Exploitability assessment of vulnerabilities is important for both defenders and attackers. The ultimate way to assess the exploitability is crafting a working exploit. However, it usually takes tremendous hours and significant manual efforts. To address this issue, automated techniques can be adopted. Existing solutions usually explore in depth the crashing paths, i.e., paths taken by proof-of-concept (PoC) inputs triggering vulnerabilities, and assess exploitability by finding exploitable states along the paths. However, exploitable states do not always exist in crashing paths. Moreover, existing solutions heavily rely on symbolic execution and are not scalable in path exploration and exploit generation. In this paper, we propose a novel solution to generate exploit for userspace programs or facilitate the process of crafting a kernel UAF exploit. Technically, we utilize oriented fuzzing to explore diverging paths from vulnerability point. For userspace programs, we adopt a control-flow stitching solution to stitch crashing paths and diverging paths together to generate exploit. For kernel UAF, we leverage a lightweight symbolic execution to identify, analyze and evaluate the system calls valuable and useful for exploiting vulnerabilities.
Purpose: This study aims to investigate the benefits of Point of Care (POC) ultrasound and Scheduled Ultrasound Clinics using a Proof of Concept approach in the orthopaedic triage setting. Materials and Methods: The trial ran for a six week period sourcing all patients referred to the orthopaedic triage service. The trial collected three measurable outcomes i.e. two Patient Reported Outcome Measures: MSK-HQ and The Care Measure, and a Proof of Concept clinician survey via Survey Monkey. These were completed by the clinicians and patient cohort during the scheduled clinic and POC clinical contact.
This Redpaper describes a proof of concept (PoC) project that was conducted in the Poughkeepsie, NY, Design Center for On Demand business. The PoC was developed for XYZ Automotive Company (XYZ). XYZ representatives worked with IBM® IT Specialists and Architects to define critical success factors, use cases, and requirements for the project. XYZ has an environment where engineers use grids for their Computer Aided Engineering work. They have many heterogeneous local grid schedulers. The engineers schedule their work to two islands of grids: a Numerically Intensive Compute center, and a Non-Dedicated Grid. Engineers must specifically select the domain or node for the job to run, and are able to select number of CPUs, memory, and disk space. However, there are no policies or rules to block the engineer’s requests. This leads to underutilization of the XYZ environment. This type of environment is prevalent in sectors where grid computing is at a mature level. Departmental grid and high performance computing clusters have been put in place to solve various compute-intensive problems. Grids made available from mergers and varying lines of business have resulted in a heterogeneous grid environment, where silos of grid compute power are clearly not being optimized across the enterprise.
Intel IT, together with Intel’s Digital Enterprise Group, End User Platform Integration, and Intel’s Software and Services Group, conducted proof-of-concept testing and total cost of ownership (TCO) analysis to assess the virtualization capabilities of Intel® Xeon® processor 5500 series. Our results show that two-socket servers based on Intel Xeon processor 5500 series can offer substantial improvements in virtualization performance and energy efficiency, resulting in lower TCO per virtual machine (VM) in multiple Intel IT virtualization deployment scenarios.
cytokines [9, 10]. Besides their well-established role in allergies, these cells also play an important role in rheu- matoid synovitis [9–13]. We recently proposed that mast cells might be more important in SpA than in rheuma- toid arthritis (RA) based on the following:  Firstly, the infiltration with c-Kit + mast cells in SpA synovitis is markedly higher compared to RA. Secondly, this infil- tration is already observed in early disease and is not affected by effective anti-TNF treatment. Thirdly, mast cells are the major interleukin (IL)-17 expressing cells in pSpA and the proportion of mast cells expressing IL-17 is significantly higher in SpA than RA synovitis. Fourthly, proof-of-concept studies demonstrated that IL-17A blockade effectively down-modulates inflammation and clinical symptoms in the ankylosing spondylitis (AS) and psoriatic arthritis (PsA) subtypes of SpA [14–16]. Finally, sulfasalazine, the only disease-modifying anti-rheumatic drug (DMARD) with proven efficacy in pSpA , has shown to inhibit degranulation and TNF secretion by mast cells [18, 19].
