We present a practical protection mechanism against SQL injection attacks. Such attacks target databases that are accessible through a web front-end, and take advantage of flaws in the input validation logic of Web components such as CGI scripts. We apply the concept of instruction-set randomization to SQL, creating instances of the language that are unpredictable to the attacker. Queries injected by the attacker will be caught and terminated by the database parser. We show how to use this technique with the MySQL database using an intermediary proxy that translates the random SQL to its standard language. Our mechanism imposes negligible performance overhead to query processing and can be easily retrofitted to existing systems.
Read the rest of this entry »
In 1991, a group of Sun Microsystems engineers led by James Gosling decided to develop a language for consumer devices (cable boxes, etc.). They wanted the language to be small and use efficient code since these devices do not have powerful CPUs. They also wanted the language to be hardware independent since different manufacturers would use different CPUs. The project was code-named Green.
Read the rest of this entry »
24 Sep
Posted by jj as Multimedia
We present a vision system for the 3-D model- based tracking of unconstrained human movement. Using image sequences acquired simultaneously from multiple views, we recover the 3-D body pose at each time instant without the use of markers. The pose- recovery problem is formulated as a search problem and entails finding the pose parameters of a graphical human model whose synthesized appearance is most similar to the actual appearance of the real human in the multi-view images. The models used for this purpose are acquired from the images. We use a decomposition approach and a best-first technique to search through the high dimensional pose parameter space. A robust variant of chamfer matching is used as a fast similarity measure between synthesized and real edge images.
Read the rest of this entry »
16 Sep
Posted by jj as Dotnet
DOT NET is one of the key products that enable application development under the new vision. However, DOT NET is not quite backward compatible with prior versions like visual basic version 6. This makes migration a serious issue. Converting existing source code to DOT NET architecture is not just a matter of loading it to the new version. DOT NET has its built-in migration tool, which performs the vital task of converting the source code syntax. But that’s just half of the work done. But before the converted code is actually compiled, the developer needs to enable it to smoothly fix lot of issues to fit into DOT NET architecture. In present efforts to find out solutions to these migration issues, a re-engineering Migration Model for Legacy Source Code (MMLC) has been proposed in this study. Proposed model has been further validated using a in-house project at one of the leading software development organisation. It is envisaged from the experimental try-out that the model would help the developer community to easily convert their legacy source code to DOT NET framework.
Read the rest of this entry »
This section will introduce the Ondex Visualisation ToolKit user interface. A network consists of genes/proteins/metabolites as concepts and interactions represented as links i.e. relations between concepts. Firstly, we will explain how to install and run the OVTK. Secondly, we will look at the basic user interface of OVTK. Then we will load up a network to show all menu features of OVTK and some of the core functionality such as layout algorithms, annotators and filters.
Read the rest of this entry »
GNS3 is a Graphical Network Simulator that allows emulation of complex networks. You may be familiar with VMWare or Virtual PC that are used to emulate various operating systems in a virtual environment. These programs allow you to run operating systems such as Windows XP Professional or Ubuntu Linux in a virtual environment on your computer. GNS3 allows the same type of emulation using Cisco Internetwork Operating Systems. It allows you to run a Cisco IOS in a virtual environment on your computer. GNS3 is a graphical front end to a product called Dynagen. Dynamips is the core program that allows IOS emulation. Dynagen runs on top of Dynamips to create a more user friendly, text-based environment. A user may create network topologies using simple Windows ini-type files with Dynagen running on top of Dynamips. GNS3 takes this a step further by providing a graphical environment.
Read the rest of this entry »
With Windows Vista, Microsoft shifted from the development path of Windows XP wide open to tampering with zero reaction, and has integrated an anti-piracy infrastructure into the platform. In direct correlation with the Windows Genuine Advantage and the Activation mechanisms, Windows Vista will be able to detect and blacklist non-genuine product keys, crack attempts, and identify the expiration of the initial 30-day grace period. The operating system will react to all by moving first into a non-genuine state and then into Reduced Functionality Mode.
Read the rest of this entry »
13 May
Posted by jj as Automotive, VolksWagen
The AEM Cold Air System is the result of extensive development on a wide variety of cars. Each system is engineered for the particular application. The AEM Cold Air System differs from all others in several ways. We take the inlet air from outside of the engine compartment where the inlet air is considerably cooler than the hot underhood air. The cooler inlet air temperature translates to more power during the combustion process because cool air is denser than warm air. AEM has conducted extensive inlet air temperature studies and we have seen temperature reductions of up to 50 degrees by pulling air from outside of the engine compartment.
Read the rest of this entry »