Comparison of Network Intrusion Detection Performance Using Feature Representation

P. 463-475Intrusion detection is essential for the security of the components of any network. For that reason, several strategies can be used in Intrusion Detection Systems (IDS) to identify the increasing attempts to gain unauthorized access with malicious purposes including those base on machine learning. Anomaly detection has been applied successfully to numerous domains and might help to identify unknown attacks. However, there are existing issues such as high error rates or large dimensionality of data that make its deployment di cult in real-life scenarios. Representation learning allows to estimate new latent features of data in a low-dimensionality space. In this work, anomaly detection is performed using a previous feature learning stage in order to compare these methods for the detection of intrusions in network tra c. For that purpose, four di erent anomaly detection algorithms are applied to recent network datasets using two di erent feature learning methods such as principal component analysis and autoencoders. Several evaluation metrics such as accuracy, F1 score or ROC curves are used for comparing their performance. The experimental results show an improvement for two of the anomaly detection methods using autoencoder and no signi cant variations for the linear feature transformationS

Detection of Botulinum Neurotoxin Serotype B at Sub Mouse LD50 Levels by a Sandwich Immunoassay and Its Application to Toxin Detection in Milk

Botulinum neurotoxin (BoNT), the causative agent of botulism, a serious neuroparylatic disease, is produced by the anaerobic bacterium Clostridium botulinum and consists of a family of seven serotypes (A-H). We previously reported production of high-affinity monoclonal antibodies to BoNT serotype A.Recombinant peptide fragments of the light chain, the transmembrane and receptor-binding domains of the heavy chain of botulinum neurotoxin type B (BoNT/B) were expressed in Escherichia coli as GST-fusion proteins and purified. These proteins were used to immunize BALB/cJ mice for the generation of monoclonal antibodies (mAbs). Antibody-producing hybridomas were detected using either a direct binding ELISA binding to plate-immobilized BoNT/B, or with a capture-capture ELISA whereby the capacity of the antibody to capture BoNT/B from solution was tested. A total of five mAbs were selected, two of which bound the toxin light chain and three bound the receptor-binding domain of BoNT/B heavy chain. MAb MCS6-27 was identified via capture-capture ELISA and was the only mAb able to bind BoNT/B in solution under physiological conditions. MAbs F24-1, F26-16, F27-33 and F29-40 were identified via direct binding ELISA, and were able to capture BoNT/B in solution only in the presence of 0.5-0.9 mM sodium dodecyl sulphate (SDS). MAb MCS6-27 and an anti-BoNT/B polyclonal antibody were incorporated into a sandwich ELISA that did not require SDS.We report here the generation of monoclonal antibodies to serotype B and the subsequent development of a sensitive sandwich immunoassay. This immunoassay has a detection limit of 100 fg BoNT/B, fifty times more sensitive than the mouse bioassay detection limit of 5 pg BoNT/B. Additionally, this assay detected as little as 39 pg/mL of toxin in skim, 2% and whole milk

Differences in the Pathways of Proteins Unfolding Induced by Urea and Guanidine Hydrochloride: Molten Globule State and Aggregates

It was shown that at low concentrations guanidine hydrochloride (GdnHCl) can cause aggregation of proteins in partially folded state and that fluorescent dye 1-anilinonaphthalene-8-sulfonic acid (ANS) binds with these aggregates rather than with hydrophobic clusters on the surface of protein in molten globule state. That is why the increase in ANS fluorescence intensity is often recorded in the pathway of protein denaturation by GdnHCl, but not by urea. So what was previously believed to be the molten globule state in the pathway of protein denaturation by GdnHCl, in reality, for some proteins represents the aggregates of partially folded molecules

Observation and study of baryonic B decays: B -> D(*) p pbar, D(*) p pbar pi, and D(*) p pbar pi pi

