Benchmarking Approach to Compare Web Applications Static Analysis Tools Detecting OWASP Top Ten Security Vulnerabilities

To detect security vulnerabilities in a web application,the security analyst must choose the best performance Security Analysis Static Tool(SAST)in terms of discovering the greatest number of security vulnerabilities as possible.To compare static analysis tools for web applications,an adapted benchmark to the vulnerability categories included in the known standard Open Web Application Security Project(OWASP)Top Ten project is required.The information of the security effectiveness of a commercial static analysis tool is not usually a publicly accessible research and the state of the art on static security tool analyzers shows that the different design and implementation of those tools has different effectiveness rates in terms of security performance.Given the significant cost of commercial tools,this paper studies the performance of seven static tools using a new methodology proposal and a new benchmark designed for vulnerability categories included in the known standard OWASP Top Ten project.Thus,the practitioners will have more precise information to select the best tool using a benchmark adapted to the last versions of OWASP Top Ten project.The results of this work have been obtaining using widely acceptable metrics to classify them according to three different degree of web application criticality.

Exploration of University English Teachers’Acceptance and Willingness to Use Learning Management System Data Analysis Tools

This study investigates university English teachers’acceptance and willingness to use learning management system(LMS)data analysis tools in their teaching practices.The research employs a mixed-method approach,combining quantitative surveys and qualitative interviews to understand teachers’perceptions and attitudes,and the factors influencing their adoption of LMS data analysis tools.The findings reveal that perceived usefulness,perceived ease of use,technical literacy,organizational support,and data privacy concerns significantly impact teachers’willingness to use these tools.Based on these insights,the study offers practical recommendations for educational institutions to enhance the effective adoption of LMS data analysis tools in English language teaching.

A Single Feasibility Study of System Multi-feature Analysis and Evaluation Tool Based on AADL Model

The tool for analyzing and evaluating system characteristics based on the AADL model can achieve real-time,reliability,security,and schedulability analysis and evaluation for software-intensive systems.It provides a complete solution for quality analysis of real-time,reliability,safety,and schedulability in the design and demonstration stages of software-intensive systems.By using the system′s multi-characteristic(real-time capability,reliability,safety,schedulability)analysis and evaluation tool based on AADL models,it can meet the software non-functional requirements stipulated by the existing model development standards and specifications.This effectively enhances the efficiency of demonstrating the compliance of the system′s non-functional quality attributes in the design work of our unit′s software-intensive system.It can also improve the performance of our unit′s software-intensive system in engineering inspections and requirement reviews conducted by various organizations.The improvement in the quality level of software-intensive systems can enhance the market competitiveness of our unit′s electronic products.

Robust Analyzing Tools for Wind Turbine Blades Coupled with Multiobiective Optimization

This paper presents an approach that utilizes the recently developed tools for analyzing wind blade properties resulting from geometric shape and geographical site characteristics to find possible blade design improvements. A set of blade shapes with a certain deviation of chord distribution from the initial geometry was investigated for WindPACT 1.5 MW turbine. The results showed that the original blade geometry can be improved based on individual site wind characteristics, giving better aerodynamic efficiency and reduced cost.

The Stochastic Regression Analysis as a Tool in Ecotoxicological QSAR Studies

Correspondence factor analysis(CFA)was used in conjunction with linear regression analysis to examine the structure-activity relationships of 50 benzene derivatives tested on Pimephales promelas.From nine molecular descriptors(numbers of C,H,O,N,Br,Cl,NO_2,OH,and NH_2 included in the molecules),CFA made it possible to define five new independent variables which were introduced in a stepwise regression analysis procedure to describe the acute toxicity(96-h LC_(50))of the aromatic compounds.The model log 1/C=-0.727F_1+1.248F_3+4.052(r=0.918; s=0.270)is more relevant to describe the ecotoxicological behavior of the studied compounds on the fathead minnow than that obtained with principal components(log 1/C=0.151 PC_1 -0.271 PC_2+4.124;r=0.737;s=0.460).The heuristic potency of this particular statistical analysis,which is called stochastic regression analysis,is discussed in detail.1989 Academic Press,Inc.

