13 C
New York
Monday, March 17, 2025
Home Blog Page 3779

A Software for Educating College students Robotic Programming

codesanitize
-
0
A Software for Educating College students Robotic Programming


By Carol Grace for RobotLAB.com

Augmented-Reality

The latest years noticed an elevated adoption of know-how in schooling, from the shift to digital studying environments to using robotics inside lecture rooms. As an example, a earlier submit highlights how collaborative robots or cobots have limitless potential not just for bettering office well being and security but additionally for reworking schooling, significantly within the context of instructing engineering. By means of open-ended, versatile programming, cobots will help college students hone their problem-solving expertise and adapt to extra advanced robotic functions.

Past cobots, one other rising know-how that demonstrates advantages in classroom settings is augmented actuality. Under, we check out what augmented actuality is and the way its functions can significantly assist college students higher perceive robotic programming.

Continue

Interfacial water on collagen nanoribbons by 3D AFM – Weblog • by NanoWorld®

codesanitize
-
0
Interfacial water on collagen nanoribbons by 3D AFM – Weblog • by NanoWorld®


Collagen is essentially the most considerable structural protein in mammals. *

Kind I collagen in its fibril kind has a attribute sample construction that alternates two areas known as hole and overlap. The construction and properties of collagens are extremely depending on the water and mineral content material of the surroundings. *

Within the article “Interfacial water on collagen nanoribbons by 3D AFM” Diana M. Arvelo, Clara Garcia-Sacristan, Enrique Chacón, Pedro Tarazona and Ricardo Garcia describe how they apply three dimensional atomic power microscopy (3D AFM) to characterize at angstrom-scale decision the interfacial water construction of collagen nanoribbons.*

Three-dimensional AFM (3D AFM) is an AFM methodology developed for imaging at high-spatial decision stable–liquid interfaces within the three spatial coordinates.*

This methodology has offered atomic-scale photos of hydration and solvation layers on quite a lot of inflexible and atomically flat surfaces, corresponding to mica, gibbsite, boehmite, graphite, or 2D supplies.*

Nonetheless, imaging hydration layers on comfortable supplies corresponding to collagen is more difficult than on atomically flat crystalline surfaces.*

On the one hand, the power utilized by the AFM tip would possibly deform the protein. Then again, the peak variations throughout hole and overlap areas would possibly complicate the imaging of interfacial water.*

Lately, 3D AFM has expanded its capabilities to picture interfacial water on comfortable supplies corresponding to proteins, biopolymers, DNA, lipids, membrane proteins, and cells.*

These experiments had been carried out with hydrophilic SiOx AFM ideas that are negatively charged underneath impartial pH situations.*

The imaging distinction mechanisms and the position of the AFM tip’s composition on the noticed solvation construction are underneath dialogue.*

Extra usually, each concept and experiments carried out with very excessive salt concentrations indicated that the distinction noticed in 3D AFM displays an interaction between water particle and floor cost density distributions.*

For his or her article the authors apply 3D AFM to check at molecular-scale spatial decision the construction of interfacial water on collagen nanoribbons.*

Diana M. Arvelo et al. examine the affect of the AFM tip’s cost and the salt focus on the interfacial solvent construction. They report that the interfacial construction is determined by the water particle and ion cost density distributions. A non-charged AFM tip reveals the formation of hydration layers on each hole and overlap areas. A negatively charged AFM tip reveals that on a niche area, the solvation construction would possibly depart from that of the hydration layers. This impact is attributed to the adsorption of ions from the answer. These ions occupy the voids present between collagen molecules within the hole area. *

A house-made three-dimensional AFM was applied on a commercially obtainable AFM. 3D AFM was carried out within the amplitude modulation mode by thrilling the AFM cantilever at its first eigenmode.
On the identical time when the AFM cantilever oscillates with respect to its equilibrium place, a sinusoidal sign is utilized to the z-piezo to change the relative z-distance between the pattern and the AFM tip. *

Diana M. Arvelo et al. have used z-piezo displacements with amplitudes of two.0 nm and a interval (frequency) of 10 ms (100 Hz). The z-piezo sign is synchronized with the xy-displacements in such a method that for every xy-position on the floor of the fabric, the AFM tip performs a single and full z-cycle. The z-data are learn out each 10.24 µs and saved in 512 pixels (256 pixels per half cycle). Every xy-plane of the 3D map comprises 80 × 64 pixels. Therefore, the whole time to accumulate such a 3D-AFM picture is 52 s.*

The 3D AFM experiments had been carried out with two varieties of AFM probes with completely different floor chemistries which have completely different chemical properties in aqueous options.*

The high-density carbon/diamond-like AFM ideas grown on quartz-like AFM cantilevers that Diana M. Arvelo et al. et al used ( NanoWorld Extremely-Brief Cantilevers USC-F1.2-k7.3 for high-speed AFM) stay uncharged at pH 7.4 and are known as “impartial” AFM ideas within the article.

