Prototype pollution is a vulnerability in JavaScript and other prototype-based languages that allows malicious actors to inject a property into an object’s prototype. The injected property can subsequently trigger gadgets - source code sections that use the properties in sensitive locations. Gadgets can lead to various exploits, including denial-of-service, data exfiltration, and arbitrary code execution (ACE). Current research focuses primarily on the detection of pollution, while only a few discuss gadget detection. Those that do either propose detection solutions for browser-side applications or selected frameworks. This thesis aims to answer how prototype pollution affects modern server-side applications built on the Node.js framework. We propose a system that can automatically detect potential prototype pollution gadgets in Node.js applications. We utilize dynamic taint tracking to find flows from polluted prototypes to exploitable functions. Our system consists of multiple distinct runs. A first run analyzes a program without changing the control-flow to avoid premature termination through exceptions and program crashes. In subsequent runs, the system selectively changes conditionals to increase coverage. Based on our methodology, we implement Dasty, a performant dynamic taint analysis for prototype pollution gadgets built on NodeProf and the Truffle Instrumentation Framework. Dasty can automatically analyze third-party packages by utilizing their test suites. We use our implementation to analyze the 5000 most depended upon npm packages and verify the resulting flows systematically, focusing on ACE and similar high-profile vulnerabilities. Through the analysis, we identify 16 new gadgets in packages used by thousands of applications. Our results suggest that prototype pollution can lead to serious security issues in many modern applications. / Prototype pollution är en sårbarhet i JavaScript och andra prototypbaserade språk som tillåter skadliga aktörer att injicera en egenskap i ett objekts prototype. Den prototype som blivit komprometterad kan därefter utlösa gadgets - delar av kod som använder egenskaperna på känsliga positioner. Gadgets kan leda till olika exploiteringar, inklusive denial-of-service, dataexfiltrering och arbitrary code execution (ACE). Aktuell forskning fokuserar främst på detektion av prototype pollution, medan endast ett fåtal diskuterar detektion av gadgets. De som gör det föreslår antingen detekteringslösningar för applikationer på webbläsarnivå eller enskilda ramverk. Detta examensarbete syftar till att svara på hur prototype pollution påverkar moderna applikationer på serversidan byggda med ramverket Node.js. Vi föreslår ett system som automatiskt kan upptäcka potentiella prototype pollution gadgets i Node.js-applikationer. Vi använder dynamic taint tracking för att hitta flöden från injicerade prototyper till exploateringsbara funktioner. Vårt system består av flera distinkta körningar. En första körning analyserar ett program utan att ändra kontrollflödet för att undvika för tidig terminering p.g.a. exceptions och programkrascher. I efterföljande körningar ändrar systemet selektivt villkoren för att öka täckningen. Baserat på vår metodik implementerar vi Dasty, en snabb dynamic taint analysis för prototype pollution gadgets byggda på NodeProf och Truffle Instrumentation Framework. Dasty kan automatiskt analysera tredjepartspaket genom att använda deras testramverk. Vi använder vår implementering för att analysera de 5000 mest npm-beroende paketen och verifiera de resulterande flödena systematiskt, med fokus på ACE och liknande högprofilerade sårbarheter. Genom analysen identifierar vi 16 nya gadgets i paket som används av tusentals applikationer. Våra resultat tyder på att prototype pollution kan leda till allvarliga säkerhetsproblem i många moderna applikationer.

In today´s interconnected world, our lives are inextricably linked with technology, a trend set to continue. Robots, pivotal to global industry and commerce, have made an significant impact since their inception. This report proposes an approach to enhance robotic functionality by integrating a 3D camera into a gripper´s case. This integration improves robotic functions and refines how robots perform tasks, mirroring human-like capabilities. This paper outlines the design and creation process of the prototype, including considerations for its development. Extensive research was conducted on current grippers, 3D vision systems, and available 3D cameras. Moreover, the design process using CAD tools is shown and explained in detail, followed by the creation of a physical prototype through 3D printing. The study underscores the significance of such advancements in shaping the future of robotics. It emphasizes that the innovative design of these products will play a crucial role in advancing automation technology.

