Thesis (Ph.D.)--Murdoch University, 2005. / Thesis submitted to the Division of Science and Engineering. Includes bibliographical references (leaves 185-209)

Title from PDF of title page (University of Missouri--Columbia, viewed on February 24, 2010). The entire thesis text is included in the research.pdf file; the official abstract appears in the short.pdf file; a non-technical public abstract appears in the public.pdf file. Dissertation advisor: Dr. Johann Bruhn. Vita. Includes bibliographical references.

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior / Fungi represent an extremely important group of organisms in terrestrial ecosystems. Among their several important ecological roles, is the mutualistic association with plant roots, forming different types of mycorrhiza. Most studies carried out so far focused on epigeous ectomycorrhizal fungi, which occur above ground. On the other hand, below ground, hypogeous ectomycorrhizal fungi, are still poorly studied. This research aimed to study the diversity of hypogeous ectomycorrhizal fungi (Basidiomycetes) collected in Eucalyptus spp. plantations in the Central Region of Rio Grande do Sul, Brazil, based on morphological and molecular characters. Samples were taken between May 2009 and July 2010. A total of five species belonging to three families were identified. The material was analyzed to determine the morphological and molecular characters. Among the species identified are: Chondrogaster pachysporus Maire, Descomyces albus (Berk.) Bougher & Castellano, Hysterangium affine Massee & Rodway in Massee, Hysterangium inflatum Rodway and Setchelliogaster tenuipes (Setch.) Pouzar. Additionally a second species of Chondrogaster sp. was collected. However, no identity was determined for this species. Furthermore, it is believed it represents a new undescribed species to science. Among the species studied, Descomyces albus is reported for the first time in the State of Rio Grande do Sul. Hysterangium affine and H. inflatum are newly recorded species from Brazil while Chondrogaster pachysporus is recorded for the first in South America. / Os fungos representam um grupo de organismos extremamente importante nos ecossistemas terrestres. Entre as muitas funções por eles desempenhadas está a associação mutualística com as raízes dos vegetais, formando diferentes tipos de micorrizas. A maioria dos estudos realizados até o momento está principalmente focada nos fungos ectomicorrízicos epígeos, os quais ocorrem acima do solo. Por outro lado, os fungos ectomicorrízicos hipógeos, que vivem abaixo da superfície do solo, são ainda pouco estudados. A presente pesquisa tem como objetivo estudar a diversidade de fungos ectomicorrízicos hipógeos (Basidiomycetes) coletados em plantações de Eucalyptus spp. na Região Central do Rio Grande do Sul, Brasil, com base em características morfológicas e moleculares. O período de coleta dos fungos foi de maio de 2009 a julho de 2010. Um total de cinco espécies pertencentes a três famílias foram identificadas. Este material foi analisado para verificar suas características morfológicas e moleculares. Dentre as espécies identificadas estão: Chondrogaster pachysporus Maire, Descomyces albus (Berk.) Bougher & Castellano, Hysterangium affine Massee & Rodway in Massee, Hysterangium inflatum Rodway e Setchelliogaster tenuipes (Setch.) Pouzar. Adicionalmente identificou-se uma segunda espécie de Chondrogaster sp. porém não se chegou a uma espécie conhecida, acreditando tratar-se de uma espécie ainda desconhecida para a ciência. Dentre as espécies estudadas, destacam-se a Descomyces albus que é citada pela primeira vez para o Estado do Rio Grande do Sul, Hysterangium affine e H. inflatum que têm sua ocorrência registrada pela primeira vez no Brasil, além de Chondrogaster packysporus citado pela primeira vez para a América do Sul.