The silicon AFM cantilevers with silicon AFM ideas (NanoWorld Arrow-UHFAuD ultra-high frequency AFM probes) are negatively charged at impartial pH (silicon ideas for brief within the textual content) and had been used to look at the formation of collagen nanoribbons.

All silicon AFM ideas are readily oxidized and are normally coated by a skinny native oxide layer which is hydrophilic.

The hydroxyl teams on the floor of the silicon AFM tip change into negatively charged whereas the carbon AFM ideas stay impartial (unchanged).

To picture at angstrom-scale decision, the interfacial water construction on the collagen requires lowering the lateral and vertical imaging sizes, respectively, to five and 1.5 nm.*

First, the authors introduce the outcomes obtained with carbon-based ideas (uncharged, NanoWorld Extremely-Brief Cantilevers USC-F1.2-k7.3 for high-speed AFM). Determine 2 (of the cited article) reveals some consultant 2D power xz panels obtained on hole and overlap areas of a collagen nanoribbon in a focus of 300 mM KCl. The panels are extracted from a 3D AFM picture. The interlayer distances in a niche area are d1 = 0.28 nm and d2 = 0.33 nm (common values) [Fig. 2(a)], whereas these in an overlap area are d1 = 0.29 and d2 = 0.32 nm (common values) [Fig. 2(b)]. These values coincide inside the experimental error with the values anticipated for hydration layers on hydrophilic surfaces.

Subsequent, the authors repeated the experiment utilizing different salt concentrations. Determine 2(c) reveals that the interlayers distances (inside the experimental error) don’t rely upon the salt focus or the collagen area. Diana M. Arvelo et al.  comment that entropic results make the second layer extra disordered than the primary; due to this fact, d2 ≥ d1.

The construction and properties of collagens are extremely depending on the water and mineral content material of the surroundings.

For a impartial AFM tip (USC-F1.2-k7.3), the interfacial water construction is characterised by the oscillation of the water particle density distribution with a price of 0.3 nm (hydration layers). The interfacial construction doesn’t rely upon the collagen area.

For a negatively charged AFM tip (NanoWorld Arrow-UHFAuD ultra-high frequency AFM probes) the interfacial construction would possibly rely upon the collagen area.

Hydration layers are noticed in overlap areas, whereas in hole areas, the interfacial solvent construction is dominated by electrostatic interactions. These interactions generate interlayer distances of 0.2 nm.

The achieved outcomes nonetheless have to be defined by the idea of 3D AFM. Extra detailed theoretical simulations, that are past the scope of the cited examine, will probably be required to quantitatively clarify the interlayer distances noticed over hole areas.

Nonetheless, the outcomes introduced by the authors spotlight the potential of 3D AFM to determine the solvent constructions on proteins and the complexity of these interfaces.*

Figure 2 from Diana M. Arvelo et al. 2024 “Interfacial water on collagen nanoribbons by 3D AFM”Interfacial liquid water structure on collagen provided by an uncharged tip. (a) 2D force maps (x, y) of the interfacial water structure in the gap region. The map is obtained in a 300 mM KCl solution. The force–distance curves in the bottom of the image are obtained from the top panel. (b) 2D force maps (x, y) of the interfacial water structure in the overlap region. The force–distance curves in the bottom of the image are obtained from the top panel. (c) Statistics of d1 and d2 distances measured from several collagen–water interfaces. The individual force–distance curves from the bottom panels of (a) and (b) are plotted in gray. The average force–distance curve is highlighted by a thick continuous line. The experiments are performed with USC-F1.2-k7.3 cantilevers. Experimental parameters: f = 745 kHz; k = 6.7 N m−1; Q = 8.3; A0 = 150 pm; Asp = 100 pm. The neutral AFM tips used for the research in this article were NanoWorld Ultra-Short Cantilevers USC-F1.2-k7.3 for high-speed AFM (quartz-like AFM cantilevers with a high-density carbon AFM tip grown on them)
Determine 2 from Diana M. Arvelo et al. 2024 “Interfacial water on collagen nanoribbons by 3D AFM”
Interfacial liquid water construction on collagen offered by an uncharged tip. (a) 2D power maps (x, y) of the interfacial water construction within the hole area. The map is obtained in a 300 mM KCl answer. The power–distance curves within the backside of the picture are obtained from the highest panel. (b) 2D power maps (x, y) of the interfacial water construction within the overlap area. The power–distance curves within the backside of the picture are obtained from the highest panel. (c) Statistics of d1 and d2 distances measured from a number of collagen–water interfaces. The person power–distance curves from the underside panels of (a) and (b) are plotted in grey. The typical power–distance curve is highlighted by a thick steady line. The experiments are carried out with USC-F1.2-k7.3 cantilevers. Experimental parameters: f = 745 kHz; okay = 6.7 N m−1; Q = 8.3; A0 = 150 pm; Asp = 100 pm.

