DOCSLIB.ORG

Reference Manual

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Reference Manual 010 Editor - Reference Manual v3.2 Reference Manual www.sweetscape.com Copyright © 2003-2011 SweetScape Software 1 Copyright © 2003 - 2011 © 2003-2011 SweetScape Software Charlottetown, PEI, Canada No part of this book may be used or reproduced in any form or by any means, electronic or otherwise, without the prior written permission of SweetScape Software. While every precaution has been taken in the preparation of this book, the publisher and the author assume no responsibility for errors or omissions. Neither is any liability assumed for damages resulting from the use of the information or instructions contained herein. It is further stated that the publisher and author are not responsible for any damage or loss to your data or your equipment that results directly or indirectly from your use of this book. 010 Editor - Reference Manual Table of Contents . What is 010 Editor? 6 . Getting Started with 010 Editor . Introduction to Number Systems 8 . Introduction to Byte Ordering 10 . Introduction to the Data Engine 11 . What's New in Version 3.2? 12 . Notes for Users of 010 Editor v2.1 14 . Using 010 Editor - Basic Editing . Introduction to Editing 17 . Opening Files 18 . Using File Tabs 19 . Using the Text Editor 21 . Using the Hex Editor 24 . Working with Interfaces 27 . Selecting Bytes 29 . Using the Clipboard 30 . Status Bar 32 . Saving Files 34 . Using the Startup Page 35 . Using 010 Editor - Advanced Editing . Editing Drives 37 . Editing Processes 40 . Using the Workspace 43 . Using the Inspector 45 . Using Bookmarks 48 . Using Find 50 . Using Replace 53 . Using Find in Files 55 . Using Replace in Files 57 . Using Goto 59 . Using Paste Special 61 . Selecting a Range 62 . Inserting or Overwriting Bytes 63 . Inserting or Overwriting Files 65 . Setting the File Size 66 . File Properties 67 . Importing/Exporting Files 70 . Command Line Parameters 73 . Using Tool Bars 78 . Printing Documents . Printing 79 . Print Preview 80 . Page Setup 81 . Using 010 Editor - Tools . Calculator 83 . Comparing Files 85 . Hex Operations 88 Copyright © 2003-2011 SweetScape Software 3 010 Editor - Reference Manual . Converting Files 90 . Histograms 92 . Check Sum/Hash Algorithms 94 . Base Converter 97 . Using 010 Editor - Templates and Scripts . Introduction to Templates and Scripts 98 . Running Templates and Scripts 100 . Working with Template Results 102 . Writing Scripts . Script Basics 104 . Expressions 105 . Declaring Script Variables 107 . Data Types, Typedefs, and Enums 108 . Arrays and Strings 110 . Control Statements 112 . Functions 115 . Special Keywords 117 . Preprocessor 120 . Includes 123 . Script Limitations 124 . Writing Templates . Template Basics 125 . Declaring Template Variables 127 . Structs and Unions 131 . Arrays, Duplicates, and Optimizing 134 . Bitfields 136 . Editing with Scripts 138 . Custom Variables 139 . On-Demand Structures 141 . Template Limitations 143 . Function Reference . Interface Functions 144 . I/O Functions 157 . String Functions 163 . Math Functions 170 . Tool Functions 172 . Menu Reference . File Menu 180 . Edit Menu 182 . Search Menu 184 . View Menu 186 . Scripts Menu 189 . Templates Menu 190 . Tools Menu 191 . Window Menu 192 . Help Menu 193 . Options Reference . General Options 194 . Editor Options 196 . Text Editor Options 198 . Hex Editor Options 200 . File Interface Options 202 . Color Options 204 . Font Options 207 . Backup Options 209 . Memory Options 210 4 Copyright © 2003-2011 SweetScape Software 010 Editor - Reference Manual . Keyboard Options 211 . Program Options 212 . Highlight Options 214 . Compiling Options 216 . Script Options 218 . Template Options 220 . Importing Options 222 . How to Buy 010 Editor 223 . How to Get Support 226 . License Agreement 227 . Release Notes 229 Copyright © 2003-2011 SweetScape Software 5 010 Editor - Reference Manual What is 010 Editor? 