ChaiTime: a system for rapid creation of portable next-generation telephony services using third-party software components

AbstractAn exploited vulnerability in a single software component of healthcare technology can affect patient care. The risk of including third-party software components in healthcare technologies can be managed, in part, by leveraging a software bill of materials (SBOM). Analogous to an ingredients list on food packaging, an SBOM is a list of all included software components. SBOMs provide a transparency mechanism for securing software product supply chains by enabling faster identification and remediation of vulnerabilities, towards the goal of reducing the feasibility of attacks. SBOMs have the potential to benefit all supply chain stakeholders of medical technologies without significantly increasing software production costs. Increasing transparency unlocks and enables trustworthy, resilient, and safer healthcare technologies for all.

Download Full-text

ViennaNGS: A toolbox for building efficient next- generation sequencing analysis pipelines

F1000Research ◽

10.12688/f1000research.6157.2 ◽

2015 ◽

Vol 4 ◽

pp. 50 ◽

Cited By ~ 7

Author(s):

Michael T. Wolfinger ◽

Jörg Fallmann ◽

Florian Eggenhofer ◽

Fabian Amman

Keyword(s):

Next Generation Sequencing ◽

Sequence Motif ◽

Software Components ◽

Sequencing Analysis ◽

Next Generation ◽

File Formats ◽

Next Generation Sequencing Analysis ◽

Next Generation Sequencing Ngs ◽

Ngs Data ◽

Generation Sequencing

Recent achievements in next-generation sequencing (NGS) technologies lead to a high demand for reuseable software components to easily compile customized analysis workflows for big genomics data. We present ViennaNGS, an integrated collection of Perl modules focused on building efficient pipelines for NGS data processing. It comes with functionality for extracting and converting features from common NGS file formats, computation and evaluation of read mapping statistics, as well as normalization of RNA abundance. Moreover, ViennaNGS provides software components for identification and characterization of splice junctions from RNA-seq data, parsing and condensing sequence motif data, automated construction of Assembly and Track Hubs for the UCSC genome browser, as well as wrapper routines for a set of commonly used NGS command line tools.

Download Full-text

ViennaNGS: A toolbox for building efficient next- generation sequencing analysis pipelines

F1000Research ◽

10.12688/f1000research.6157.1 ◽

2015 ◽

Vol 4 ◽

pp. 50 ◽

Cited By ~ 20

Author(s):

Michael T. Wolfinger ◽

Jörg Fallmann ◽

Florian Eggenhofer ◽

Fabian Amman

Keyword(s):

Next Generation Sequencing ◽

Sequence Motif ◽

Software Components ◽

Sequencing Analysis ◽

Next Generation ◽

File Formats ◽

Next Generation Sequencing Analysis ◽

Next Generation Sequencing Ngs ◽

Ngs Data ◽

Generation Sequencing

Recent achievements in next-generation sequencing (NGS) technologies lead to a high demand for reuseable software components to easily compile customized analysis workflows for big genomics data. We present ViennaNGS, an integrated collection of Perl modules focused on building efficient pipelines for NGS data processing. It comes with functionality for extracting and converting features from common NGS file formats, computation and evaluation of read mapping statistics, as well as normalization of RNA abundance. Moreover, ViennaNGS provides software components for identification and characterization of splice junctions from RNA-seq data, parsing and condensing sequence motif data, automated construction of Assembly and Track Hubs for the UCSC genome browser, as well as wrapper routines for a set of commonly used NGS command line tools.

Download Full-text

Building the Next Generation of Aerospace Data Processing Systems by Reusing Existing Software Components

Aerospace Technologies Advancements ◽

10.5772/6940 ◽

2010 ◽

Author(s):

James J. ◽

Robert R. ◽

Shahin Samadi

Keyword(s):

Data Processing ◽

Software Components ◽

Next Generation

Download Full-text

Software Component Certification: A Component Quality Model

10.5753/sbqs.2006.15630 ◽

2006 ◽

Author(s):

Alexandre Alvaro ◽

Silvio Lemos Meira

Keyword(s):

Software Component ◽

Third Party ◽

Software Components ◽

Quality Model ◽

Component Selection ◽

Formal Case ◽

Technical Issues ◽

Component Quality

Component-based software development is becoming more generalized, representing a considerable market for the software industry. However, several technical issues remain unsolved before the software components industry reaches the maturity as other software industries. Problems such as component selection and the uncertain quality of third-party developed components bring new challenges to the software engineering community. In contrast, software component certification is still immature and much research is needed in order to create well-defined standards for certification. This paper introduces a component quality model, based upon consistent and well-defined quality characteristics, and describes a formal case study that was used in order to analyze the viability of the model usage.