Wireless communication for biomedical equipment is rapidly improving with the invention of new technologies. Due to the absence of cables, wireless technology is a growing area of interest for biomedical applications. As technology advances, many gadgets are becoming smaller and more portable. Often, there is a need for these medical devices to transfer data in real-time. However, it is critical to recognize the special obstacles connected with the creation of novel products that need in-body to off-body communication. Unlike standard wireless communication scenarios, such as Wi-Fi or cellular networks, where data passes through the air; in-body to off-body communication occurs within or on the surface of the human body. Itis a significant technological challenge to provide dependable and secure communication inside the body’s dynamic and changing environment. The human body’s dielectric characteristics, attenuation, received power, transmitted power, and distance to the receiver must be considered when designing any wireless implantable device. In this thesis, we designed tests with a lossy medium that simulates the human body and a few test protocols that can facilitate the testing and development of wireless communications from in-body to off-body for a medical device intended to support pelvic muscle floor training. We designed the test protocols based on this application and safety requirements. These tests were then used to evaluate and compare two commercially available transceivers operating at 433MHz and 2.4 GHz.We created and implemented several experiments using the communication models. This thesis investigated the properties of a lossy medium in the context of electromagnetic signals in wireless communication. The tests included a study of connectivity, range, latency, and packet errors that occur during signal transmission across the medium. The findings indicate that BLE modules might be more favorable for future advances. The outcomes of this thesis can be utilized as a starting point for the future development of the intended application.BLE technology is distinctive largely by its low power consumption, which is critical for applications where energy efficiency is the main concern. Especially important in the context of IoT (Internet of Things) and wearable devices, where long-lasting battery life is required. Furthermore, BLE provides a more robust and standardized communication protocol, making it easy to integrate and compatible with a wide range of devices and platforms. While 433 MHz modules have advantages such as a longer range and simpler technology, BLE’s increased transmission rate capabilities and broad acceptance in current smartphones and tablets make it more adaptable for applications that require frequent data exchange and compatibility with consumer devices.

No description available.

People play games now more than ever before. While the digital gaming industry dominates the market, boardgaming has been living in its shadow. Board games offer a physical tangibility and a social experience that can be found in few digital games.How do we create a tool that further builds upon those strengths?The purpose of this study is to examine the possibility of developing a service that consists of an mobile application and board game events to promote social face-to-face interaction. Focus has been on the social face-to-face interaction in the context of a board game session. We have through the use of service prototyping and low-fi prototypes created a small-scale context in which we have conducted our research in.This study has been conducted with the use of observations of board game events and with the use of low-fi prototypes.The thesis treats theories and methods that have been used throughout this project.We can also find the documentation of our research data, read about the following design process of creating the service and results of usertesting.Finally in the conclusion we present the results of our research, our final design and suggestions on further development.Keywords:

Higher demands on database systems have lead to an increased popularity of certain database system types in some niche areas. One such niche area is graph networks, such as social networks or logistics networks. An analysis made on such networks often focus on complex relational patterns that sometimes can not be solved efficiently by traditional relational databases, which has lead to the infusion of some specialized non-relational database systems. Some of the database systems that have seen a surge in popularity in this area are graph database systems. This thesis presents a prototype of a logistics network-related service using a graph database management system called Neo4j, which currently is the most popular graph database management system in use. The logistics network covered by the service is based on existing data from PostNord, Sweden’s biggest provider of logistics solutions, and primarily focuses on customer support and business to business. By creating a prototype of the service this thesis strives to indicate some of the positive and negative aspects of a graph database system, as well as give an indication of how a service using a graph database system could be created. The results indicate that Neo4j is very intuitive and easy to use, which would make it optimal for prototyping and smaller systems, but due to the used evaluation method more research in this area would need to be carried out in order to confirm these conclusions. / Högre krav på databassystem har lett till en ökad popularitet för vissa databassystemstyper i några nischområden. Ett sådant nischområde är grafnätverk, såsomsociala nätverk eller logistiknätverk. Analyser på grafnätverk fokuserar ofta påkomplexa relationsmönster som ibland inte kan lösas effektivt av traditionella relationsdatabassystem, vilket har lett till att vissa specialiserade icke-relationella databassystem har blivit populära alternativ. Många av de populära databassystemen inom detta område är grafdatabassystem. Detta arbete presenterar en prototyp av en logistiknätverksrelaterad tjänst som använder sig av ett grafdatabashanteringssystem som heter Neo4j, vilket är det mest använda grafdatabashanteringssystemet. Logistiknätverket som täcks av tjänsten är baserad på existerande data från PostNord, Sveriges ledande leverantör av logistiklösningar, och fokuserar primärt på kundsupport och företagsrelaterad analys. Genom att skapa en prototyp av tjänsten strävar detta arbete efter att uppvisa vissa av de positiva och negativa aspekterna av ett grafdatabashanteringssystem samt att visa hur en tjänst kan skapas genom att använda ett grafdatabashanteringssystem. Resultaten indikerar att Neo4j är väldigt intuitivt och lättanvänt, vilket skulle göra den optimal för prototyping och mindre system, men på grund av den använda evalueringsmetoden så behöver mer forskning inom detta område utföras innan dessa slutsatser kan bekräftas.