 

 

Figure 3 from Diana M. Arvelo et al. 2024 “Interfacial water on collagen nanoribbons by 3D AFM”Interfacial liquid water structure on collagen provided by a negatively charged tip. (a) 2D force maps (x, y) of the interfacial water structure in the gap region. The map is obtained in a 300 mM KCl solution. The force–distance curves in the bottom of the image are obtained from the top panel. (b) 2D force maps (x, y) of the interfacial water structure in the overlap region. The force–distance curves in the bottom of the image are obtained from the top panel. (c) Statistics of d1 and d2 distances measured from several collagen–water interfaces. In the bottom panels of (a) and (b), the individual force–distance curves from the bottom panels of (a) and (b) are plotted in gray. The average force–distance curve is highlighted by a thick continuous line. The images were captured using ArrowUHF AuD cantilevers. Experimental parameters: f = 745 kHz; k = 8.3 N m−1; Q = 4.5; A0 = 170 pm; Asp = 100 pm. The negatively charged AFM tips used for the research in this article were NanoWorld Arrow-UHFAuD ultra-high frequency AFM probes.
Determine 3 from Diana M. Arvelo et al. 2024 “Interfacial water on collagen nanoribbons by 3D AFM”
Interfacial liquid water construction on collagen offered by a negatively charged tip. (a) 2D power maps (x, y) of the interfacial water construction within the hole area. The map is obtained in a 300 mM KCl answer. The power–distance curves within the backside of the picture are obtained from the highest panel. (b) 2D power maps (x, y) of the interfacial water construction within the overlap area. The power–distance curves within the backside of the picture are obtained from the highest panel. (c) Statistics of d1 and d2 distances measured from a number of collagen–water interfaces. Within the backside panels of (a) and (b), the person power–distance curves from the underside panels of (a) and (b) are plotted in grey. The typical power–distance curve is highlighted by a thick steady line. The pictures had been captured utilizing ArrowUHF AuD cantilevers. Experimental parameters: f = 745 kHz; okay = 8.3 N m−1; Q = 4.5; A0 = 170 pm; Asp = 100 pm.

*Diana M. Arvelo, Clara Garcia-Sacristan, Enrique Chacón, Pedro Tarazona and Ricardo Garcia
Interfacial water on collagen nanoribbons by 3D AFM
Journal of Chemical Physics 160, 164714 (2024)
DOI: https://doi.org/10.1063/5.0205611

The article “Interfacial water on collagen nanoribbons by 3D AFM” by Diana M. Arvelo, Clara Garcia-Sacristan, Enrique Chacón, Pedro Tarazona and Ricardo Garcia is licensed underneath a Inventive Commons Attribution 4.0 Worldwide License, which allows use, sharing, adaptation, distribution and replica in any medium or format, so long as you give acceptable credit score to the unique writer(s) and the supply, present a hyperlink to the Inventive Commons license, and point out if adjustments had been made. The pictures or different third-party materials on this article are included within the article’s Inventive Commons license, except indicated in any other case in a credit score line to the fabric. If materials isn’t included within the article’s Inventive Commons license and your supposed use isn’t permitted by statutory regulation or exceeds the permitted use, you will want to acquire permission straight from the copyright holder. To view a duplicate of this license, go to https://creativecommons.org/licenses/by/4.0/.

Worldwide Courtroom of Justice Wants International Assist To Shield The Local weather

codesanitize
-
0
Worldwide Courtroom of Justice Wants International Assist To Shield The Local weather


Join every day information updates from CleanTechnica on e-mail. Or observe us on Google Information!

All of us wish to shield the local weather. Why wouldn’t we? It’s the mechanism by which human life prospers.

