AEMB: An Automated Exploit Mitigation Bypassing Solution

Modern operating systems set exploit mitigations to thwart the exploit, which has also become a barrier to automated exploit generation (AEG). Many current AEG solutions do not fully account for exploit mitigations, and as a result, they are unable to accurately assess the exploitability of vulnerabilities in such settings.This paper proposes AEMB , an automated solution for bypassing exploit mitigations and generating useable exploits (EXPs). Initially, AEMB identifies exploit mitigations in the system based on characteristics of the program execution environment . Then, AEMB implements exploit mitigations bypassing the payload generation by modeling expert experience and constructs the corresponding constraints. Next, during the program’s execution, AEMB uses symbol execution to collect symbol information and create exploit constraints. Finally, AEMB utilizes a solver to solve the constraints, including payload constraints and exploit constraints, to generate the EXP. In this paper, we evaluated a prototype of AEMB on six test programs and seven real-world applications. Furthermore, we conducted 54 sets of experiments on six different combinations of exploit mitigations. Experiment results indicate that AEMB can automatically overcome exploit mitigations and produce successful exploits for 11 out of 13 applications.

Combining UML Profiles to Design Serious Games Dedicated to Trace Information in Decision Processes

An expert assessment consists of an ordered series of decisions that have to respond to time-evolving information contexts. Improving decisions made in a risk context requires better knowledge of reasoning mechanisms. The authors think that serious games can constitute a rich observatory for reasoning and decisions. However, the design of these games is not trivial and is rarely scalable or reusable. This paper proposes a UML profile library for generically modeling expert reasoning in situations using serious games that involve risks. Two main UML profiles are dedicated to both serious games and gamer decisions traceability modeling. Complementary profiles address risk expert reasoning modeling and data quality modeling. The authors illustrate the approach using the design of a serious game about avalanche risk analysis.

Determination Required Number of Personnel for the Hospitals Dietary Food Departments (P22-008-19)

Objectives Objective of abstract is to provide a reasonable methodology for determining the number of production personnel required in the hospitals' food departments. Methods Logical comparison, mathematical modeling, expert assessment methods were used Results The methodology for determination required number of personnel for the hospitals dietary food departments was created. It allowed to justify the number of personnel in Kaunas Clinical Hospital. Conclusions Use of suggested methodology will help for the hospitals better organize dietary food production processes and optimize staff costs Funding Sources Without any external source of funding.

Modeling of multicomponent diffraction structures based on optimization approaches and numerical methods

The paper proposes a methodological approach in which the representation of objects in the form of a set of diffraction structures is their Association into groups. Using neural network modeling, expert evaluation and application of optimization based on genetic algorithm, there is a formation of the object with the desired scattering properties. An example of modeling an object presented as a set of two-dimensional cylinders is given.