Prototype pollution is a vulnerability in JavaScript and other prototype-based languages that allows malicious actors to inject a property into an object’s prototype. The injected property can subsequently trigger gadgets - source code sections that use the properties in sensitive locations. Gadgets can lead to various exploits, including denial-of-service, data exfiltration, and arbitrary code execution (ACE). Current research focuses primarily on the detection of pollution, while only a few discuss gadget detection. Those that do either propose detection solutions for browser-side applications or selected frameworks. This thesis aims to answer how prototype pollution affects modern server-side applications built on the Node.js framework. We propose a system that can automatically detect potential prototype pollution gadgets in Node.js applications. We utilize dynamic taint tracking to find flows from polluted prototypes to exploitable functions. Our system consists of multiple distinct runs. A first run analyzes a program without changing the control-flow to avoid premature termination through exceptions and program crashes. In subsequent runs, the system selectively changes conditionals to increase coverage. Based on our methodology, we implement Dasty, a performant dynamic taint analysis for prototype pollution gadgets built on NodeProf and the Truffle Instrumentation Framework. Dasty can automatically analyze third-party packages by utilizing their test suites. We use our implementation to analyze the 5000 most depended upon npm packages and verify the resulting flows systematically, focusing on ACE and similar high-profile vulnerabilities. Through the analysis, we identify 16 new gadgets in packages used by thousands of applications. Our results suggest that prototype pollution can lead to serious security issues in many modern applications. / Prototype pollution är en sårbarhet i JavaScript och andra prototypbaserade språk som tillåter skadliga aktörer att injicera en egenskap i ett objekts prototype. Den prototype som blivit komprometterad kan därefter utlösa gadgets - delar av kod som använder egenskaperna på känsliga positioner. Gadgets kan leda till olika exploiteringar, inklusive denial-of-service, dataexfiltrering och arbitrary code execution (ACE). Aktuell forskning fokuserar främst på detektion av prototype pollution, medan endast ett fåtal diskuterar detektion av gadgets. De som gör det föreslår antingen detekteringslösningar för applikationer på webbläsarnivå eller enskilda ramverk. Detta examensarbete syftar till att svara på hur prototype pollution påverkar moderna applikationer på serversidan byggda med ramverket Node.js. Vi föreslår ett system som automatiskt kan upptäcka potentiella prototype pollution gadgets i Node.js-applikationer. Vi använder dynamic taint tracking för att hitta flöden från injicerade prototyper till exploateringsbara funktioner. Vårt system består av flera distinkta körningar. En första körning analyserar ett program utan att ändra kontrollflödet för att undvika för tidig terminering p.g.a. exceptions och programkrascher. I efterföljande körningar ändrar systemet selektivt villkoren för att öka täckningen. Baserat på vår metodik implementerar vi Dasty, en snabb dynamic taint analysis för prototype pollution gadgets byggda på NodeProf och Truffle Instrumentation Framework. Dasty kan automatiskt analysera tredjepartspaket genom att använda deras testramverk. Vi använder vår implementering för att analysera de 5000 mest npm-beroende paketen och verifiera de resulterande flödena systematiskt, med fokus på ACE och liknande högprofilerade sårbarheter. Genom analysen identifierar vi 16 nya gadgets i paket som används av tusentals applikationer. Våra resultat tyder på att prototype pollution kan leda till allvarliga säkerhetsproblem i många moderna applikationer.

Tuber aestivum is an ectomycorrhizal ascomycete with underground fruit bodies. It is an economically important species, but has been regarded as endangered in Sweden. My inventory has increased the number of reported localities from 3 to 31. It has long been debated whether T. aestivum and T. uncinatum are conspecific or not, so a clarification would help conservation biology and cultivation. My study included 117 fruit bodies of both taxa from 8 countries. The phylogenetic (ITS) and microscopic analyses showed that the two taxa were synonyms and that the spore reticulum height, used to separate the taxa, is not diagnostic. T. aestivum was clearly different from T. mesentericum, which I reported new to Sweden. The Gotland T. aestivum population was genetically distinct (RAPD) from other European specimens. The genetic variation suggested sexual reproduction. The habitat of 18 T. aestivum sites on Gotland were analysed and compared with data from France. No striking functional differences in soil chemistry were found, so a possible T. aestivum ecotype on Gotland would rather be an adaptation to the colder and drier climate. Selecting local T. aestivum inoculum for truffle orchards in Northern Europe could be important for successful truffle production. In 1999, 10 experimental truffle orchards with a total of 240 oak and hazel seedlings were established on Gotland, and as a result of this project 3000 commercial oak seedlings were planted in 2000-2001. In 2004, T. aestivum mycorrhiza was still present in all of the 22 orchards studied on Gotland, some in soils different from natural habitats. In addition, the project has also generated a truffle cultivation association, a truffle company, truffle dog breeding and export of T. aestivum to France.

Řada programovacích jazyků byla schopna zvýšit svoji rychlost výměnou běhových systémů stavěných na míru za obecné platformy, které pro optimalizaci používají just-in-time překlad, jako jsou GraalVM nebo RPython. V této práci vyhodnocuji, zda je použití takovýchto platforem vhodné i pro jazyky se závislymi typy nebo důkazovými systémy. Tato práce představuje koncepty -kalkulu a teorie typů potřebné pro úvod do závislých typů s relevantními algoritmy, specifikuje malý závisle typovaný jazyk založený na $\lambda\Pi$ kalkulu, a prezentuje dva interpretery tohoto jazyka. Tyto interpretery jsou psané v jazyce Kotlin, první je jednoduchý, psaný ve funkcionálním stylu a druhý používá platformu GraalVM a Truffle. GraalVM je platforma založená na virtuálním stroji Javy (JVM), která přidává just-in-time překladač založený na částečném vyhodnocení (partial evaluation) a Truffle je knihovna pro tvorbu programovacích jazyků využívající tento překladač. Závěr práce vyhodnocuje běhové charakteristiky těchto interpreterů na různých zátěžových testech.Závěry práce jsou ale silně negativní. Vliv JIT překladu není znatelný ani přes snahu optimalizovat běžné algoritmy z teorie typů, které jsou zjevně nevhodné pro platformu JVM. Práce končí návrhy několika navazujících projektů, které by lépe využily možnosti Truffle a které by byly vhodnější pro implementaci závisle typovaných jazyků.