010 Editor is a professional text editor and hex editor designed to quickly and easily edit the contents of any file on your computer. This software can edit simple text files including Unicode files, batch files, C/C++ source code, etc. but where 010 Editor excels is in editing binary files. A binary file is a file that is computer-readable but not human- readable (a binary file will appear as garbled characters if opened in a text editor). A hex editor is a program that allows you to view and edit the individual bytes of binary files and advanced hex editors including 010 Editor also allow you to edit the bytes of hard drives, floppy drives, memory keys, flash drives, CD-ROMs, processes, etc. Here are just some of the benefits of using 010 Editor: . View and edit any binary file on your hard drive (unlimited file size) and text files including Unicode files, C/C++ source code, etc. Unique Binary Templates technology allows you to understand any binary file format. Find and fix problems with hard drives, floppy drives, memory keys, flash drives, CD-ROMs, processes, etc. Analyze and edit text and binary data with powerful tools including Find, Replace, Find in Files, Replace in Files, Binary Comparisons, Checksum/Hash Algorithms, Histograms, etc. Powerful scripting engine allows automation of many tasks (language is very similar to C). Import and export your binary data in a number of different formats. 010 Editor's unique Binary Templates technology allows you to understand the bytes of a binary file by presenting you with the file parsed into an easy-to-use structure. For an example of how Binary Templates work, open any ZIP, BMP, or WAV file on your computer and a Binary Template will automatically be run on the file. Binary Templates are easy to write and look similar to C/C++ structures except they are very powerful and can be configured to parse any binary format. A repository of Templates that other people have written is available online. For more information on Binary Templates see Introduction to Templates and Scripts. The hex editor built into 010 Editor can load files of any size instantly, and features unlimited undo and redo on all editing operations. The editor can even copy or paste huge blocks of data between files instantly. Try 010 Editor and we're sure you'll agree that 010 Editor is the most powerful hex editor available today! For more information on how 010 Editor works see: 6 Copyright © 2003-2011 SweetScape Software 010 Editor - Reference Manual . Introduction to Number Systems . Introduction to Byte Ordering . Introduction to the Data Engine To begin editing files see: . Introduction to Editing For information on how Binary Templates and Scripts can be used to edit files see: . Introduction to Templates and Scripts 010 Editor can be downloaded and used free for 30 days. After that time, the program must be registered. For more information see: . How to Buy 010 Editor If you have any questions or problems, information on contacting SweetScape Software can be found here: . How to Get Support Thank you and we hope you enjoy using 010 Editor! Related Topics: Introduction to Templates and Scripts Introduction to Number Systems Introduction to the Data Engine Introduction to Editing How to Buy 010 Editor How to Get Support Copyright © 2003-2011 SweetScape Software - www.sweetscape.com Copyright © 2003-2011 SweetScape Software 7 010 Editor - Reference Manual Introduction to Number Systems When editing raw hex data, 010 Editor uses a variety of different number systems including decimal, hexadecimal, octal, and binary. Each number system has a different 'base' that is used to convert from a set of digits to a numeric value. For example, the digits '246' can be converted to a number using base 10 by 2*102 + 4*10 + 6 = 246. In general, if the n digits of a number A are numbered where A0 is the right-most digit, A1 is the digit to the left and so on, then