Enhancing Mobile Security through Comprehensive Penetration Testing

In today’s era, where mobile devices have become an integral part of our daily lives, ensuring the security of mobile applications has become increasingly crucial. Mobile penetration testing, a specialized subfield within the realm of cybersecurity, plays a vital role in safeguarding mobile ecosystems against the ever-evolving landscape of threats. The ubiquity of mobile devices has made them a prime target for cybercriminals, and the data and functionality accessed through mobile applications make them valuable assets to protect. Mobile penetration testing is designed to identify vulnerabilities, weaknesses, and potential exploits within mobile applications and the devices themselves. Unlike traditional penetration testing, which often focuses on network and server security, mobile penetration testing zeroes in on the unique challenges posed by mobile platforms. Mobile penetration testing, a specialized field within cybersecurity, is an essential tool in the Cybersecurity specialists’ toolkit to protect mobile ecosystems from emerging threats. This article introduces mobile penetration testing, emphasizing its significance, including comprehensive learning labs for Android and iOS platforms, and highlighting how it distinctly differs from traditional penetration testing methodologies.

Penetration Tests of Multi-Bucket Foundation in Sand for Offshore Wind Turbines

Suction foundations are generally installed with negative pressures to overcome the resistance of soils and complete the penetration,but excessive negative pressures are also avoided to cause seepage damages.In this paper,the model test method was used to analyze the movement characteristics of multi-bucket foundations in the process of sinking in sand,and the common calculation methods of sinking resistances are verified.The critical negative pressure corresponding to the seepage failure of foundation was determined under the action of increasing negative pressure step by step and the characteristics of soil failure were studied.The calculation formula of critical suction in sand was verified in application,and according to the test results,the value of seepage coefficient was modified,which provides an example for the study of suction foundation in sand soils.

Study on strength properties and soil behaviour type classification of Huanghe River Delta silts based on variable rate piezocone penetration test

Fine-grained silt is widely distributed in the Huanghe River Delta(HRD)in China,and the sedimentary structure is complex,meaning that the clay content in the silt is variable.The piezocone penetration test(CPTu)is the most widely approved in situ test method.It can be used to invert soil properties and interpret soil behavior.To analyse the strength properties of surface sediments in the HRD,this paper evaluated the friction angle and its inversion formula through the CPTu penetration test and monotonic simple shear test and other soil unit experiments.The evaluation showed that the empirical formula proposed by Kulhawy and Mayne had better prediction and inversion effect.The HRD silts with clay contents of 9.2%,21.4%and 30.3%were selected as samples for the CPTu variable rate penetration test.The results show as follows.(1)The effects of the clay content on the tip resistance and the pore pressure of silt under different penetration rates were summarized.The tip resistance Q_t is strongly dependent on the clay content of the silt,the B_(q)value of the silt tends to 0 and is not significantly affected by the change of the CPTu penetration rate.(2)Five soil behavior type classification charts and three soil behavior type indexes based on CPTu data were evaluated.The results show that the soil behavior type classification chart based on soil behavior type index ISBT,the Robertson 2010 behavior type classification chart are more suitable for the silty soil in the HRD.

Obtaining 2D Soil Resistance Profiles from the Integration of Electrical Resistivity Data and Standard Penetration Test (SPT) and Light Dynamic Penetrometer (DPL) Resistance Tests—Applications in Mass Movements Studies

In Brazil and various regions globally, the initiation of landslides is frequently associated with rainfall;yet the spatial arrangement of geological structures and stratification considerably influences landslide occurrences. The multifaceted nature of these influences makes the surveillance of mass movements a highly intricate task, requiring an understanding of numerous interdependent variables. Recent years have seen an emergence in scholarly research aimed at integrating geophysical and geotechnical methodologies. The conjoint examination of geophysical and geotechnical data offers an enhanced perspective into subsurface structures. Within this work, a methodology is proposed for the synchronous analysis of electrical resistivity geophysical data and geotechnical data, specifically those extracted from the Light Dynamic Penetrometer (DPL) and Standard Penetration Test (SPT). This study involved a linear fitting process to correlate resistivity with N10/SPT N-values from DPL/SPT soundings, culminating in a 2D profile of N10/SPT N-values predicated on electrical profiles. The findings of this research furnish invaluable insights into slope stability by allowing for a two-dimensional representation of penetration resistance properties. Through the synthesis of geophysical and geotechnical data, this project aims to augment the comprehension of subsurface conditions, with potential implications for refining landslide risk evaluations. This endeavor offers insight into the formulation of more effective and precise slope management protocols and disaster prevention strategies.