The Fuzzy Cluster Analysis in Identification of Key Temperatures in Machine Tool

The thermal-induced error is a very important sour ce of machining errors of machine tools. To compensate the thermal-induced machin ing errors, a relationship model between the thermal field and deformations was needed. The relationship can be deduced by virtual of FEM (Finite Element Method ), ANN (Artificial Neural Network) or MRA (Multiple Regression Analysis). MR A is on the basis of a total understanding of the temperature distribution of th e machine tool. Although the more the temperatures measured are, the more accura te the MRA is, too more temperatures will hinder the analysis calculation. So it is necessary to identify the key temperatures of the machine tool. The selectio n of key temperatures decides the efficiency and precision of MRA. Because of th e complexities and multi-input and multi-output structure of the relationships , the exact quantitative portions as well as the unclear portions must be taken into consideration together to improve the identification of key temperatures. I n this paper, a fuzzy cluster analysis was used to select the key temperatures. The substance of identifying the key temperatures is to group all temperatures b y their relativity, and then to select a temperature from each group as the repr esentation. A fuzzy cluster analysis can uncover the relationships between t he thermal field and deformations more truly and thoroughly. A fuzzy cluster ana lysis is the cluster analysis based on fuzzy sets. Given U={u i|i=0,...,N}, in which u i is the temperature measured, a fuzzy matrix R can be obta ined. The transfer close package t(R) can be deduced from R. A fuzzy clu ster of U then conducts on the basis of t(R). Based on the fuzzy cluster analysis discussed above, this paper identified the k ey temperatures of a horizontal machining center. The number of the temperatures measured was reduced to 4 from 32, and then the multiple regression relationshi p models between the 4 temperatures and the thermal deformations of the spindle were drawn. The remnant errors between the regression models and measured deform ations reached a satisfying low level. At the same time, the decreasing of tempe rature variable number improved the efficiency of measure and analysis greatly.

Density Functional Theory for Electrocatalysis

It is a considerably promising strategy to produce fuels and high-value chemicals through an electrochemical conversion process in the green and sustainable energy systems.Catalysts for electrocatalytic reactions,including hydrogen evolution reaction(HER),oxygen evolution reaction(OER),oxygen reduction reaction(ORR),nitrogen reduction reaction(NRR),carbon dioxide reduction reaction(CO_(2)RR),play a significant role in the advanced energy conversion technologies,such as water splitting devices,fuel cells,and rechargeable metal-air batteries.Developing low-cost and highly efficient electrocatalysts is closely related to establishing the composition-structure-activity relationships and fundamental understanding of catalytic mechanisms.Density functional theory(DFT)is emerging as an important computational tool that can provide insights into the relationship between the electrochemical performances and physical/chemical properties of catalysts.This article presents a review on the progress of the DFT,and the computational simulations,within the framework of DFT,for the electrocatalytic processes,as well as the computational designs and virtual screenings of new electrocatalysts.Some useful descriptors and analysis tools for evaluating the electrocatalytic performances are highlighted,including formation energies,d-band model,scaling relation,egorbital occupation,and free energies of adsorption.Furthermore,the remaining questions and perspectives for the development of DFT for electrocatalysis are also proposed.

Effects of Land-Cover Changes and Other Remediations on Hydrology of Xinjiang River Sub-Watershed

To determine whether reforestation efforts in the denuded hills have significant impacts on hydrology in the Xinjiang River watershed, the authors examined eight land-cover scenarios to compare hydrologic responses and to provide a conceptual basis for restoration practices. The authors analyzed a 17-year time period using remote sensing to develop land-cover classification for the watershed. Climate, soil and terrain data for the watershed were used as input in the SWAT （soil and water analysis tool） to quantify and compare the impacts on hydrologic processes. The model was calibrated to a two-year record of stream discharge measurements. The results show significant increase in forest-cover on hills （13%）. However, the hydrological response is not very significant considering the changes in forest-cover, the surface runoff and percolation ratios only changed by 2% and 1% over time. Installment of earthen irrigation ponds in the outlets of sub-basin with maximum runoff had provided the most significant hydrologic improvements and could provide irrigation water to increase crop yield on remaining cropland. The study will provide information to the local government to aid decision-making in sustainable reforestation programs resulting in better hydrologic functioning for sustainable water resource management.