the value of a number of base B is calculated: n-1 n-2 An-1*B + An-2*B + ... + A1*B + A0 The following is a list of the 4 number systems used: . Decimal - Numbers are represented as base 10. The digits may be any number from '0' to '9'. For example, in decimal 153 = 1*102 + 5*101 + 3. Hexadecimal - Numbers are represented as base 16. All the decimal digits are used, plus the letters 'A', 'B', 'C', 'D', 'E', and 'F' are used to represent the numbers 10 through 15. For example, in hexadecimal 3d7 = 3*162 + 13*161 + 7 = 983. This system is commonly referred to as Hex. Octal - Numbers are represented as base 8. Only the digits '0' through '7' are used ('8' or '9' is not allowed). For example, the number 2740 = 2*83 + 7*82 + 4*81 + 0 = 1504. Binary - Numbers are represented as base 2. Only the digits '0' or '1' can be used. For example, the number 10110 = 1*24 + 0*23 + 1*22 + 1*s1 + 0 = 22. Bits and Bytes A digit of a binary number is also called a 'bit'. When 8 bits are grouped together, the result is called a 'byte'. Since a byte has 8 binary digits, it can represent any value from 0 up to 255 inclusive. Every file stored on a disk is stored as a set of bytes. Note that when 4 bits are grouped together (base 2), this can also be represented as a single hexadecimal digit (base 16). For example, binary 0101 = '5' hexadecimal, or binary 1111 = 'F' hexadecimal. 010 Editor is designed specifically for editing the individual bytes of a file. When a file is opened for editing, a Hex Editor Window shows the representation of each byte as a hexadecimal number and as a character (see Introduction to Editing for more information). Entering Numbers in Text Fields Almost anywhere a number is entered in 010 Editor (in most text fields, the Inspector, etc.), the program supports input in a number of different formats. Usually, the format of the number is assumed to be decimal (some fields have a Decimal and Hex toggle beside them - clicking the Hex toggle will set the default to be hex).
Load more

Recommended publications
  • X86 Disassembly Exploring the Relationship Between C, X86 Assembly, and Machine Code
    x86 Disassembly Exploring the relationship between C, x86 Assembly, and Machine Code PDF generated using the open source mwlib toolkit. See http://code.pediapress.com/ for more information. PDF generated at: Sat, 07 Sep 2013 05:04:59 UTC Contents Articles Wikibooks:Collections Preface 1 X86 Disassembly/Cover 3 X86 Disassembly/Introduction 3 Tools 5 X86 Disassembly/Assemblers and Compilers 5 X86 Disassembly/Disassemblers and Decompilers 10 X86 Disassembly/Disassembly Examples 18 X86 Disassembly/Analysis Tools 19 Platforms 28 X86 Disassembly/Microsoft Windows 28 X86 Disassembly/Windows Executable Files 33 X86 Disassembly/Linux 48 X86 Disassembly/Linux Executable Files 50 Code Patterns 51 X86 Disassembly/The Stack 51 X86 Disassembly/Functions and Stack Frames 53 X86 Disassembly/Functions and Stack Frame Examples 57 X86 Disassembly/Calling Conventions 58 X86 Disassembly/Calling Convention Examples 64 X86 Disassembly/Branches 74 X86 Disassembly/Branch Examples 83 X86 Disassembly/Loops 87 X86 Disassembly/Loop Examples 92 Data Patterns 95 X86 Disassembly/Variables 95 X86 Disassembly/Variable Examples 101 X86 Disassembly/Data Structures 103 X86 Disassembly/Objects and Classes 108 X86 Disassembly/Floating Point Numbers 112 X86 Disassembly/Floating Point Examples 119 Difficulties 121 X86 Disassembly/Code Optimization 121 X86 Disassembly/Optimization Examples 124 X86 Disassembly/Code Obfuscation 132 X86 Disassembly/Debugger Detectors 137 Resources and Licensing 139 X86 Disassembly/Resources 139 X86 Disassembly/Licensing 141 X86 Disassembly/Manual of Style 141 References Article Sources and Contributors 142 Image Sources, Licenses and Contributors 143 Article Licenses License 144 Wikibooks:Collections Preface 1 Wikibooks:Collections Preface This book was created by volunteers at Wikibooks (http:/ / en.
