RADIS: Remote Attestation of Distributed IoT Services

Remote attestation is a security technique through which a remote trusted party (i.e., Verifier) checks the trustworthiness of a potentially untrusted device (i.e., Prover). In the Internet of Things (IoT) systems, the existing remote attestation protocols propose various approaches to detect the modified software and physical tampering attacks. However, in an interoperable IoT system, in which IoT devices interact autonomously among themselves, an additional problem arises: a compromised IoT service can influence the genuine operation of other invoked service, without changing the software of the latter. In this paper, we propose a protocol for Remote Attestation of Distributed IoT Services (RADIS), which verifies the trustworthiness of distributed IoT services. Instead of attesting the complete memory content of the entire interoperable IoT devices, RADIS attests only the services involved in performing a certain functionality. RADIS relies on a control-flow attestation technique to detect IoT services that perform an unexpected operation due to their interactions with a malicious remote service. Our experiments show the effectiveness of our protocol in validating the integrity status of a distributed IoT service.Comment: 21 pages, 10 figures, 2 table

Know Your Enemy: Stealth Configuration-Information Gathering in SDN

Software Defined Networking (SDN) is a network architecture that aims at providing high flexibility through the separation of the network logic from the forwarding functions. The industry has already widely adopted SDN and researchers thoroughly analyzed its vulnerabilities, proposing solutions to improve its security. However, we believe important security aspects of SDN are still left uninvestigated. In this paper, we raise the concern of the possibility for an attacker to obtain knowledge about an SDN network. In particular, we introduce a novel attack, named Know Your Enemy (KYE), by means of which an attacker can gather vital information about the configuration of the network. This information ranges from the configuration of security tools, such as attack detection thresholds for network scanning, to general network policies like QoS and network virtualization. Additionally, we show that an attacker can perform a KYE attack in a stealthy fashion, i.e., without the risk of being detected. We underline that the vulnerability exploited by the KYE attack is proper of SDN and is not present in legacy networks. To address the KYE attack, we also propose an active defense countermeasure based on network flows obfuscation, which considerably increases the complexity for a successful attack. Our solution offers provable security guarantees that can be tailored to the needs of the specific network under consideratio

On the estimation of the Lorenz curve under complex sampling designs

This paper focuses on the estimation of the concentration curve of a finite population, when data are collected according to a complex sampling design with different inclusion probabilities. A (design-based) Hajek type estimator for the Lorenz curve is proposed, and its asymptotic properties are studied. Then, a resampling scheme able to approximate the asymptotic law of the Lorenz curve estimator is constructed. Applications are given to the construction of (i) a confidence band for the Lorenz curve, (ii) confidence intervals for the Gini concentration ratio, and (iii) a test for Lorenz dominance. The merits of the proposed resampling procedure are evaluated through a simulation study

Effect of mulching and plant density on out of season organic potato growth, yield and quality.

Research was carried out on potato (Solanum tuberosum L., cv. Spunta) growing in the fi eld in the Campania region (southern Italy) in 2007 and 2008, adopting organic farming practices, in order to evaluate the effects of two mulching treatments (black biodegradable fi lm and bare soil) and six plant densities (12.5, 10.0, 8.3, 7.1, 6.2 and, as a control, 5.3 plants per m2) on growth, yield and quality of “new potato” winter-spring and summer-autumn crops. Only in the case of the summer-autumn crop cycle, mulching resulted in a higher yield, plant dry matter and leaf area compared with the bare soil control, while in both crop cycles this latter treatment induced a delay in harvest. The winter-spring cycle gave a higher production of 40-70 mm tubers, while the summer-autumn cycle resulted in a higher vitamin C content. For the winter-spring crop cycle, the plant density of 8.3 plants·m-2 resulted in the highest yield for food-use tubers, whereas the highest production of seed tubers was obtained with a density of 12.5 plants·m-2. The plant density of 8.3 plants·m-2 also resulted in the highest plant dry matter and leaf area. For the summer-autumn crop cycle, the 10 plants·m-2 density gave the highest production of 40-70 mm calibre tubers, as well as the highest plant dry matter and leaf area. In this cycle, the 6.3 plants·m-2 density resulted in the highest production of 70-80 mm calibre tubers. In terms of cost effectiveness, the choice of biodegradable mulching could save the expense of manual weed control and, in the case of the summer-autumn crop cycle, it is also associated with a higher yield. Overall, tuber yield increased with plant density but the fi nal production was also affected by the crop cycle. This may depend on the different environmental conditions and duration which characterized each cultural cycle and, therefore, affected the vegetative development of organic new potatoes

Association between antibodies to carbamylated proteins and subclinical atherosclerosis in rheumatoid arthritis patients