<p>As a cost-effective, healthy, and environmentally friendly personal mode of transportation, electric bicycles (E-bikes) are gaining an increasing market share from conventional bicycles and automobiles. Considering the legal rules in Ontario, Canada, a 500W motor makes the E-bike more attractive for travelling use. At the same time, the simple structure, high torque and power density, as well as the low cost of the switched reluctance machine (SRM) makes it a strong candidate for E-bikes.</p> <p>In this thesis, a 3-phase, external-rotor SRM with 6 stator poles and 10 rotor poles is designed for E-bike. The design of an external rotor arrangement of the 6-10 SRM topology has not previously been reported, hence it offers a new contribution to the published works. The machine design is initiated by the output power equation and is followed by a comprehensive finite element analysis (FEA). The external-rotor arrangement is chosen to facilitate ease of integration into the wheel hub structure of a typical pedal bicycle. The increasing rotor poles yield improved torque ripple reduction than more conventional (i.e. 6-4, 12-8 etc.) SRM design, which is an essential feature for low speed rider comfort.</p> <p>A new torque ripple reduction control scheme is investigated. Although the comparison shows that the torque sharing function has more positive result than angular position control with regards to torque ripple, this is at the expense of higher losses. Detailed thermal analysis ensures this machine is suitable to require no additional cooling system. The final machine design is experimentally tested via a full system prototype. Results highlight some limitation of the 2-D FEA in terms of the winding inductance calculation. Here, the end winding introduce more influence on short thickness machine, which will reduce its output power. However, its power-speed curve shows that this prototype machine has very strong overload ability.</p> / Master of Applied Science (MASc)

This report outlines developing a mechanism for a relatively low in price, portable, and mechanical ventilator prototype designed to bridge the gap in ventilator access brought about the COVID-19 pandemic. The key goal is to create a portable and easy to use device which will be capable of providing constant and effective respiratory support in areas having limited resources. The ventilator uses the Oscillating Cylinder Mechanism (OCM), which makes the ventilation smoothly and continuously. This eliminates the need for the user to put maximum effort and the patient benefits. Different ideas about designs were being put forward, concentrating on the portability, functionality, reliability, safety, and effectiveness. The OCM was selected because of its ventilation parameter adjustment ability to accommodate patient-specific needs, thereby functioning in a variety of clinical settings. Although upfront complexity and cost are developed, long-term perks such as lower user fatigue and maintenance expenses compensate for the financial investment. The end design will help in the emergency medical care especially in demand emergency situations, in ambulances, and in intensive care.

The introduction of project-based learning into university engineering programs has been shown to positively benefit students that prefer a hands-on experience and give future employers assurance that recent graduates have the tools to handle real-world problems as opposed to theoretical situations. Enhancing the engineering self-efficacy of students, recent graduates and seasoned engineers is made possible through the solution of complex, open-ended problems typically found in engineering design. A high engineering self-efficacy, in turn, positively reflects a person's perception of their complex problem-solving capacity which is critical throughout the design process. The decision to either work virtually with a team or onsite with group members nearby may also further influence self-efficacy and, ultimately, the designer's success. This raises the question explored in this study: Will a design challenge impact engineering self-efficacy equally for online and in-person participants? Two groups engaged in a design challenge to develop a mechanism meant for drone applications, where one group designed and tested their solution in-person, while the other group sent design plans to a third-party for fabrication and testing. Participants filled out a prototype engineering self-efficacy scale before and after the challenge, revealing a significant difference between these two modalities. The small sample size is noted as the cause for inaccuracies and surprising findings. Guidelines for methodology implementation in a larger scale study are included. / Master of Science / In project-based learning courses, students work in groups to make a prototype or other solution to a stated problem, which are helpful for building student confidence in problem-solving, critical thinking and, especially, engineering skills. This confidence translates to believing that carrying out a specific task will lead to success with little-to-no feelings of fear or failure. This generally describes "self-efficacy," and it can apply to any profession. Traditionally, hands-on projects are done in person, where an exchange of ideas is clear and any problems can be handled immediately. However, with schools closed due to the COVID-19 pandemic, these courses had to shift online, leading some to believe that students would not receive the same level and quality of engineering education. Online learning has been around for over 30 years and studies show that students learn just as much, if not more and better, online than sitting in a classroom. Can the same be said for taking part in an engineering project over the internet? Two groups designed a prototype drone attachment, where members of one group worked side-by-side to build and test their solution, while members of the other group worked online and sent files and assembly instructions to a third party. Each participant also filled out a questionnaire before and after the challenge to track their engineering self-efficacy. The limited data led to the conclusion that there is a noticeable difference between the two project completion methods, most likely caused by a low number of participants. The lessons learned from this study were used to create guidelines for a larger-scale study.