    [Show full text]
  • Flare-‐On 4: Challenge 10 Solution – Shell.Php
    Flare-On 4: Challenge 10 Solution – shell.php Challenge Author: Dominik Weber (@Invalid_handle) Summary Modelled after a real-world web shell, this crypto level is a PHP page containing an encrypted HTML stage2 with 3 encrypted JavaScripts. The HTTP POST variable flag is the key. This level is intended to be a two-stage password attack. The first stage gets the MD5 of the password and decrypt stage2, then the second stage derives the flag with a known-plaintext attack. Description: Figure 1 depicts the essential contents of shell.php <?php $o__o_ = base64_decode('<Base64 block omitted>'); $o_o = isset($_POST['o_o']) ? $_POST['o_o'] : ""; $o_o = md5($o_o) . substr(MD5(strrev($o_o)), 0, strlen($o_o)); for ($o___o = 0; $o___o < 2268; $o___o++) { $o__o_[$o___o] = chr((ord($o__o_[$o___o]) ^ ord($o_o[$o___o])) % 256); $o_o .= $o__o_[$o___o]; } if (MD5($o__o_) == '43a141570e0c926e0e3673216a4dd73d') { if (isset($_POST['o_o'])) @setcookie('o_o', $_POST['o_o']); $o___o = create_function('', $o__o_); unset($o_o, $o__o_); $o___o(); } else { echo '<form method="post" action="shell.php"><input type="text" name="o_o" value=" "/><input type="submit" value="&gt;"/></form>'; } ?> Figure 1: Contents of shell.php The HTTP post variable, o_o is the flag for the level. This string is then hashed with MD5 and the textual hash is the first 16 bytes of a decryption XOR key. The remainder of the key bytes is the MD5 of the reverse string array, truncated to password length size. The resulting XOR key is password length dependent and consists of characters 0-9 and a-f. This key decrypts the Base64 blob into a PHP function that gets executed. Looking at the code, we can see that the resulting plain text of this FireEye, Inc., 1440 McCarthy Blvd., Milpitas, CA 95035 | +1 408.321.6300 | +1 877.FIREEYE (347.3393) | [email protected] | www.FireEye.com 1 function has 2268 bytes.
    [Show full text]
  • PLNY TEXT (1.347Mb)
    ZADÁNÍ BAKALÁŘSKÉ PRÁCE I. OSOBNÍ A STUDIJNÍ ÚDAJE Příjmení: Sanchez Jméno: Luis Osobní číslo: 435714 Fakulta/ústav: Fakulta informačních technologií Zadávající katedra/ústav: Katedra softwarového inženýrství Studijní program: Informatika Studijní obor: Softwarové inženýrství II. ÚDAJE K BAKALÁŘSKÉ PRÁCI Název bakalářské práce: Multiplatformní HEX editor Název bakalářské práce anglicky: Multiplatform HEX Editor Pokyny pro vypracování: Mezi dostupnými editory binárních souborů (takzvanými HEX editory) je nedostatek těch, které jsou moderní, volně šiřitelné a multiplatformní. Proveďte analýzu současného stavu na poli takových editorů a na jejím základě vytvořte editor nový, který poskytne základní funkce, jež takové editory běžně nabízejí, a který bude zároveň splňovat výše zmíněné požadavky. Editor by měl běžet alespoň na platformách MS Windows, Linux a Mac OS. K implementaci použijte jazyk D a grafické rozhraní GTK+. Proveďte analýzu, návrh, implementaci a testování, jak je běžné ve vývojovém cyklu v softwarovém inženýrství. Seznam doporučené literatury: Dodá vedoucí práce. Jméno a pracoviště vedoucí(ho) bakalářské práce: Mgr. Martin Podloucký, katedra softwarového inženýrství FIT Jméno a pracoviště druhé(ho) vedoucí(ho) nebo konzultanta(ky) bakalářské práce: Datum zadání bakalářské práce: 05.12.2016 Termín odevzdání bakalářské práce: _____________ Platnost zadání bakalářské práce: _____________ ___________________________ ___________________________ ___________________________ Podpis vedoucí(ho) práce Podpis vedoucí(ho) ústavu/katedry