We present a study of ten B-meson decays to a D(*), a proton-antiproton pair, and a system of up to two pions using BaBar's data set of 455x10^6 BBbar pairs. Four of the modes (B0bar -> D0 p anti-p, B0bar -> D*0 p anti-p, B0bar -> D+ p anti-p pi-, B0bar -> D*+ p anti-p pi-) are studied with improved statistics compared to previous measurements; six of the modes (B- -> D0 p anti-p pi-, B- -> D*0 p anti-p pi-, B0bar -> D0 p anti-p pi- pi+, B0bar -> D*0 p anti-p pi- pi+, B- -> D+ p anti-p pi- pi-, B- -> D*+ p anti-p pi- pi-) are first observations. The branching fractions for 3- and 5-body decays are suppressed compared to 4-body decays. Kinematic distributions for 3-body decays show non-overlapping threshold enhancements in m(p anti-p) and m(D(*)0 p) in the Dalitz plots. For 4-body decays, m(p pi-) mass projections show a narrow peak with mass and full width of (1497.4 +- 3.0 +- 0.9) MeV/c2, and (47 +- 12 +- 4) MeV/c2, respectively, where the first (second) errors are statistical (systematic). For 5-body decays, mass projections are similar to phase space expectations. All results are preliminary.Comment: 28 pages, 90 postscript figures, submitted to LP0

A search for the decay modes B+/- to h+/- tau l

We present a search for the lepton flavor violating decay modes B+/- to h+/- tau l (h= K,pi; l= e,mu) using the BaBar data sample, which corresponds to 472 million BBbar pairs. The search uses events where one B meson is fully reconstructed in one of several hadronic final states. Using the momenta of the reconstructed B, h, and l candidates, we are able to fully determine the tau four-momentum. The resulting tau candidate mass is our main discriminant against combinatorial background. We see no evidence for B+/- to h+/- tau l decays and set a 90% confidence level upper limit on each branching fraction at the level of a few times 10^-5.Comment: 15 pages, 7 figures, submitted to Phys. Rev.

Search for rare quark-annihilation decays, B --> Ds(*) Phi

We report on searches for B- --> Ds- Phi and B- --> Ds*- Phi. In the context of the Standard Model, these decays are expected to be highly suppressed since they proceed through annihilation of the b and u-bar quarks in the B- meson. Our results are based on 234 million Upsilon(4S) --> B Bbar decays collected with the BABAR detector at SLAC. We find no evidence for these decays, and we set Bayesian 90% confidence level upper limits on the branching fractions BF(B- --> Ds- Phi) Ds*- Phi)<1.2x10^(-5). These results are consistent with Standard Model expectations.Comment: 8 pages, 3 postscript figues, submitted to Phys. Rev. D (Rapid Communications

Measurement of CP-violation asymmetries in D0 to Ks pi+ pi-

We report a measurement of time-integrated CP-violation asymmetries in the resonant substructure of the three-body decay D0 to Ks pi+ pi- using CDF II data corresponding to 6.0 invfb of integrated luminosity from Tevatron ppbar collisions at sqrt(s) = 1.96 TeV. The charm mesons used in this analysis come from D*+(2010) to D0 pi+ and D*-(2010) to D0bar pi-, where the production flavor of the charm meson is determined by the charge of the accompanying pion. We apply a Dalitz-amplitude analysis for the description of the dynamic decay structure and use two complementary approaches, namely a full Dalitz-plot fit employing the isobar model for the contributing resonances and a model-independent bin-by-bin comparison of the D0 and D0bar Dalitz plots. We find no CP-violation effects and measure an asymmetry of ACP = (-0.05 +- 0.57 (stat) +- 0.54 (syst))% for the overall integrated CP-violation asymmetry, consistent with the standard model prediction.Comment: 15 page

OneG: A Computational Tool for Predicting Cryptic Intermediates in the Unfolding Kinetics of Proteins under Native Conditions

Understanding the relationships between conformations of proteins and their stabilities is one key to address the protein folding paradigm. The free energy change (ΔG) of unfolding reactions of proteins is measured by traditional denaturation methods and native hydrogen-deuterium (H/D) exchange methods. However, the free energy of unfolding (ΔGU) and the free energy of exchange (ΔGHX) of proteins are not in good agreement, though the experimental conditions of both methods are well matching to each other. The anomaly is due to any one or combinations of the following reasons: (i) effects of cis-trans proline isomerisation under equilibrium unfolding reactions of proteins (ii) inappropriateness in accounting the baselines of melting curves (iii) presence of cryptic intermediates, which may elude the melting curve analysis and (iv) existence of higher energy metastable states in the H/D exchange reactions of proteins. Herein, we have developed a novel computational tool, OneG, which accounts the discrepancy between ΔGU and ΔGHX of proteins by systematically accounting all the four factors mentioned above. The program is fully automated and requires four inputs: three-dimensional structures of proteins, ΔGU, ΔGU* and residue-specific ΔGHX determined under EX2-exchange conditions in the absence of denaturants. The robustness of the program has been validated using experimental data available for proteins such as cytochrome c and apocytochrome b562 and the data analyses revealed that cryptic intermediates of the proteins detected by the experimental methods and the cryptic intermediates predicted by the OneG for those proteins were in good agreement. Furthermore, using OneG, we have shown possible existence of cryptic intermediates and metastable states in the unfolding pathways of cardiotoxin III and cobrotoxin, respectively, which are homologous proteins. The unique application of the program to map the unfolding pathways of proteins under native conditions have been brought into fore and the program is publicly available at http://sblab.sastra.edu/oneg.htm