BACKGROUND: Rheumatoid arthritis (RA) patients carry a high risk of cardiovascular morbidity and mortality. The excess of cardiovascular disease cannot be entirely explained by traditional risk factors and the immune system contributes to the development of atherosclerosis. Moreover, post-translational modifications such as citrullination and carbamylation have been linked to inflammation and atherosclerosis. Anti-carbamylated proteins antibodies (anti-CarP) are a new subset of autoantibodies identified in RA patients. This study aimed to investigate a possible association between anti-CarP and subclinical atherosclerosis in RA patients. METHODS: We enrolled RA patients and normal healthy controls (NHS) without known cardiovascular risk factors or heart disease. Cardiovascular risk was assessed using the Modified Systemic Coronary Risk Evaluation (mSCORE). Anti-CarP were investigated by a solid phase "home-made" ELISA. Anti-citrullinated protein antibodies (ACPA) and Rheumatoid Factor (RF) were investigated by ELISA assays. Subclinical atherosclerosis was evaluated by brachial artery Flow-Mediated Dilatation (FMD) and Carotid Intima-Media Thickness (c-IMT) while arterial stiffness by Ankle-Brachial Index (ABI) and Cardio-Ankle Vascular Index (CAVI). RESULTS: We enrolled 50 RA patients (34 F and 16 M, mean age 58.4 ± 13.1 years, mean disease duration 127 ± 96.7 months) and 30 age and sex matched NHS. According to the mSCORE, 58% of patients had a low risk, 32% a moderate and 8% a high risk for cardiovascular disease. FMD was significantly lower in RA patients than in NHS (5.6 ± 3.2 vs 10.7 ± 8.1%; p < 0.004) and CAVIs significantly higher in a RA patients compared to NHS (left CAVI 8.9 ± 1.7 vs 8.1 ± 1.5; p < 0.04 for and right CAVI 8.8 ± 1.6 vs 8.0 ± 1.4; p < 0.04 for the). ABI and c-IMT did not differ between the two populations. The multivariate regression analysis showed a significant association of anti-CarP antibodies with FMD, left and right CAVI and both c-IMT (r = 1.6 and p = 0.05; r = 1.7 and p = 0.04; r = 2.9 and p = 0.05; r = 1.5 and p = 0.03; r = 1.1 and p = 0.03 respectively). CONCLUSIONS: This study confirms that RA patients, without evidence of cardiovascular disease or traditional risk factors, have an impaired endothelial function. Moreover, we found an association with anti-CarP antibodies suggesting a possible contribution of these autoantibodies to endothelial dysfunction, the earliest stage of atherosclerosis. Besides ultrasound assessment, anti-CarP should be assessed in RA patients and considered an additional cardiovascular risk factor

Metacognition as a predictor of improvements in personality disorders

Personality Disorders (PDs) are particularly hard to treat and treatment drop-out rates are high. Several authors have agreed that psychotherapy is more successful when it focuses on the core of personality pathology. For this reason, therapists dealing with PDs need to understand the psychopathological variables that characterize this pathology and exactly what contributes to maintaining psychopathological processes. Moreover, several authors have noted that one key problem that characterizes all PDs is an impairment in understanding mental states - here termed metacognition - which could also be responsible for therapy failures. Unfortunately, a limited number of studies have investigated the role of mentalization in the process of change during psychotherapy. In this paper, we assume that poor metacognition corresponds to a core element of the general pathology of personality, impacts a series of clinical variables, generates symptoms and interpersonal problems, and causes treatment to be slower and less effective. We explored whether changes in metacognition predicted an improvement among different psychopathological variables characterizing PDs; 193 outpatients were treated at the Third Center of Cognitive Psychotherapy in Rome, Italy, and followed a structured path tailored for the different psychopathological variables that emerged from a comprehensive psychodiagnostic assessment that considered patients' symptoms, metacognitive abilities, interpersonal relationships, personality psychopathology, and global functioning. The measurements were repeated after a year of treatment. The results showed that changes in metacognitive abilities predicted improvements in the analyzed variable

Bootstrap approximations for Bayesian analysis of Geo/G/1 discrete-time queueing models

In this paper we consider a Bayesian nonparametric approach to the analysis of discrete-time queueing models. The main motivation consists in applications to telecommunications, and in particular to asynchronous transfer mode (ATM) systems. Attention is focused on the posterior distribution of the overflow rate. Since the exact distribution of such a quantity is not available in a closed form, an approximation based on "proper" Bayesian bootstrap is proposed, and its properties are studied. Some possible alternatives to proper Bayesian bootstrap are also discussed. Finally, an application to real data is provided. (C) 2002 Elsevier B.V. All rights reserved