    [Show full text]
  • Practical-Malware-Analysis Index.Pdf
    INDEX Symbols and Numbers administrator privileges, for malware launchers, 254 ! (bang symbol), 305 Adobe Reader -- operation, 112 CVE-2010-0188 critical % operation, 112 vulnerability, 424 % symbol, 423 overflow in, 705 | (pipe symbol), in Snort, 304 ADS (Alternate Data Streams) ++ operation, 112 010 Editor, 468 feature, 139 32-bit applications, WOW64 and, 448 Advanced Encryption Standard 32-bit rotate-right-additive hash, 418 (AES), 618 64-bit malware, 441–449 decrypting, 625–626 clues to functionality, 448 advapi32.dll, 17 labs, 450–451 imports from, 20, 480, 481 solutions, 723–732 obtaining handle to, 237 advertisements, pop-up, 560–561 A AES (Advanced Encryption Standard), 618 A, at end of Windows function decrypting, 625–626 name, 17 Agobot, 376 absolute addresses, 443 air-gapped networks, 29 vs. relative addresses, in OllyDbg, _alloca_probe function, 522 184–185 alphabetic encoding, shellcode abstraction levels, in x86 disassembly, decoder with, 697 66–67 Alternate Data Streams (ADS) accept function, 143, 144, 454 feature, 139 access token, 246 ALU (arithmetic logic unit), 68 accuracy, vs. expediency, 304 AMD64 architecture, 441 active window, logging, 239 “Analysis of the Intel Pentium’s ADD encoding algorithm, 276 Ability to Support a Secure add instruction, 74, 349 Virtual Machine Monitor” AddCodeXref function (IDC), 342 (Robin and Irvine), 373 address space, loading executable AND logical operator, in x86 into another process’s, 595 architecture, 75 address space layout randomization anti-debugging, 351–366 (ASLR), 184 checks,
    [Show full text]
  • Exploiting Rich Content Riley Hassell Isec Partners, Inc
    iSEC Partners, Inc. Exploiting Rich Content Riley Hassell iSEC Partners, Inc. is a As rich Internet application (RIA) technologies flourish in the mar- information security firm ketplace security professionals begun to wonder what impact RIA that specializes in appli- will have on security landscape. I decided to perform an assessment cation, network, host, of one of the most widely deployed technologies, Adobe Flash, and and product security. For in the process discovered several issues that could be used to com- more information about promise systems with Adobe Flash installed. During the audit a iSEC, please refer to the large group of issues was uncovered that initially appeared harm- Appendix A or less. Later in this paper I will describe how attackers can exploit www.isecpartners.com these perceived low risk issues to have a much deeper impact. Flash Overview . Testing Methodology . Manual Review . Reverse Engineering . Automated Testing . Test Results Flash Overview Adobe Flash is one of the most widely deployed software technolo- gies to date. The (Millward Brown) estimates 99% of internet- connected computers are Flash enabled. Flash delivers a wide va- riety of rich multimedia feature to its clients including: rich web based application, video streaming, gaming, and Figure 1 Flash per Internet enabled desktops. 1 The SWF version 92 file format consists of 64 tag types that are parsed sequentially through the file. Tags have a TLV (type, length, value) structure. Some tags contain embedded data such as bitmaps, sounds, fonts, and even video. Several tags support subtypes of var- ious depths. One such tag is DoAction. This tag contains compiled ActionScript 2.0 byte codes.