The impacts of local weather air pollution, although, are affecting us all. The results embrace warming temperatures, adjustments in precipitation, will increase within the frequency or depth of some excessive climate occasions, and rising sea ranges. These reverberations threaten our well being by affecting the meals we eat, the water we drink, the air we breathe, and the climate we expertise.

Primary rights to life, well being, meals, shelter, and security are not assured. If you wish to consider the sensible results of local weather change, then take into account this: local weather change is projected to trigger the deaths of 1 billion individuals by the tip of this century if common warming reaches or exceeds 2°C. Governments world wide needs to be regulating emissions and air pollution, but many fail to take action.

Worldwide regulation is floor within the legally binding Paris local weather settlement, the place nations pledged to maintain common temperatures inside 1.5 °C of pre-industrial ranges. But the Paris settlement lacks an enforcement mechanism, so shouldn’t courts be certain that nationwide and worldwide governmental our bodies be held accountable for his or her local weather guarantees?

Actually, circumstances have been piling up as activists head to the courts to guard the local weather. They’ve requested for selections about company greenwashing, safety from local weather change as a human proper, even compensation from companies for climate-related harms underneath the “polluter pays” precept.



Chip in a couple of {dollars} a month to assist assist unbiased cleantech protection that helps to speed up the cleantech revolution!

Over the previous few years there have been increasingly efforts to deal with local weather change via the courts. The Intergovernmental Panel on Local weather Change (IPCC) has acknowledged human rights-based local weather litigation as an vital strategy to driving extra bold local weather motion and has acknowledged that, if profitable, local weather litigation “can result in a rise in a rustic’s total ambition to sort out local weather change.”

But local weather litigation isn’t any simple activity. The circumstances are sometimes buried in a quagmire of hearings and motions, in counter-litigation and challenges to local weather legal guidelines.

As a latest article in Nature outlined, the Worldwide Courtroom of Justice (ICJ), which is the United Nations’ principal judicial organ in The Hague, the Netherlands, will start listening to proof on two broad questions.

  1. What are international locations’ obligations in worldwide regulation to guard the local weather system from anthropogenic greenhouse-gas emissions?
  2. What ought to the authorized penalties be for states when their actions — or failure to behave — trigger hurt?

For instance, the Lancet, a journal which illuminates medical science, argues that the trail to mitigating local weather impacts requires a concerted effort that transcends nationwide borders, emphasizing international solidarity, each shared and nationwide duty, and an unwavering dedication to justice and fairness. They are saying that incorporating human rights into local weather motion emphasizes the crucial to guard probably the most susceptible populations, guaranteeing their proper to well being, security, and a sustainable surroundings.

Will governments communicate to the ICJ, not simply in their very own nationwide pursuits, however as advocates for a residing planet the place individuals and nature can thrive in concord, now and into the longer term? That’s the query that Adil Najam, president of the WWF, posed earlier this month in an editorial. Najam calls on scientists and residents world wide to again the ICJ, saying that this worldwide court docket’s opinion “will amplify the voices of tens of millions of scientists and residents who’re demanding sturdy ambition and motion on local weather and nature safety.”

Ought to courts even be getting concerned in what might be referred to as political processes, as many pundits pose? Shouldn’t governments that lack enforcement mechanisms legislate to compensate for such gaps? Contemplating the excessive dangers that opposed results of local weather change are inflicting, it is smart for governments to maneuver ahead with probably the most efficacious routes for local weather options. A mitigating issue presents itself, nevertheless, and revolves round a social dilemma — sure, all people would profit most from cooperating in regional court docket selections that shield the local weather, however many representatives defect because of conflicting pursuits that dissuade them from joint motion.

So, as described in a 2023 article within the Cambridge College Press, the dramatic improve in local weather litigation over the previous decade is “a manifestation of local weather motion democratization” and a response to weak governmental and company local weather mitigation. Worldwide regulation on local weather change gives “fertile floor for judicial improvement” as a result of, though the Paris settlement is formally binding, states’ obligations “are sparse and open-textured.”

Courts will be change brokers and stress legislative entities to take decisive motion. Because of this, till such a time as extra legislative our bodies settle for duty for local weather circumstances, it is going to be as much as the ICJ to adjudicate. The ICJ would be the court docket of highest normal and can set out duty parameters for local weather harm and entities’ obligations to guard the local weather.

Courtroom Circumstances That Problem Governments To Shield The Atmosphere

At the very least 230 new local weather circumstances had been filed in 2023, based on the Grantham Analysis Institute on Local weather Change and the Atmosphere. Actually, by the tip of final 12 months, 2,666 local weather litigation circumstances had been filed worldwide. Many of those are in search of to carry governments and firms accountable for local weather motion. The claimants are younger and previous and non-governmental organizations (NGOs), all of whom wish to maintain governments and firms accountable for his or her local weather pledges and name for advisory opinions from nationwide, regional, and worldwide courts.