Företaget Mips har utformat en teknik vilket ökar skyddet mot hjärnskador vid olyckor då det sker ett islag mot huvudet och hjälm används. Tekniken är ett utformat glidskikt mellan hjälmens yttre skal och användaren som minskar rotationsvåldet mot hjärnans nervtrådar i huvudet. Vid islag mot bakhuvudet hjälper däremot inte glidskiktet i den mån som önskas enligt Mips. Detta är på grund av att storleksjusteringen vid bakhuvudet för hjälmen agerar som en fast punkt för det annars roterande glidskiktet. Gruppen har därför undersökt alternativa lösningar och utformningar av glidskiktet för att öka den positiva effekten vid islag mot bakhuvudet. Gruppen har som mål att komma med flera lösningsförslag på utformning av glidskiktet för att undkomma den fasta punkten och integrera glidskikt med storleksjusteringen. Under projektet ska gruppen göra en förstudie av dagens lösningar och varför det finns ett problem idag. Förutom att göra en förstudie ska gruppen även tillverka fysiska prototyper och utföra funktionstester som påvisar en förbättring enligt uppdragsgivarens testmetod. De flesta av dagens lösningar för justering i höjdled av justersystemet använder sig av ett snäppförband. Gruppen har valt att använda ett standardiserat justersystem från uppdragsgivaren som konceptframtagningen kommer utgå från. Gruppen valde därefter att skapa tre olika prototyper som berör stiften. De tre olika innefattar ändringar av stiftens utformning, ta bort stiften och behålla stiftens ursprungliga utformning. Gruppen genomförde därefter tester enligt uppdragsgivarens testmetod för att komma fram till effekten av de olika koncepten. För att väga de olika idéerna mot varandra användes en beslutsmatris där olika relevanta parametrar värderas. Gruppen har med hjälp av beslutsmatrisen beslutat om rekommendationer för vidare arbete. De två lösningsförslag som gruppen rekommenderar vidare arbete med är idé 1 och idé 3 då de ses med störst potential enligt beslutsmatrisen. Båda de presenterade lösningsförslagen har olika potential beroende på förutsättningar. / The company Mips has developed a technology that enhances protection against brain injuries in accidents where there is an impact to the head while wearing a helmet. The technology consists of a designed low friction layer between the helmet's outer shell and the user, reducing the rotational force on the brain's nerve fibers inside the head. In cases of impacts to the back of the head, the low friction layer doesn't provide as much help as desired by Mips. This is because the size adjustment acts as a fixed point in the back of the head for the otherwise rotating low friction layer. Therefore, the group has investigated alternative solutions and designs of the low friction layer to enhance its effectiveness in impacts to the back of the head. The group aims to propose several design solutions for the low friction layer to avoid the fixed point and integrate it with the size adjustment. During the project, the group will conduct a preliminary study of current solutions and why there is a problem today. In addition to the preliminary study, the group will manufacture physical prototypes and perform functional tests demonstrating improvement according to the client's testing method. Most of today's solutions for height adjustment of the adjustment system use a snap-fit solution. The group has chosen to use a standardized adjustment system from the client as the basis for concept development. The group then decided to create three different prototypes concerning the pins. The three different prototypes include changes to the design of the pins, removing the pins, and retaining the original design of the pins. The group then conducted tests according to the client's testing method to determine the effectiveness of the different concepts. To weigh the different ideas against each other, a decision matrix was used where various relevant parameters were evaluated. With the help of the decision matrix, the group has decided on recommendations for further work. The two solution proposals that the group recommends for further work are idea 1 and idea 3 as they are seen to have the greatest potential according to the decision matrix. Both presented solution proposals have different potential depending on the conditions.