    [Show full text]
  • Positive-Research-2016-Eng.Pdf
    03 05 07 09 11 13 15 CONTENTS 17 19 21 23 Editorial Note. Insecure Security and the Key Trends of 2016 ..............................................................................2 25 27 TOP 15 Leaks of 2015 .....................................................................................................................................................................3 29 Vulnerabilities in Corporate Information Systems in 2015: Worse than Expected ...................................6 31 33 Network Perimeter Life in Pictures .....................................................................................................................................10 35 Intelligent Transport Systems ................................................................................................................................................16 37 39 Cybersecurity at Sea ....................................................................................................................................................................19 41 Web Application Vulnerabilities in 2015 .........................................................................................................................23 43 45 Web Application Firewalls: Ways to Protect Your Site .............................................................................................27 47 Financial Sector: Key Vulnerabilities in 2015 .................................................................................................................31 49 51 Developing Secure Online
    [Show full text]
  • X86 Disassembly.Pdf
    x86 Disassembly Exploring the relationship between C, x86 Assembly, and Machine Code PDF generated using the open source mwlib toolkit. See http://code.pediapress.com/ for more information. PDF generated at: Fri, 15 Oct 2010 20:47:37 UTC Contents Articles Wikibooks:Collections Preface 1 X86 Disassembly/Cover 2 X86 Disassembly/Introduction 3 Tools 5 X86 Disassembly/Assemblers and Compilers 5 X86 Disassembly/Disassemblers and Decompilers 10 X86 Disassembly/Disassembly Examples 15 X86 Disassembly/Analysis Tools 16 Platforms 24 X86 Disassembly/Microsoft Windows 24 X86 Disassembly/Windows Executable Files 29 X86 Disassembly/Linux 43 X86 Disassembly/Linux Executable Files 45 Code Patterns 46 X86 Disassembly/The Stack 46 X86 Disassembly/Functions and Stack Frames 48 X86 Disassembly/Functions and Stack Frame Examples 52 X86 Disassembly/Calling Conventions 53 X86 Disassembly/Calling Convention Examples 59 X86 Disassembly/Branches 69 X86 Disassembly/Branch Examples 78 X86 Disassembly/Loops 82 X86 Disassembly/Loop Examples 86 Data Patterns 90 X86 Disassembly/Variables 90 X86 Disassembly/Variable Examples 96 X86 Disassembly/Data Structures 98 X86 Disassembly/Objects and Classes 103 X86 Disassembly/Floating Point Numbers 107 X86 Disassembly/Floating Point Examples 114 Difficulties 116 X86 Disassembly/Code Optimization 116 X86 Disassembly/Optimization Examples 119 X86 Disassembly/Code Obfuscation 126 X86 Disassembly/Debugger Detectors 131 Resources and Licensing 133 X86 Disassembly/Resources 133 X86 Disassembly/Licensing 135 X86 Disassembly/Manual of Style 135 References Article Sources and Contributors 136 Image Sources, Licenses and Contributors 137 Article Licenses License 138 Wikibooks:Collections Preface 1 Wikibooks:Collections Preface This book was created by volunteers at Wikibooks (http:/ / en.
    [Show full text]
  • COMPARATIVE FILE STRUCTURE ANALYSIS of VIDEO FILES SENT and RECEIVED VIA WHATSAPP by SIMON JEROME VICTOR B.F.A. University of Th
    COMPARATIVE FILE STRUCTURE ANALYSIS OF VIDEO FILES SENT AND RECEIVED VIA WHATSAPP by SIMON JEROME VICTOR B.F.A. University of the West Indies, 2016 A thesis submitted to the Faculty of the Graduate School of the University of Colorado in partial fulfillment of the requirements for the degree of Master of Science Recording Arts Program 2020 This thesis for the Master of Science degree by Simon Jerome Victor has been approved for the Recording Arts Program by Catalin Grigoras, Chair Cole Whitecotton Jeffrey Smith Date: December 12, 2020 ii Victor, Simon Jerome (M.S., Recording Arts Program) Comparative File Structure Analysis of Video Files Sent and Received via WhatsApp Thesis directed by Associate Professor Catalin Grigoras ABSTRACT WhatsApp is a popular cross-platform messaging service that is used by a sizable fraction of the world’s population for passing along all manner of information. This paper compares the differences introduced in video files sent, and then received via WhatsApp. It utilizes videos created in native video recording applications, and where possible, files recorded in the WhatsApp application using the recording feature. The information gathered in this research project will be useful in understanding changes to the file structure of video files sent through WhatsApp, which aids in the process of video authentication for forensic purposes. It will also explore the differences in available acquisition methods of the files sent through WhatsApp to preserve as much data as possible for forensic purposes. To achieve this the study will look at metadata, binary data, file structure, and any other relevant observations.