Adaptive sampling strategy for characterizing spatial distribution of soil liquefaction potential using cone penetration test

Characterizing spatial distribution of soil liquefaction potential is critical for assessing liquefactionrelated hazards(e.g.building damages caused by liquefaction-induced differential settlement).However,in engineering practice,soil liquefaction potential is usually measured at limited locations in a specific site using in situ tests,e.g.cone penetration tests(CPTs),due to the restrictions of time,cost and access to subsurface space.In these cases,liquefaction potential of soil at untested locations requires to be interpreted from limited measured data points using proper interpolation method,leading to remarkable statistical uncertainty in liquefaction assessment.This underlines an important question of how to optimize the locations of CPT soundings and determine the minimum number of CPTs for achieving a target reliability level of liquefaction assessment.To tackle this issue,this study proposes a smart sampling strategy for determining the minimum number of CPTs and their optimal locations in a selfadaptive and data-driven manner.The proposed sampling strategy leverages on information entropy and Bayesian compressive sampling(BCS).Both simulated and real CPT data are used to demonstrate the proposed method.Illustrative examples indicate that the proposed method can adaptively and sequentially select the required number and optimal locations of CPTs.

Seasonal influence on cone penetration test: An unsaturated soil site example

Interpretation of electric cone penetration test(CPT) based pore water pressure measurement(CPTu) is well established for soils with behavior that follows classical soil mechanics. The literature on the interpretation of these tests performed on unsaturated tropical soils is limited, and little is known about the influence of soil suction on in situ test data. In this context, the CPT data are presented and discussed to illustrate the seasonal variability in an unsaturated tropical soil site. The test data show that soil suction significantly influenced CPT data up to a depth of 4 m at the study site. It shows the importance of considering seasonal variability in unsaturated soil sites caused by soil suction, which was related to water content through a soil-water retention curve(SWRC). It is also important to consider this aspect in the interpretation of CPT data from these soils.

A case study on the soil classification of the Yellow River Delta based on piezocone penetration test

Piezocone penetration test(CPTu),the preferred in-situ tool for submarine investigation,is significant for soil classification and soil depth profile prediction,which can be used to predict soil types and states.However,the accuracy of these methods needs to be validated for local conditions.To distinguish and evaluate the properties of the shallow surface sediments in Chengdao area of the Yellow River Delta,seabed CPTu tests were carried out at ten stations in this area.Nine soil classification methods based on CPTu data are applied for soil classification.The results of classification are compared with the in-situ sampling to determine whether the method can provide sufficient resolution.The methods presented by Robertson(based on soil behavior type index Ic),Olsen and Mitchell are the more consistent and compatible ones compared with other methods.Considering that silt soils have potential to liquefy under storm tide or other adverse conditions,this paper is able to screen soil classification methods suitable for the Chengdao area and help identify the areas where liquefaction or submarine landslide may occur through CPTu investigation.

Structured Query Language Injection Penetration Test Case Generation Based on Formal Description

Aiming to improve the Structured Query Language( SQL) injection penetration test accuracy through the formalismguided test case generation,an attack purpose based attack tree model of SQL injection is proposed,and then under the guidance of this model, the formal descriptions for the SQL injection vulnerability feature and SQL injection attack inputs are established. Moreover,according to new coverage criteria,these models are instantiated and the executable test cases are generated.Experiments show that compared with the random enumerated test case used in other works,the test case generated by our method can detect the SQL injection vulnerability more effectively. Therefore,the false negative is reduced and the test accuracy is improved.

The hamster egg penetration test may decrease intracytoplasmic sperm injection utilization while maintaining high conventional fertilization rates

This was a cohort study of in vitro fertilization(IVF)subjects at the University of Utah,Salt Lake City(UT,USA)utilizing partner sperm.Cycles where both the hamster egg penetration test(HEPT)and semen analysis were performed within 2 years prior to IVF cycles were stratified into four groups based on a normal or an abnormal HEPT and morphology.The mean conventional and intracytoplasmic sperm injection(ICSI)fertilization rates were calculated in each group.We performed a univariate analysis on the primary outcome comparing clinically interesting subjects.We performed a cost-effectiveness analysis of a policy of HEPT versus universal ICSI in couples with an abnormal morphology.Among patients with a normal HEPT,there was no difference in the mean conventional fertilization rates between those with a normal and an abnormal morphology.There was no difference in the mean conventional fertilization rates between subjects with a normal morphology without a hamster test and those with a normal HEPT without a morphology assessment.In 1000 simulated cycles with an abnormal morphology,a policy of HEPT was cost saving compared to universal ICSI,yet produced similar fertilization rates.The HEPT is similar to the World Health Organization edition 5(WHO-5)morphology in predicting successful conventional fertilization while allowing decreased utilization of ICSI.A policy of HEPT for males with abnormal morphology saves cost in selecting couples for a fertilization method.