Listed below are among the newer local weather court docket circumstances.

Sixteen younger plaintiffs sued the state of Montana, claiming it failed to offer the protections afforded to them underneath the regulation to offer residents with a “clear and healthful surroundings.” The court docket dominated in favor of the plaintiffs, deciding that the state has harmed the surroundings and the younger plaintiffs by stopping Montana from contemplating the local weather impacts of vitality tasks.

In Could, courts in Germany and the UK individually discovered that their authorities’s insurance policies would fail to satisfy emissions-reduction targets which are set out in regulation.

Final September, California launched authorized motion towards 5 of the world’s largest oil corporations — BP, Chevron, ConocoPhillips, Exxon, and Shell — and their subsidiaries, demanding that they pay “for the prices of their impacts to the surroundings, human well being and Californians’ livelihoods, and to assist shield the state towards the harms that local weather change will trigger in years to return.”

Brazil’s public prosecutor’s workplace and the Brazilian Institute of the Atmosphere and Renewable Pure Sources are in search of compensation for harms particularly from greenhouse fuel emissions brought on by unlawful deforestation.

Have a tip for CleanTechnica? Wish to promote? Wish to counsel a visitor for our CleanTech Discuss podcast? Contact us right here.

Newest CleanTechnica.TV Movies

Commercial



 

CleanTechnica makes use of affiliate hyperlinks. See our coverage right here.

CleanTechnica’s Remark Coverage



Create a multi-line, editable textual content view utilizing TextEditor in SwiftUI. – iOSTutorialJunction

codesanitize
-
0
Create a multi-line, editable textual content view utilizing TextEditor in SwiftUI. – iOSTutorialJunction


In UIKit, we use UITextView for enter fields that require lengthy textual content entries from the person. In SwiftUI, we will accomplish the identical with TextEditor. The TextEditor view in SwiftUI handles multiline textual content enter. On this tutorial, we’ll learn to use TextEditor with a placeholder, making it operate equally to a UITextView in UIKit.

Step-by-Step Implementation of multi-line editable textual content discipline in SwiftUI

Step 1: Open Xcode and choose “Create a brand new Xcode venture.“. Select “App” underneath the iOS tab.Title your venture and ensure “SwiftUI” is chosen for the Person Interface.

Step 2: Create a state variable named multiLineText.

import SwiftUI

struct FeedbackView: View {
   @State non-public var multiLineText = ""
   var physique: some View {
   }

}

Step 3: Let begin designing our multi-line textual content discipline in SwiftUI utilizing TextEditor.

  • First we’ll take VStack with alignment to main as we wish our view to to not be in centre of display screen however towards the vanguard.
  • Add a Textual content view with title “Remark” illustrating person the he can add feedback beneath
  • Take a ZStack with alignment to topLeading and inside it first we’ll add a RoundedRectangle view in order that we can provide border to our TextEditor. Then will examine if state variable named multiLineText is empty or not. If it’s empty we’ll add placeholder textual content utilizing Textual content view.
  • Lastly we’ll add TextEditor to our ZStack. Lastly we’ll change opacity of TextEditor if it’s empty with a purpose to let placeholder Textual content seen to person.

Full code snippet is given beneath.

import SwiftUI

struct ContentView: View {
    @State non-public var multiLineText = ""
    var physique: some View {
        VStack(alignment: .main) {
            Textual content("Remark")
                .font(.system(dimension: 14.0, weight: .medium))
            ZStack(alignment: .topLeading) {
                RoundedRectangle(cornerRadius: 14, model: .steady)
                    .strokeBorder(Coloration.purple.opacity(0.6), lineWidth: 1)
                if multiLineText.isEmpty {
                    Textual content("Placeholder Textual content")
                        .foregroundColor(Coloration.grey)
                        .font(.system(dimension: 14.0, weight: .common))
                        .padding(.horizontal, 8)
                        .padding(.vertical, 12)
                }
                TextEditor(textual content: $multiLineText)
                    .font(.system(dimension: 14.0))
                    .opacity(multiLineText.isEmpty ? 0.7 : 1)
                    .padding(4)
                
            }
            .body(peak: 135)
        }
        .padding()
    }
}

#Preview {
    ContentView()
}

Output of utilizing TextEditor with Placeholder in SwiftUI

Create a multi-line, editable textual content view utilizing TextEditor in SwiftUI. – iOSTutorialJunction