Safety of Dams： A Pathological Approach of Qualitative and Quantitative Risks

Dams are critical and essential elements in any infrastructure and, in front of accidents occurred in many countries, it is extremely important to know the risk of these structures. Inserted in this context, it was found in the technical literature, methods and tools capable of measuring the exposure value by means of indicators. In the study, the highlights were 12 methods of qualitative, semiquantitative and quantitative risk analysis, representing an overview of risk analysis methods available in the literature with potential use in dams, that it has been done into electronic spreadsheets. The case study is performed on a sample of concrete dam and earth/rockfill built and operated by Eletrobr^s Furnas Company, supported by documentary research, projects, field inspections and interviews with experts. After applying the methods and the analysis thereof, has been prepared the Eletrobras Fumas dam risk analysis method which is characterized by adapting the criteria analyzed to the reality of the company＇s dams and it was also performed the portfolio risk analysis of 18 dams. In spite of the variety and subjectivity of qualitative and semiquantitative methods, the results show that they tend to converge on the analysis of dam based on risk. The application methodology demonstrates the feasibility assessment stage, covering the preliminary analysis for portfolio dams, followed by formal and individual risk analyzes for the most critical structures. These results confirm the applicability of risk analysis techniques, contributing to the consolidation of this toot as fundamental in the dam safety.

An Intelligent Tool to Support Requirements Analysis and Conceptual Design of Database Design

As an application of artificial intelligence and expert system technology to database design,this paper presents an intelligent design tool NITDT,which comprises a requirements specification lan- guage NITSL,a knowledge representation language NITKL,and an inference engine with uncertainty reasoning capability.NITDT now covers the requirements analysis and conceptual design of database design.However,it is possible to be integrated with another database design tool, NITDBA,developed also at NIT to become an integrated design tool supporting the whole process of database design.

A secure visualization platform for pathogenic genome analysis with an accurate reference database

Investigating the genetic and developmental characteristics,infection transmission attributes,and epidemiological trends of pathogens using genomic data represents the foundation for pathogen surveillance and is a crucial prerequisite for guaranteeing global health security.To meet the analytical demands of research relating to pathogen prevention and control,we designed a secure visualization system capable of pathogen genome assembly,annotation,species identification,sequence typing,antibiotic resistance and virulence analysis,genomic mobile element and transferable resistance gene annotation,and phylogenetic tree reconstruction.For highly pathogenic organisms requiring complete data protection,we have developed a secure computing tool that utilizes a trusted execution environment,is combined with blockchain and privacy computing technologies,and is specifically designed for nucleotide basic local alignment search tool(BLASTn)comparison analysis.This technological advancement offers scientific support for in‐depth investigations into pathogen transmission and epidemiological mechanisms,environmental adaptability,evolutionary trends,and immune evasion mechanisms,as well as the identification of new or emerging pathogen strains.This,in turn,aids efforts in infectious disease prevention,treatment,and research.

LjaFGD:Lonicera japonica functional genomicsdatabase

Lonicera japonica Thunb.,a traditional Chinese herb,has been used for treating human diseases for thousands of years.Recently,the genome of L.japonica has been decoded,providing valuable information for research into gene function.However,no comprehensive database for gene functional analysis and mining is available for L.japonica.We therefore constructed LjaFGD(www.gzybioinformatics.cn/LjaFGD and bioinformatics.cau.edu.cn/LjaFGD),a database for analyzing and comparing gene function in L.japonica.We constructed a gene co-expression network based on 77 RNA-seq samples,and then annotated genes of L.japonica by alignment against protein sequences from public databases.We also introduced several tools for gene functional analysis,including Blast,motif analysis,gene set enrichment analysis,heatmap analysis,and JBrowse.Our co-expression network revealed that MYB and WRKY transcription factor family genes were co-expressed with genes encoding key enzymes in the biosynthesis of chlorogenic acid and luteolin in L.japonica.We used flavonol synthase 1(LjFLS1)as an example to show the reliability and applicability of our database.LjaFGD and its various associated tools will provide researchers with an accessible platform for retrieving functional information on L.japonica genes to further biological discovery.