Current NAC technologies implement a pre-connect phase where the status of a device is checked against a set of policies before being granted access to a network, and a post-connect phase that examines whether the device complies with the policies that correspond to its role in the network. In order to enhance current NAC technologies, we propose a new architecture based on behaviors rather than roles or identity, where the policies are automatically learned and updated over time by the members of the network in order to adapt to behavioral changes of the devices. Behavior profiles may be presented as identity cards that can change over time. By incorporating an Anomaly Detector (AD) to the NAC server or to each of the hosts, their behavior profile is modeled and used to determine the type of behaviors that should be accepted within the network. These models constitute behavior-based policies. In our enhanced NAC architecture, global decisions are made using a group voting process. Each host’s behavior profile is used to compute a partial decision for or against the acceptance of a new profile or traffic. The aggregation of these partial votes amounts to the model-group decision. This voting process makes the architecture more resilient to attacks. Even after accepting a certain percentage of malicious devices, the enhanced NAC is able to compute an adequate decision. We provide proof-of-concept experiments of our architecture using web traffic from our department network. Our results show that the model-group decision approach based on behavior profiles has a 99% detection rate of anomalous traffic with a false positive rate of only 0.005%. Furthermore, the architecture achieves short latencies for both the pre- and post-connect phases.
This paper discusses the latest developments in the field of visual analytics, and the role of network analysis for transportation systems. Multilayer and multiplex based visualizations are considered reliable solutions for handling the information overload the decision makers are facing in the addressed domain. The existing tools matching these requirements are briefly reviewed. Then, a proof of concept for a dashboard is presented focusing on a transportation network analysis with multiple network measures and indices in a multiplex visualization.
Results: The results reveal that substrates such as cotton waste, coconut shells, and torn jute bags, which resist composting, vermicomposting, or anaerobic digestion, are successfully decomposed by termites. Different termite species were able to bypass some substrates kept nearer their mounds and go to some other substrates kept farther away, showing their preference for different wastes as well as their ability to discern one waste type from the other. Conclusions: The work provides proof-of-concept that termites can be used for the assimilative disposal of MSW.
The team set out to demonstrate a proof-of-concept and identified the variables involved in the travel of information and the ‘Right-click Authenticate’ idea suggested in a previous publication . The team believes that some headway has been achieved but that still work to be done to develop the formula and conduct simulations to further validate the concept. Two parallel lines of further research are expected to follow. First, the team will be working towards developing the formula and run computational simulations of the formula using MATLAB and BioLayout Express for three dimen- sional simulation. Second and equally important, the team intend to develop a prototype browser based on an existing open source applications that allows demonstration of the concept and the running of actual simulations thus allowing lab and field simulations.
The experiments described in this paper clearly prove the assumptions that were taken into account during the design of the architecture of the optimal pilot bus selection system for the needs of the power system supervisory control in real time. It should be noted that the proof of concept implementation of the architecture cannot be considered definitive. Its purpose was purely experimental and should only serve to verify the proposed architecture.
Ethics approval for this study was granted by the Human Disability an Ethics Commit- tee, New Zealand (Reference: 15/CEN/141). This study was conducted in the intensive care unit (ICU) of St George’s Hospital, Christchurch. Eight healthy adult, male, volun- teers (aged 23–37 years) with no pre-existing medical conditions were recruited, and provided signed, informed consent. Table 1 provides subject demographics including age, sex, height, weight, body mass index (BMI), resting blood pressure (BP), and rest- ing heart rate (HR). This study was an initial proof of concept testing using healthy adult volunteers and was not about testing full range of people, age, gender or other condition.
different cohorts and therefore there may be inherent bias. However, the bias, if it exists, would have affected both the immunodepleted and fractionated approaches equally. Third, we did not collect extensive demographic and genetic (e.g., APOE genotypes) information on these subjects and medications that might have affected plasma lipoproteins. Fourth, even though the entire workflow including fractionation of plasma lipoproteins using ultracentrifugation is well-established in literature and has been used to investigate plasma lipoproteome in car- diovascular disease [9, 10, 25], it is labor intensive. Future studies are needed to improve and automate the sam- ple preparation workflow. Last but not the least, the AD cases were diagnosed based on clinical examination with- out amyloid deposition data. Because the context of use (COU) that we envision for proteins in plasma lipopro- teins as biomarkers is to detect high likelihood of abnor- mal amyloid deposition in the brain of individuals who should be referred for amyloid neuroimaging to provide definitive measures (for either diagnostic or clinical trial enrollment purposes) , this proof-of-concept study results still need to be validated in a future case–control study of AD cases and controls with confirmed amyloid deposition data.