Biclustering via optimal re-ordering of data matrices in systems biology: rigorous methods and comparative studies

<p>Abstract</p> <p>Background</p> <p>The analysis of large-scale data sets via clustering techniques is utilized in a number of applications. Biclustering in particular has emerged as an important problem in the analysis of gene expression data since genes may only jointly respond over a subset of conditions. Biclustering algorithms also have important applications in sample classification where, for instance, tissue samples can be classified as cancerous or normal. Many of the methods for biclustering, and clustering algorithms in general, utilize simplified models or heuristic strategies for identifying the "best" grouping of elements according to some metric and cluster definition and thus result in suboptimal clusters.</p> <p>Results</p> <p>In this article, we present a rigorous approach to biclustering, OREO, which is based on the Optimal RE-Ordering of the rows and columns of a data matrix so as to globally minimize the dissimilarity metric. The physical permutations of the rows and columns of the data matrix can be modeled as either a network flow problem or a traveling salesman problem. Cluster boundaries in one dimension are used to partition and re-order the other dimensions of the corresponding submatrices to generate biclusters. The performance of OREO is tested on (a) metabolite concentration data, (b) an image reconstruction matrix, (c) synthetic data with implanted biclusters, and gene expression data for (d) colon cancer data, (e) breast cancer data, as well as (f) yeast segregant data to validate the ability of the proposed method and compare it to existing biclustering and clustering methods.</p> <p>Conclusion</p> <p>We demonstrate that this rigorous global optimization method for biclustering produces clusters with more insightful groupings of similar entities, such as genes or metabolites sharing common functions, than other clustering and biclustering algorithms and can reconstruct underlying fundamental patterns in the data for several distinct sets of data matrices arising in important biological applications.</p

Dual mechanism of daunorubicin-induced cell death in both sensitive and MDR-resistant HL-60 cells

Exposure of some acute myeloid leukaemia (AML) cells to daunorubicin leads to rapid cell death, whereas other AML cells show natural drug resistance. This has been attributed to expression of functional P-glycoprotein resulting in reduced drug accumulation. However, it has also been proposed that P-glycoprotein-expressing multidrug-resistant (MDR) cells are inherently defective for apoptosis. To distinguish between these different possibilities, we have compared the cell death process in a human AML cell line (HL-60) with a MDR subline (HL-60/Vinc) at doses that yield either similar intracellular daunorubicin concentrations or comparable cytotoxicity. Adjustment of the dose to obtain the same intracellular drug accumulation in the two cell lines did not result in equal cytotoxicity, suggesting the presence of additional resistance mechanisms in the P-glycoprotein-expressing HL-60/Vinc cells. However, at equitoxic doses, similar cell death pathways were observed. In HL-60 cells, daunorubicin induced rapid apoptosis at 0.5–1 μM and delayed mitotic cell death at 0.1 μM. These concentrations are within the clinical dose range. Similarly, HL-60/Vinc cells underwent apoptosis at 50–100 μM daunorubicin and mitotic cell death at 10 μM. These results show, for the first time, that anthracyclines can induce cell death by a dual mechanism in both sensitive and MDR cells. Our results also show that not only the cytotoxicity, but also the kinetics and mechanism of cell death, are dose dependent. Interestingly, regrowth was observed only in association with delayed cell death and the formation of enlarged, often polyploid, cells with micronucleation, suggesting that morphological criteria may be useful to evaluate treatment efficacy in patients with myeloid leukaemias. © 1999 Cancer Research Campaig