This code snippets offers you a multi-line editable textual content discipline in SwiftUI with a placeholder that disappears as soon as the person begins typing and re – seems if its empty



Hfinger – Fingerprinting HTTP Requests

codesanitize
-
0
Hfinger – Fingerprinting HTTP Requests




Hfinger – Fingerprinting HTTP Requests

Device for Fingerprinting HTTP requests of malware. Primarily based on Tshark and written in Python3. Working prototype stage 🙂

Its essential goal is to supply distinctive representations (fingerprints) of malware requests, which assist in their identification. Distinctive means right here that every fingerprint must be seen solely in a single specific malware household, but one household can have a number of fingerprints. Hfinger represents the request in a shorter type than printing the entire request, however nonetheless human interpretable.

Hfinger can be utilized in guide malware evaluation but in addition in sandbox programs or SIEMs. The generated fingerprints are helpful for grouping requests, pinpointing requests to specific malware households, figuring out totally different operations of 1 household, or discovering unknown malicious requests omitted by different safety programs however which share fingerprint.

An educational paper accompanies work on this device, describing, for instance, the motivation of design decisions, and the analysis of the device in comparison with p0f, FATT, and Mercury.

The thought

The fundamental assumption of this venture is that HTTP requests of various malware households are kind of distinctive, to allow them to be fingerprinted to supply some form of identification. Hfinger retains details about the construction and values of some headers to supply means for additional evaluation. For instance, grouping of comparable requests – at this second, it’s nonetheless a piece in progress.

After evaluation of malware’s HTTP requests and headers, we’ve got recognized some components of requests as being most distinctive. These embody: * Request methodology * Protocol model * Header order * Fashionable headers’ values * Payload size, entropy, and presence of non-ASCII characters

Moreover, some commonplace options of the request URL had been additionally thought of. All these components had been translated right into a set of options, described in particulars right here.

The above options are translated into various size illustration, which is the precise fingerprint. Relying on report mode, totally different options are used to fingerprint requests. Extra data on these modes is introduced under. The function choice course of will probably be described within the forthcoming tutorial paper.

Set up

Minimal necessities wanted earlier than set up: * Python >= 3.3, * Tshark >= 2.2.0.

Set up obtainable from PyPI:

pip set up hfinger

Hfinger has been examined on Xubuntu 22.04 LTS with tshark bundle in model 3.6.2, however ought to work with older variations like 2.6.10 on Xubuntu 18.04 or 3.2.3 on Xubuntu 20.04.

Please be aware that as with all PoC, it is best to run Hfinger in a separated setting, no less than with Python digital setting. Its setup shouldn’t be lined right here, however you may attempt this tutorial.

Utilization

After set up, you may name the device straight from a command line with hfinger or as a Python module with python -m hfinger.

For instance:

foo@bar:~$ hfinger -f /tmp/take a look at.pcap
[1]

Assist will be displayed with brief -h or lengthy --help switches:

utilization: hfinger [-h] (-f FILE | -d DIR) [-o output_path] [-m {0,1,2,3,4}] [-v]
[-l LOGFILE]
Hfinger - fingerprinting malware HTTP requests saved in pcap recordsdata
non-obligatory arguments:
-h, --help            present this assist message and exit
-f FILE, --file FILE  Learn a single pcap file
-d DIR, --directory DIR
Learn pcap recordsdata from the listing DIR
-o output_path, --output-path output_path
Path to the output listing
-m {0,1,2,3,4}, --mode {0,1,2,3,4}
Fingerprint report mode. 
0 - related variety of collisions and fingerprints as mode 2, however utilizing fewer options, 
1 - illustration of all designed options, however a bit of extra collisions than modes 0, 2, and 4, 
2 - optimum (the default mode), 
3 - the bottom variety of generated fingerprints, however the highest variety of collisions, 
4 - the best fingerprint entropy, however barely extra fingerprints than modes 0-2
-v, --verbose         Report details about non-standard values within the request 
(e.g., non-ASCII characters, no CRLF tags, values not current within the configuration checklist). 
With out --logfile (-l) will print to the usual error.
-l LOGFILE, --logfile LOGFILE
Output logfile within the verbose mode. Implies -v or --verbose change.