First trial takes place after suitable preparations and setup of the PPT inside the vacuum chamber Fig (5). A proof of concept experiment takes place under pressure 6.5 × 10 Torr and weak plasma appeared inside the Cupper nozzle for 300 seconds then a very high vibration appeared between the power supply cables due to magnetic field between cables of power supply and the experiment is stopped due to safety precautions.
Attitude refers to the affective characteristics of both business and IT leaders and professionals. It can define the level of ICT professionalism (Boughton 2009) and has been found to be one of the major factors in influencing the acceptance and use of technologies (Handy et al. 2001). In this paper, attitude refers to the extent to which both IT and business professionals are aware and interested about the environmental concerns related to the use of IT and the role of IT in resolving environmental problems. While investigating the relationship between environmental attitudes and behaviour, Chan and Yam (1995) found that to encourage people to act environmentally, emotional appeal has a stronger impact than logical reasoning or factual description of harmful effects from environmental pollution. This is because the knowledge of an individual is weakly related to self-reported actual environmental behaviour. On this basis, whether or not an organisation takes Green IT issues seriously will be (at least partially) dependent on IT and business leaders‟ sentiment to environmental concerns. Existing surveys (see Table 3) indicate that not only could opinions for Green IT might vary from organisation to organisation, they might vary from region to region. Table 4 provides a preliminary proof of concept of the relevance of assessing Green IT attitude.
Background: Intravenous iron is widely used to control anemia in dialysis patients and limits costs related to erythropoiesis-stimulating agents (ESA). Current guidelines do not clearly set upper limits for serum ferritin (SF) and transferrin saturation (TSAT). International surveys such as the Dialysis Outcomes and Practice Patterns Study (DOPPS) showed that this lack of upper limits potentially led nephrologists to prescribe iron infusions even for patients with a high SF. Recent publications have suggested a risk of short- and long-term adverse effects related to iron overload. We conducted a proof of concept study to assess the impact of reducing intravenous iron administration.
The temperature-sensing waders are capable of measuring the location of the seepage boil in the field evaluation. This first prototype proof of concept shows that if people that al- ready use waders, such as fly fishermen, were to be equipped with temperature-sensing waders, the data they collect could be used by scientists and operational water managers to better understand the interplay between surface water and groundwater. In this research this was demonstrated by iden- tifying the location of a seepage boil in a deep polder in the Netherlands. Another application would be to identify hy- porheic exchange hot spots in streams.
Abstract– The amount of data generated in the world is increasing in size day af- ter day, also generating new problems in storing, processing or querying. The world of industry and the energy sector in particular, is being totally involved in this problem, forcing companies to find new alternatives to the traditional ones. This document describes the completion of a Big Data Proof of Concept, using the data pro- duced by the wind turbines of a company in the energy sector, which became interested in initiating a digital transformation, in order to replace its current data management system for a Big Data platform built on a distributed system based on Hadoop. The system was designed following the different stages of the data chain, composed of the Ingest, Infrastructure and Exploitation. Finally, the results were successfully delivered to the company, showing its ca- pabilities such as potential, scalability, latency, storage capacity or heterogeneity.
Figure (2.19) shows the the assembled proof of concept tumbleweed. To spherical shape of the tumbleweed is obtained by bending the PVC pipes to form circular arcs. These small arcs are attached to each other by the use of pre-made 4 way connection crosses. At the top and bottom of the sphere there are a total of 8 pipes. Four of these are fixed to each other by using a 4 way cross segment and the remaining four are fixed to this by using PVC cement. If the tumbleweed is made to be a solid sphere then sails cannot be used. The drag coefficient of a flat circular surface ( 1.75 - 2.0) is much higher than the drag coefficient of a spherical surface ( 0.5). Thus the amount of force generated by the wind on the tumbleweed is less in case it is a solid spherical shell. Hence a caged structure is used. However the use of cage structure does present the possibility of the tumbleweed getting stuck on a rock. Aluminum brackets are used to attach the central structure to the outer spherical cage. The bolts used as idler shafts also double up as the bolts used to attach the brackets.
A simple proof of concept would be created using a mixture of open source and pre-production software which provided a simple technology specific implementation of the specification in order to prove the concept. This would not be the final solution but would provide sufficient proof points to assure the customer that the solution could be realised through COTS solutions. it would also serve to educate all of the potential stakeholders as to the possibilities and requirements for the solution.