Comparison of Vs and SPT Soil Liquefaction Assessments of NCEER: Including Hypothesis Testing

Soil liquefaction is one of the complex research topics in geotechnical engineering and engineering geology. Especially after the 1964 Niigata earthquake (Japan) induced many soil liquefaction incidents, a variety of soil liquefaction studies were conducted and reported, including the liquefaction potential assessment methods utilizing the shear wave velocity (Vs) or SPT-N profiles (SPT: standard penetration test). This study used the Vs and SPT methods recommended by the National Center for Earthquake Engineering Research (NCEER) to examine which is more conservative according to the assessment results on 41 liquefiable soil layers at sites in two major cities in Taiwan. Statistical hypothesis testing was used to make the analysis more quantitative and objective. Based on three sets of hypothesis tests, it shows that the hypothesis—the SPT method is more conservative than the Vs method—was not rejected on a 5% level of significance.

An Automated Penetration Semantic Knowledge Mining Algorithm Based on Bayesian Inference

Mining penetration testing semantic knowledge hidden in vast amounts of raw penetration testing data is of vital importance for automated penetration testing.Associative rule mining,a data mining technique,has been studied and explored for a long time.However,few studies have focused on knowledge discovery in the penetration testing area.The experimental result reveals that the long-tail distribution of penetration testing data nullifies the effectiveness of associative rule mining algorithms that are based on frequent pattern.To address this problem,a Bayesian inference based penetration semantic knowledge mining algorithm is proposed.First,a directed bipartite graph model,a kind of Bayesian network,is constructed to formalize penetration testing data.Then,we adopt the maximum likelihood estimate method to optimize the model parameters and decompose a large Bayesian network into smaller networks based on conditional independence of variables for improved solution efficiency.Finally,irrelevant variable elimination is adopted to extract penetration semantic knowledge from the conditional probability distribution of the model.The experimental results show that the proposed method can discover penetration semantic knowledge from raw penetration testing data effectively and efficiently.

Methodology for Obtaining Optimal Sleeve Friction and Friction Ratio Estimates from CPT Data

Cone penetration testing (CPT) is a cost effective and popular tool for geotechnical site characterization. CPT consists of pushing at a constant rate an electronic penetrometer into penetrable soils and recording cone bearing (qc), sleeve friction (fc) and dynamic pore pressure (u) with depth. The measured qc, fs and u values are utilized to estimate soil type and associated soil properties. A popular method to estimate soil type from CPT measurements is the Soil Behavior Type (SBT) chart. The SBT plots cone resistance vs friction ratio, Rf [where: Rf = (fs/qc)100%]. There are distortions in the CPT measurements which can result in erroneous SBT plots. Cone bearing measurements at a specific depth are blurred or averaged due to qc values being strongly influenced by soils within 10 to 30 cone diameters from the cone tip. The qcHMM algorithm was developed to address the qc blurring/averaging limitation. This paper describes the distortions which occur when obtaining sleeve friction measurements which can in association with qc blurring result in significant errors in the calculated Rf values. This paper outlines a novel and highly effective algorithm for obtaining accurate sleeve friction and friction ratio estimates. The fc optimal filter estimation technique is referred to as the OSFE-IFM algorithm. The mathematical details of the OSFE-IFM algorithm are outlined in this paper along with the results from a challenging test bed simulation. The test bed simulation demonstrates that the OSFE-IFM algorithm derives accurate estimates of sleeve friction from measured values. Optimal estimates of cone bearing and sleeve friction result in accurate Rf values and subsequent accurate estimates of soil behavior type.