Download Full-text

A PC-Based Open Architecture Controller: Design, Implementation, and Operation

10.1115/imece1999-0751 ◽

1999 ◽

Author(s):

Louis A. Marchetti ◽

Paul K. Wright

Keyword(s):

Personal Computer ◽

Controller Design ◽

Low Cost ◽

Building Blocks ◽

Third Party ◽

Open Architecture ◽

Software Components ◽

Machining Center ◽

Open Architecture Controller ◽

High Level

Abstract This paper reports the implementation of an open architecture controller on a 3-axis machining center. This new controller, called MOSAIC-PC, takes advantage of readily available, off the shelf components, and the flexibility and low cost of the personal computer. While commercial products have been used as the building blocks for MOSAIC-PC, the overall architecture is novel. Specifically, high level CAD curves and patches, such as NURBS, can be incorporated at the machine level and sensor based machining is integrated in real-time. A description of the hardware and software components is given and the ease of integrating third party components is described. Finally the functionality of MOSAIC-PC is demonstrated.

Download Full-text

On the Security of Practical Mail User Agents against Cache Side-Channel Attacks

Applied Sciences ◽

10.3390/app10113770 ◽

2020 ◽

Vol 10 (11) ◽

pp. 3770

Author(s):

Hodong Kim ◽

Hyundo Yoon ◽

Youngjoo Shin ◽

Junbeom Hur

Keyword(s):

Third Party ◽

Side Channel ◽

Software Components ◽

Side Channel Attack ◽

Side Channel Attacks ◽

User Agent ◽

Root Cause ◽

Private Key ◽

The Third ◽

And Control

Mail user agent (MUA) programs provide an integrated interface for email services. Many MUAs support email encryption functionality to ensure the confidentiality of emails. In practice, they encrypt the content of an email using email encryption standards such as OpenPGP or S/MIME, mostly implemented using GnuPG. Despite their widespread deployment, there has been insufficient research on their software structure and the security dependencies among the software components of MUA programs. In order to understand the security implications of the structures and analyze any possible vulnerabilities of MUA programs, we investigated a number of MUAs that support email encryption. As a result, we found severe vulnerabilities in a number of MUAs that allow cache side-channel attacks in virtualized desktop environments. Our analysis reveals that the root cause originates from the lack of verification and control over the third-party cryptographic libraries that they adopt. In order to demonstrate this, we implemented a cache side-channel attack on RSA in GnuPG and then conducted an evaluation of the vulnerability of 13 MUAs that support email encryption in Ubuntu 14.04, 16.04 and 18.04. Based on our experiment, we found that 10 of these MUA programs (representing approximately 77% of existing MUA programs) allow the installation of a vulnerable version of GnuPG, even when the latest version of GnuPG, which is secure against most cache side-channel attacks, is in use. In order to substantiate the importance of the vulnerability we discovered, we conducted a FLUSH+RELOAD attack on these MUA programs and demonstrated that the attack restored 92% of the bits of the 2048-bit RSA private key when the recipients read a single encrypted email.

Download Full-text

Toward the Next Generation of Research on Mediation an Third-Party Intervention

Negotiation Journal ◽

10.1111/j.1571-9979.1996.tb00100.x ◽

1996 ◽

Vol 12 (3) ◽

pp. 271-274

Author(s):

Antony Wanis St. John

Keyword(s):

Third Party ◽

Next Generation ◽

Third Party Intervention

Download Full-text

Electronic Resources and Next-Generation Public Library Catalogs

Open Source Technology ◽

10.4018/978-1-4666-7230-7.ch091 ◽

2015 ◽

pp. 1820-1834

Author(s):

Tracy L. McPeck

Keyword(s):

Open Source ◽

User Experience ◽

Public Libraries ◽

Public Library ◽

The Other ◽

Third Party ◽

Next Generation ◽

Electronic Resources ◽

Library Catalogs

This case study examines the user experience of six public library catalogs (OPACs) in terms of the next-generation characteristics identified by library literature. One open source Integrated Library System (ILS), Evergreen, was compared to one proprietary system, Polaris. One library used its respective ILS alone, while the other libraries' catalogs used a third-party discovery layer in conjunction with the ILS. The purpose of this study is to compare open source versus proprietary ILSs and discovery layers in terms of their next-generation characteristics with particular attention to electronic resources, namely e-books. Of the six libraries compared, the two libraries that used the proprietary add-on BiblioCommons featured the most advanced next-generation catalog characteristics. The two ILSs that did not use any added layers offered the fewest next-generation traits. The catalogs of public libraries vary greatly in their offerings, but add-ons, such as BiblioCommons, enhance the user experience and the retrievability of electronic resources.

Download Full-text