Microwave imaging for breast cancer detection is based on the contrast in electrical properties of healthy fatty breast tissues. This paper presents, an industrial scientific and medical bands (ISM) comparative study of five microstrip patch antennas for microwave imaging at 2.45GHz frequency, a choice of one antenna is made for an antenna array composed by 8 antenna for a microwave breast imaging system, each element are arranged in a circular configuration, so as that every antenna element can be directly faced to the breast phantom for better tumor detection. This choice was made by putting each antenna alone on the Brest skin to study electric field, magnetic fields and current density in the healthy tissue of the breast phonton designed and simulated in Ansoft High Frequency Simulation Software (HFSS).
In this paper, we put forward a new tool, called SpaML, for spam detection using a set of supervised and unsupervised classifiers, and two techniques imbued with Natural Language Processing (NLP), namely Bag of Words (BoW) and Term Frequency-Inverse Document Frequency (TF-IDF). We first present the NLP techniques used. Then, we present our classifiers and their performance on each of these techniques. Then, we present our overall Ensemble Learning classifier and the strategy we are using to combine them. Finally, we present the interesting results shown by SpaML in terms of accuracy and precision.
Today, Android accounts for more than 80% of the global market share. Such a high rate makes Android applications an important topic that raises serious questions about its security, privacy, misbehavior and correctness. Application code analysis is obviously the most appropriate and natural means to address these issues. However, no analysis could be led with confidence in the absence of a solid formal foundation. In this paper, we propose a full-fledged formal approach to build the operational semantics of a given Android application by reverse-engineering its assembler-type code, called Smali. We call the new formal language Smali . Its semantics consist of two parts. The first one models a single-threaded program, in which a set of main instructions is presented. The second one presents the semantics of a multi-threaded program which is an important feature in Android that has been glossed over in the-state-of-the-art works. All multi-threading essentials such as scheduling, threads communication and synchronization are considered in these semantics. The resulting semantics, forming Smali , are intended to provide a formal basis for developing security enforcement, analysis and misbehaving detection techniques for Android applications.
The number of cybersecurity vulnerabilities keeps growing every year. Each vulnerability must be reported to the MITRE Corporation and assessed by a Counting Number Authority, which generates a metrics vector that determines its severity score. This process can take up to several weeks, with higher-severity vulnerabilities taking more time. Several authors have successfully used Deep Learning to automate the score generation process and used explainable AI to build trust with the users. However, the explanations that were shown were surface label input saliency on binary classification. This is a limitation, as several metrics are multi-class and there is much more we can achieve with XAI than just visualizing saliency. In this work, we look for actionable actions CNAs can take using XAI. We achieve state-of-the-art results using an interpretable XGBoost model, generate explanations for multi-class labels using SHAP, and use the raw Shapley values to calculate cumulative word importance and generate IF rules that allow a more transparent look at how the model classified vulnerabilities. Finally, we made the code and dataset open-source for reproducibility.
The paper focuses on the conceptual development of an innovative method for authenticating sensors connected using Modbus TCP. Modbus TCP is a highly used industrial networking protocol that has very good performances but lacks security. In the first section of the paper, the authors try to highlight the importance of security of industrial control systems. The second section is dedicated to presenting the authentication process and the state-of-the-art regarding Modbus devices authentication. The third section focuses on presenting the characteristics of Modbus TCP protocol. The last section discusses the proposed conceptual solution showing a possible method of implementation.
Control systems behavior can be analyzed taking into account a large number of parameters: performances, reliability, availability, security. Each control system presents various security vulnerabilities that affect in lower or higher measure its functioning. In this paper the authors present a method to assess the impact of security issues on the systems availability. A fuzzy model for estimating the availability of the system based on the security level and achieved availability coefficient (depending on MTBF and MTR) is developed and described. The results of the fuzzy inference system (FIS) are presented in the last section of the paper.