You need to present a path to a pcap file (-f), or a listing (-d) with pcap recordsdata. The output is in JSON format. It will likely be printed to plain output or to the supplied listing (-o) utilizing the identify of the supply file. For instance, output of the command:

hfinger -f instance.pcap -o /tmp/pcap

will probably be saved to:

/tmp/pcap/instance.pcap.json

Report mode -m/--mode can be utilized to alter the default report mode by offering an integer within the vary 0-4. The modes differ on represented request options or rounding modes. The default mode (2) was chosen by us to characterize all options which are normally used throughout requests’ evaluation, but it surely additionally gives low variety of collisions and generated fingerprints. With different modes, you may obtain totally different objectives. For instance, in mode 3 you get a decrease variety of generated fingerprints however the next probability of a collision between malware households. If you’re not sure, you do not have to alter something. Extra data on report modes is right here.

Starting with model 0.2.1 Hfinger is much less verbose. You must use -v/--verbose if you wish to obtain details about encountered non-standard values of headers, non-ASCII characters within the non-payload a part of the request, lack of CRLF tags (rnrn), and different issues with analyzed requests that aren’t software errors. When any such points are encountered within the verbose mode, they are going to be printed to the usual error output. You may as well save the log to an outlined location utilizing -l/--log change (it implies -v/--verbose). The log knowledge will probably be appended to the log file.

Utilizing hfinger in a Python software

Starting with model 0.2.0, Hfinger helps importing to different Python functions. To make use of it in your app merely import hfinger_analyze operate from hfinger.evaluation and name it with a path to the pcap file and reporting mode. The returned result’s an inventory of dicts with fingerprinting outcomes.

For instance:

from hfinger.evaluation import hfinger_analyze
pcap_path = "SPECIFY_PCAP_PATH_HERE"
reporting_mode = 4
print(hfinger_analyze(pcap_path, reporting_mode))

Starting with model 0.2.1 Hfinger makes use of logging module for logging details about encountered non-standard values of headers, non-ASCII characters within the non-payload a part of the request, lack of CRLF tags (rnrn), and different issues with analyzed requests that aren’t software errors. Hfinger creates its personal logger utilizing identify hfinger, however with out prior configuration log data in observe is discarded. If you wish to obtain this log data, earlier than calling hfinger_analyze, it is best to configure hfinger logger, set log degree to logging.INFO, configure log handler as much as your wants, add it to the logger. Extra data is offered within the hfinger_analyze operate docstring.

Fingerprint creation

A fingerprint relies on options extracted from a request. Utilization of specific options from the complete checklist relies on the chosen report mode from a predefined checklist (extra data on report modes is right here). The determine under represents the creation of an exemplary fingerprint within the default report mode.

Hfinger – Fingerprinting HTTP Requests

Three components of the request are analyzed to extract data: URI, headers’ construction (together with methodology and protocol model), and payload. Specific options of the fingerprint are separated utilizing | (pipe). The ultimate fingerprint generated for the POST request from the instance is:

2|3|1|php|0.6|PO|1|us-ag,ac,ac-en,ho,co,co-ty,co-le|us-ag:f452d7a9/ac:as-as/ac-en:id/co:Ke-Al/co-ty:te-pl|A|4|1.4

The creation of options is described under within the order of look within the fingerprint.

Firstly, URI options are extracted: * URI size represented as a logarithm base 10 of the size, rounded to an integer, (within the instance URI is 43 characters lengthy, so log10(43)≈2), * variety of directories, (within the instance there are 3 directories), * common listing size, represented as a logarithm with base 10 of the particular common size of the listing, rounded to an integer, (within the instance there are three directories with whole size of 20 characters (6+6+8), so log10(20/3)≈1), * extension of the requested file, however solely whether it is on an inventory of identified extensions in hfinger/configs/extensions.txt, * common worth size represented as a logarithm with base 10 of the particular common worth size, rounded to 1 decimal level, (within the instance two values have the identical size of 4 characters, what is clearly equal to 4 characters, and log10(4)≈0.6).

Secondly, header construction options are analyzed: * request methodology encoded as first two letters of the tactic (PO), * protocol model encoded as an integer (1 for model 1.1, 0 for model 1.0, and 9 for model 0.9), * order of the headers, * and common headers and their values.

To characterize order of the headers within the request, every header’s identify is encoded in response to the schema in hfinger/configs/headerslow.json, for instance, Consumer-Agent header is encoded as us-ag. Encoded names are separated by ,. If the header identify doesn’t begin with an higher case letter (or any of its components when analyzing compound headers equivalent to Settle for-Encoding), then encoded illustration is prefixed with !. If the header identify shouldn’t be on the checklist of the identified headers, it’s hashed utilizing FNV1a hash, and the hash is used as encoding.