    [Show full text]
  • ODTTF ? O ODTTF Is an Embedded Font File Type Used in Microsoft Office XML Format
    BREAKING FONT PARSERS CELIL UNUVER – BEKIR KARUL • Celil UNUVER @celilunuver o Founder and Researcher @SignalSEC Ltd. o Organizer of NOPcon Hacker Conference o Vuln Research, RE, Fuzzing and SCADA o Speaker at CODE BLUE, CONFidence 2010, Swiss Cyber Storm, DefCamp • Bekir KARUL @bek_phys o Researcher @SignalSEC Ltd. o Windows Internals, Malware, RE o bekirkarul.com 21 Ekim 2015 signalsec.com 2 I. Introduction to Fonts II. TTF Structure III. Kırlangıç TTF Fuzzer IV. Generating test cases with fuzzed TTF V. Fuzzing Results VI. Questions 21 Ekim 2015 signalsec.com 3 • Applications can use four different kinds of GDI font technologies to display and print text 1. Raster 2. Vector 3. TrueType 4. Microsoft OpenType • The GDI(Graphis Device Interface ) is part of the core operating system component responsible for representing graphical objects and transmitting them to output devices such as monitors and printers. • The differences between these fonts reflect the way that the glyph for each character or symbol is stored in the respective font-resource file 21 Ekim 2015 signalsec.com 4 Raster : a glyph is a bitmap that the system uses to draw a single character in the font. Vector : a glyph is a collection of line endpoints that define the line segments that the system uses to draw a character in the font. TrueType & OpenType : a glyph is a collection of line and curve commands as well as a collection of hints. http://msdn.microsoft.com/en‐us/library/dd162893(v=vs.85).aspx 21 Ekim 2015 signalsec.com 5 • A TrueType font file contains data in table format, that comprises an outline font • And the raster device uses combinations of data from different tables to render the glyph data in the font.
    [Show full text]
  • Master's Thesis
    MASTER'S THESIS How to Improve Security in Distance Studies An analysis of online examination at a Swedish university Pontus Palmenäs 2014 Master of Arts (60 credits) Master of Science in Information Security Luleå University of Technology Department of Computer Science, Electrical and Space Engineering Abstract Distance studies or distance learning has greatly grown in popularity over the past years, partly due to the growing interest in Massive Open Online Courses (MOOCs). As distance studies tend to have online exams, with the benefit of lower cost for the universities and more flexibility for students, there is a need for attention for online exam security. Online exam security is one part process and part technical solutions, e.g. PC lockdown or spyware programs. This study has shown that both the process and the spyware at an undisclosed Swedish university (University X) has security vulnerabilities and may result in cheating remaining undetected. The proposed prototype in this study handles these security vulnerabilities but needs further development to function as a production ready program. There is also a need for more research on a common path for online exam security as the current studies are proposing many different ways. Finally, spyware programs for legitimate purposes need to find the balance between privacy and cheating prevention, to provide trust and confidence to students interested in distance learning. Keywords: online exam, distance studies, spyware, cheating control, secure exam management. Foreword This magister thesis is written as completion to the first year of the master program Information Security at Luleå Tekniska Universitet (LTU). It was written mainly during the time between March and May 2014.