A novel method to investigate voltage stability of IEEE-14 bus wind integrated system using PSAT

The maximum demand of power utilization is increasing exponentially from base load to peak load in day to day life.This power demand may be either industrial usage or household applications.To meet this high maximum power demand by the consumer,one of the options is the integration of renewable energy resources with conventional power generation methods.In the present scenario,wind energy system is one of the methods to generate power in connection with the conventional power systems.When the load on the conventional grid system increases,various bus voltages of the system tend to decrease,causing serious voltage drop or voltage instability within the system.In view of this,identification of weak buses within the system has become necessary.This paper presents the line indices method to identify these weak buses,so that some corrective action may be taken to compensate for this drop in voltage.An attempt has been made to compensate these drops in voltages by integration of renewable energy systems.The wind energy system at one of the bus in the test system is integrated and the performance of the system is verified by calculating the power flow(PF)using the power system analysis tool box(PSAT)and line indices of the integrated test system.The PF and load flow results are used to calculate line indices for the IEEE-14 bus test system which is simulated on PSAT.

A computational fluid dynamics model for wind simulation:model implementation and experimental validation

To provide physically based wind modelling for wind erosion research at regional scale, a 3D computational fluid dynamics (CFD) wind model was developed. The model was programmed in C language based on the Navier-Stokes equations, and it is freely available as open source. Integrated with the spatial analysis and modelling tool (SAMT), the wind model has convenient input preparation and powerful output visualization. To validate the wind model, a series of experiments was con- ducted in a wind tunnel. A blocking inflow experiment was designed to test the performance of the model on simulation of basic fluid processes. A round obstacle experiment was designed to check if the model could simulate the influences of the obstacle on wind field. Results show that measured and simulated wind fields have high correlations, and the wind model can simulate both the basic processes of the wind and the influences of the obstacle on the wind field. These results show the high reliability of the wind model. A digital elevation model (DEM) of an area (3800 m long and 1700 m wide) in the Xilingele grassland in Inner Mongolia (autonomous region, China) was applied to the model, and a 3D wind field has been successfully generated. The clear imple- mentation of the model and the adequate validation by wind tunnel experiments laid a solid foundation for the prediction and assessment of wind erosion at regional scale.

Cutting Performance of WC-Co Alloys Modified by Nano-Additives

In this paper,the microstructure of WC-Co alloys with and without nano-additives was characterized by scanning electron microscopy（SEM） and transmission electron microscopy（TEM）.The hardness and fracture toughness was tested by using a Vickers hardness tester and a universal testing machine.The cutting test was carried out at different feed velocities（250 r/min and 320 r/min）,and the contact pairs are cutting tools and 45# steel bars.Results showed that the hardness and fracture toughness of WC-Co cemented carbides with nano-additives are higher than that of WC-Co cemented carbides without nano-additives,and they are increased 10.21% and 19.69%,respectively.The flank worn width and crater width of cutting tools decrease greatly with the addition of nano-additives.For the nano-modified specimen with WC grain size of 7 μm,both the flank worn width and crater width are the minimum after the cutting process.And there are little built-up layers and some pile-up regions on the flank face leading to high cutting performance for the nano-modified cemented carbides.There are some melted regions on the flank face of cutting tools without nano-additives,and the WC grains on the cross section of alloys without nano-additives show severe fragmentation.The wear type of WC-Co is flank wear,and the wear mechanism is abrasive,adhesion and oxidation wear.

Differential expression of salt tolerance related genes in Brassica campestris L. ssp. chinensis (L.) Makino var. communis Tsen et Lee

We examined salt tolerance responsive genes in Pak-choi under salt stress and analyze their potential function. The LRNA differential display was used to screen the transcript derived fragments （TDFs） related to salinity tolerance in tolerant and Loderately tolerant Pak-choi germplasm. Seventy-eight primer combinations generated 101 differential eDNA fragments, which ere divided into 10 expression types. Seven cDNA sequences （GenBank accession Nos. DQ006915-DQ006921） obtained and ,~quenced were highly homologous to some known expression genes or the genes related to the signaling pathways in plants under ifferent abiotic stress.