techniques to provide an automated way for revealing potential sources of performance degradation of scenarios between releases of a software system. The approach defines four phases: (i) preparation – choosing the scenarios and preparing the target releases; (ii) dynamic analysis – determining the performance of scenarios and methods by calculating their execution time; (iii) degradation analysis – processing and comparing the results of …

Challenges In Analyzing Software Documentation In Portuguese, Christoph Treude, Carlos A. Prolo, Fernando Figueira Filho

Research Collection School Of Computing and Information Systems

Many tools that automatically analyze, summarize, or transform software artifacts rely on natural language processing tooling for the interpretation of natural language text produced by software developers, such as documentation, code comments, commit messages, or bug reports. Processing natural language text produced by software developers is challenging because of unique characteristics not found in other texts, such as the presence of code terms and the systematic use of incomplete sentences. In addition, texts produced by Portuguese-speaking developers mix languages since many keywords and programming concepts are referred to by their English name. In this paper, we provide empirical insights into …