    [Show full text]
  • FILE STRUCTURE ANALYSIS of MEDIA FILES SENT and RECEIVED OVER WHATSAPP by HENRY LUKEN RISEMBERG B.F.A., University of Cincinnati
    FILE STRUCTURE ANALYSIS OF MEDIA FILES SENT AND RECEIVED OVER WHATSAPP by HENRY LUKEN RISEMBERG B.F.A., University of Cincinnati, 2017 A thesis submitted to the Faculty of the Graduate School of the University of Colorado in partial fulfillment of the requirements for the degree of Master of Science Recording Arts Program 2020 This thesis for the Master of Science degree by Henry Luken Risemberg has been approved for the Recording Arts Program by Catalin Grigoras, Chair Jeff M. Smith Cole Whitecotton Date: May 16, 2020 ii Risemberg, Henry Luken (M.S., Recording Arts Program) File Structure Analysis of Media Files Sent and Received Over WhatsApp Thesis directed by Associate Professor Catalin Grigoras ABSTRACT This research study explores the effects of sending and downloading image and audio files through the WhatsApp platform. A better understanding of how images and audio are affected by WhatsApp is necessary because of its popularity and the prevalence of digital images and audio as evidence in digital forensic investigations. WhatsApp is a cross-platform communication service that allows the sending of media files and is one of the most popular services of its kind used worldwide. This application can be downloaded for use on mobile phones, iOS and Windows computers. There is also a website application available. The research done here will help investigators understand the process of different uploading and downloading techniques through different devices and the effects these methods have on file structure and metadata. An examination of recompression by WhatsApp, and how the WhatsApp software behaves when interacting with original images and audio will be conducted.
    [Show full text]
  • List of Applications Updated in ARL #2591
    List of applications updated in ARL #2591 ApplicationName Publisher .NET AppHost Pack 5.0 Microsoft .NET Core Runtime 1 Microsoft .NET Core Runtime 2.1 Microsoft .NET Core Runtime 3.0 Preview Microsoft .NET Core Runtime 3.1 Microsoft .NET Core Runtime 5.0 Microsoft .NET Core Runtime 5.0 Preview Microsoft .NET Core SDK 2 Microsoft .NET Core SDK 3.0 Microsoft .NET Core SDK 3.1 Microsoft .NET Core Templates 2.1 Preview Microsoft .NET Core Templates 3.1 Preview Microsoft .NET Core Templates 5.0 Microsoft .NET Core Windows Server Hosting 1.0 Microsoft .NET Core Windows Server Hosting 2.1 Microsoft .NET Core Windows Server Hosting 3.0 Preview Microsoft .NET Core Windows Server Hosting 3.1 Microsoft .NET Core Windows Server Hosting 5.0 Microsoft .Net Framework (Unknown Component) Microsoft .NET Framework 1.1 Microsoft .NET Framework 4.6 Microsoft .NET Framework Language Pack 3.0 Microsoft .NET Framework Language Pack 3.5 Microsoft .NET Framework Multi-Targeting Pack 5.0 Microsoft .NET Framework Multi-Targeting Pack 5.0 Preview Microsoft .NET Host 5.0 Microsoft .NET Reflector Visual Studio Extension 10.3 Red Gate Software .NET Runtime 5.0 Preview Microsoft .NET Runtime 5.0 rc2 Microsoft .NET SDK 5.0 Microsoft .NET SDK 5.0 rc2 Microsoft .NET Toolset 5.0 Microsoft µVision 4 KEIL 010 Editor 10.0 SweetScape Software 010 Editor 9.0 SweetScape Software 1042-S Pro 2020 Professional 1099 Pro 365 16.0 Microsoft 3D Visual Enterprise Viewer 9 SAP 3DEXPERIENCE 2016 Dassault Systemes 3DEXPERIENCE 2017 Dassault Systemes 3DEXPERIENCE 2019 Dassault Systemes
    [Show full text]