We present a practical protection mechanism against SQL injection attacks. Such attacks target databases that are accessible through a web front-end, and take advantage of flaws in the input validation logic of Web components such as CGI scripts. We apply the concept of instruction-set randomization to SQL, creating instances of the language that are unpredictable to the attacker. Queries injected by the attacker will be caught and terminated by the database parser. We show how to use this technique with the MySQL database using an intermediary proxy that translates the random SQL to its standard language. Our mechanism imposes negligible performance overhead to query processing and can be easily retrofitted to existing systems.
Read the rest of this entry »

• 0 Comments

What: We are developing a tool to track variables and their values in C programs as they change at runtime. Because of the low-level, unrestricted memory access the language allows, the challenge lies in collecting accurate information without disrupting the program’s execution. Our approach combines techniques from profiling with memory tracking to analyze dynamic allocation throughout the lifetime of a program.
Read the rest of this entry »

• 0 Comments

A decision is a deliberative process that results in the commitment to a categorical proposition. An apt analogy is a judge or jury that must take time to weigh evidence for alternative interpretations and/or possible ramifications before settling on a verdict. Here we evaluate progress in understanding how this process is implemented in the brain. Our scope is somewhat narrow: We consider primarily studies that relate behavior on simple sensory-motor tasks to activity measured in the brain because of the ability to precisely control sensory input, quantify motor output, and target relevant brain regions for measurement and analysis. Nevertheless, our intent is broad: We hope to identify principles that seem likely to contribute to the kinds of flexible and nuanced decisions that are a hallmark of higher cognition. SDT: signal detection theory SA: sequential analysis
Read the rest of this entry »

• 0 Comments

This paper explains our efforts to add Ada to Microsoft’s family of .NET languages. There are several advantages to weaving Ada into the Common Language Environment provided by the .NET environment. This paper explains our approach and current progress on the research. We provide the means to extract Ada specification files from Microsoft Intermediate Language (MSIL) code and compile Ada programs into MSIL.
Read the rest of this entry »

• 0 Comments

Once upon a time, the Internet was a wholly virtual environment, moored only loosely to the physical world. It was where information went to become free, where censorship was routed around, where communities could leap barriers of distance and culture in a single bound . . . and where no one knew you were a dog. The kicker was that these aspects were built into the fabric of the Net, thanks to its origins in military communications research. You couldn’t tie the Net to the real world if you wanted to.
Read the rest of this entry »

• 0 Comments

Setting Options, and customizing the Drawing toolbar.
Under Tools, Options (Alt-t o), set the following:
“View” tab: Print and Web Layout Options—check Drawings and Object Anchors
“General” tab: If you are using Office XP, UNcheck “Automatically create Drawing Canvas when inserting AutoShapes”
(The Drawing Canvas is a new feature in Word 2002, designed to make it easy to create a complex shape. I have yet to discover any value to it, and find it to be simply a nuisance.)
“Edit” tab: Check “Enable click and type”. This may be useful when you are working with a drawing, since it allows you to position text in relation to the drawing without hitting the Enter key repeatedly.
If you are using Word 2002, I recommend unchecking “Show Paste Option Buttons”. These buttons get in the way, and even sneak there way into my web documents!
Read the rest of this entry »

• 0 Comments

DOT NET is one of the key products that enable application development under the new vision. However, DOT NET is not quite backward compatible with prior versions like visual basic version 6. This makes migration a serious issue. Converting existing source code to DOT NET architecture is not just a matter of loading it to the new version. DOT NET has its built-in migration tool, which performs the vital task of converting the source code syntax. But that’s just half of the work done. But before the converted code is actually compiled, the developer needs to enable it to smoothly fix lot of issues to fit into DOT NET architecture. In present efforts to find out solutions to these migration issues, a re-engineering Migration Model for Legacy Source Code (MMLC) has been proposed in this study. Proposed model has been further validated using a in-house project at one of the leading software development organisation. It is envisaged from the experimental try-out that the model would help the developer community to easily convert their legacy source code to DOT NET framework.
Read the rest of this entry »

• 0 Comments

1. First determine the best way to analyze the system. (Note: This is possibly the hardest step in the entire design system depending on what you are trying to design the image for.)
a. If the system has a CD-ROM drive or is capable of running Windows XP/2000 then the program tap.exe will be used to create the *.pmq file.
Read the rest of this entry »

• 0 Comments