When analyzing common headers, the request is checked if they seem in it. These headers are: * Connection * Settle for-Encoding * Content material-Encoding * Cache-Management * TE * Settle for-Charset * Content material-Sort * Settle for * Settle for-Language * Consumer-Agent

When the header is discovered within the request, its worth is checked in opposition to a desk of typical values to create pairs of header_name_representation:value_representation. The identify of the header is encoded in response to the schema in hfinger/configs/headerslow.json (as introduced earlier than), and the worth is encoded in response to schema saved in hfinger/configs listing or configs.py file, relying on the header. Within the above instance Settle for is encoded as ac and its worth */* as as-as (asterisk-asterisk), giving ac:as-as. The pairs are inserted into fingerprint so as of look within the request and are delimited utilizing /. If the header worth can’t be discovered within the encoding desk, it’s hashed utilizing the FNV1a hash.
If the header worth consists of a number of values, they’re tokenized to supply an inventory of values delimited with ,, for instance, Settle for: */*, textual content/* would give ac:as-as,te-as. Nevertheless, at this level of growth, if the header worth comprises a “high quality worth” tag (q=), then the entire worth is encoded with its FNV1a hash. Lastly, values of Consumer-Agent and Settle for-Language headers are straight encoded utilizing their FNV1a hashes.

Lastly, within the payload options: * presence of non-ASCII characters, represented with the letter N, and with A in any other case, * payload’s Shannon entropy, rounded to an integer, * and payload size, represented as a logarithm with base 10 of the particular payload size, rounded to 1 decimal level.

Report modes

Hfinger operates in 5 report modes, which differ in options represented within the fingerprint, thus data extracted from requests. These are (with the quantity used within the device configuration): * mode 0 – producing an analogous variety of collisions and fingerprints as mode 2, however utilizing fewer options, * mode 1 – representing all designed options, however producing a bit of extra collisions than modes 0, 2, and 4, * mode 2 – optimum (the default mode), representing all options that are normally used throughout requests’ evaluation, but in addition providing a low variety of collisions and generated fingerprints, * mode 3 – producing the bottom variety of generated fingerprints from all modes, however attaining the best variety of collisions, * mode 4 – providing the best fingerprint entropy, but in addition producing barely extra fingerprints than modes 0–2.

The modes had been chosen in an effort to optimize Hfinger’s capabilities to uniquely establish malware households versus the variety of generated fingerprints. Modes 0, 2, and 4 supply an analogous variety of collisions between malware households, nonetheless, mode 4 generates a bit of extra fingerprints than the opposite two. Mode 2 represents extra request options than mode 0 with a comparable variety of generated fingerprints and collisions. Mode 1 is the one one representing all designed options, but it surely will increase the variety of collisions by virtually two instances evaluating to modes 0, 1, and 4. Mode 3 produces no less than two instances fewer fingerprints than different modes, but it surely introduces about 9 instances extra collisions. Description of all designed options is right here.

The modes encompass options (within the order of look within the fingerprint): * mode 0: * variety of directories, * common listing size represented as an integer, * extension of the requested file, * common worth size represented as a float, * order of headers, * common headers and their values, * payload size represented as a float. * mode 1: * URI size represented as an integer, * variety of directories, * common listing size represented as an integer, * extension of the requested file, * variable size represented as an integer, * variety of variables, * common worth size represented as an integer, * request methodology, * model of protocol, * order of headers, * common headers and their values, * presence of non-ASCII characters, * payload entropy represented as an integer, * payload size represented as an integer. * mode 2: * URI size represented as an integer, * variety of directories, * common listing size represented as an integer, * extension of the requested file, * common worth size represented as a float, * request methodology, * model of protocol, * order of headers, * common headers and their values, * presence of non-ASCII characters, * payload entropy represented as an integer, * payload size represented as a float. * mode 3: * URI size represented as an integer, * common listing size represented as an integer, * extension of the requested file, * common worth size represented as an integer, * order of headers. * mode 4: * URI size represented as a float, * variety of directories, * common listing size represented as a float, * extension of the requested file, * variable size represented as a float, * common worth size represented as a float, * request methodology, * model of protocol, * order of headers, * common headers and their values, * presence of non-ASCII characters, * payload entropy represented as a float, * payload size represented as a float.



1...3,7783,7793,780...3,808Page 3,779 of 3,808

ABOUT US

Welcome to CodeSanitize, your number one source for all things coding and technology. We’re dedicated to providing you the very best of software development tutorials, tips, and resources, with a focus on clarity, practical examples, and up-to-date content.

© Copyright 2024 - codesanitize.com. All rights reserved