Technique for Estimating the Cone Bearing Smoothing Parameters

Cone penetration testing (CPT) is an extensively utilized and cost effective tool for geotechnical site characterization. CPT consists of pushing at a constant rate an electronic cone into penetrable soils and recording the resistance to the cone tip (qc value). The measured qc values (after correction for the pore water pressure) are utilized to estimate soil type and associated soil properties based predominantly on empirical correlations. The most common cone tips have associated areas of 10 cm2 and 15 cm2. Investigators also utilized significantly larger cone tips (33 cm2 and 40 cm2) so that gravelly soils can be penetrated. Small cone tips (2 cm2 and 5 cm2) are utilized for shallow soil investigations. The cone tip resistance measured at a particular depth is affected by the values above and below the depth of interest which results in a smoothing or blurring of the true bearing values. Extensive work has been carried out in mathematically modelling the smoothing function which results in the blurred cone bearing measurements. This paper outlines a technique which facilitates estimating the dominant parameters of the cone smoothing function from processing real cone bearing data sets. This cone calibration technique is referred to as the so-called CPSPE algorithm. The mathematical details of the CPSPE algorithm are outlined in this paper along with the results from a challenging test bed simulation.

High-Temperature Deformation and Low-Temperature Fracture Behavior of Steel Slag Rubber Asphalt Mixture Surface Layer

Steel slag is regarded as one of the most widespread solid by-products of steel smelting with little commercial value.It can play a vital role in the construction industry especially in the field of transportation infrastructure construction.However,there are few evaluation systems established on the high-temperature deformation and low-temperature fracture behavior of steel slag rubber asphalt mixture(SSRAM).This study explores the perfor-mance of SSRAM by uniaxial penetration test,Semi-Circular Bending(SCB)test and evaluates test data through regression analysis.The uniaxial penetration test results shows that the failure deformation of SSRAM increases with the increase of steel slag content.According to the minimum allowable permanent deformation(R TS-min),the deformation of SSRAM should be controlled within 3 mm.Meanwhile,the cracking index of the SSRAM surface layer calculated at low temperature can meet the design requirements.The SCB test results show that the stress peak degradation rate(specimens with 10 mm notch are compared with 0 mm)of SSRAM with 40%steel slag content is 20.04%.That means proper steel slag content makes the stress peak degradation rate of SSRAM reaches the lowest value.The calculation results of fracture energy density(J_(1C))show that the steel slag additive reduced the fracture energy density of SSRAM.However,it is still proved that SSRAM with 40%steel slag has the best low-temperature fracture performance based on critical fracture toughness(K_(1C))and fracture stress peak.Further-more,the crack propagation velocity parametric equation of SSRAM is proposed through fracture mechanics theory and the increase of velocity is exponential.Considering the high-temperature deformation resistance and low-temperature fracture property,the SSRAM surface layer with 40%steel slag content showed a batter application potential.

Use of GIS Based Maps for Preliminary Assessment of Subsoil of Guwahati City

Guwahati, the major city in the North Eastern region of India is growing rapidly in every aspect with major infrastructures like sports complex, educational institutions, hospitals, flyovers, multiplex halls, etc. Knowledge of the subsurface soil condition is necessary to ensure the structural safety and serviceability of the above mentioned structures before any construction. Therefore, contour maps of Standard penetration test N value, ground water table and shear wave velocity map using Geographical Information System (GIS) platform will be of great help to the foundation designers at the initial stage for site selection and preliminary foundation design under static and seismic condition. Contour maps of Standard penetration test N value at different depth and average contour map of N value of Guwahati city have been prepared. Standard penetration Test N values and depth of water table were taken from a data base of 200 boreholes up to 30 meter depth to prepare N value contour map of Guwahati city. A regression equation between shear wave velocity Vs and Standard penetration test N value based on twenty seven previous similar correlations was also developed. This regression equation was used to determine shear wave velocity of Guwahati city. The average shear wave velocities for 30 m depth for all locations had been determined and used to generate map on (GIS) platform. Other subsurface geotechnical information of Guwahati city like soil classification and depth to water level from ground surface is also presented in the form of GIS based maps in order to form a data base.

CPT-Based estimation of undrained shear strength of fine-grained soils in the Huanghe River Delta

The Huanghe River(Yellow River)Delta has a wide distribution of fine-grained soils.Fluvial alluviation,erosion,and wave loads affect the shoal area,resulting complex physical and mechanical properties to sensitive finegrained soil located at the river-sea boundary.The cone penetration test(CPT)is a convenient and effective in situ testing method which can accurately identify various soil parameters.Studies on undrained shear strength only roughly determine the fine content(FC)without making the FC effect clear.We studied four stations formed in different the Huanghe River Delta periods.We conducted in situ CPT and corresponding laboratory tests,examined the fine content influence on undrained shear strength(S_(u)),and determined the cone coefficient(N_(k)).The conclusions are as follows.(1)The fine content in the area exceeded 90%,and the silt content was high,accounting for more than 70%of all fine particle compositions.(2)The undrained shear strength gradually increased with depth with a maximum of approximately 250 kPa.When the silt content was lower than 60%–70%,the undrained shear strength decreased.(3)The silt and clay content influenced undrained shear strength,and the fitted f_(s)h/q_(t) function model was established,which could be applied to strata with a high fine content.The cone coefficients were between 20 and 25,and the overconsolidated soil layer had a greater cone coefficient.

A Case Study on Soil Improvement with Rapid Impact Compaction (RIC)

Soil treatment was utilized on numerous production sites to compact cohesion less formations, having the objective to increase earth characteristics and decrease probable subsidence. Within the last few years, Rapid Impact Compaction (RIC) has increased its attractiveness as a soil treatment method. RIC is an innovative dynamic compaction technique primarily used to compact sandy soils where silt and clay contents are low. This work presents a case study of ground improvement using RIC and its suitability for site preparation earthworks. The RIC technique has been performed in an early site preparation which consists of a cut and fill contract for a mega project in the Kingdom of Saudi Arabia. RIC is a process where loose subsurface soils are improved through compaction with the utilization of successive impact blows from the top surface. This project involves the compaction of the fill materials (with an average thickness of 4 m) and loose natural formations (averaging 4 m in depth). The objective of the soil treatment scheme is to increase the relative density of the soils (both fill and natural) to 85%. The usage of the RIC within the site preparation earthwork applications is possible provided the presence of certain elements—specifically, granular materials and particles finer than number 200 sieve—do not exceed 15%. The RIC method proved to be cost- and time-effective when utilized for filling compaction activities since it compacts considerable soil thicknesses with a single action from the top surface, and can be used as an alternative to the traditional method of compacting fill formations in pre-determined lift thicknesses.

Bearing Capacity Analysis of Shallow Foundations Supported on an Artificial Fill(Substation at Kashari,Tirana)

The paper presents conclusions related to the design of shallow foundations,at the site where the Substation at Kashari,in Tirana is foreseen to be constructed.The project includes buildings with small to medium structures with 1-3 stories.The geological survey works include 6 boreholes of a depth 20.0 m,90 SPT(Standard Penetration Tests)tests,and laboratory works include 13 direct shear tests,27 unconfined and compressive strength tests,7 CU(consolidated undrained)tests and 9 UU(unconsolidated undrained)tests,etc.The foundation design must fulfill both,bearing and settlement criteria,but in this case the settlements of foundations are not possible to be calculated,since the laboratory works do not include any consolidation test.So,the local bearing capacity is expected to control the design in terms of bearing capacity and settlements.The local bearing capacity of shallow square foundations is evaluated by using Terzaghi’s formula,based on reduced shear strength parameters of soils below the bottom of foundations.The results are compared with the bearing capacity values calculated by using Burland and Burbdige(1984)method,based on the data of SPT tests.This method is used for checking the settlement(serviceability)criterion in the foundation design,when the direct settlement calculation is missing.The paper presents some conclusions related to local bearing capacity foundation-based design.

Mobile Software Assurance Informed through Knowledge Graph Construction: The OWASP Threat of Insecure Data Storage

Many organizations,to save costs,are moving to the Bring Your Own Mobile Device(BYOD)model and adopting applications built by third-parties at an unprecedented rate.Our research examines software assurance methodologies specifically focusing on security analysis coverage of the program analysis for mobile malware detection,mitigation,and prevention.This research focuses on secure software development of Android applications by developing knowledge graphs for threats reported by the Open Web Application Security Project(OWASP).OWASP maintains lists of the top ten security threats to web and mobile applications.We develop knowledge graphs based on the two most recent top ten threat years and show how the knowledge graph relationships can be discovered in mobile application source code.We analyze 200+healthcare applications from GitHub to gain an understanding of their software assurance of their developed software for one of the OWASP top ten mobile threats,the threat of“Insecure Data Storage.”We find that many of the applications are storing personally identifying information(PII)in potentially vulnerable places leaving users exposed to higher risks for the loss of their sensitive data.