Why Current Statistical Approaches to Ransomware Detection Fail

The frequent use of basic statistical techniques to detect ransomware is a popular and intuitive strategy; statistical tests can be used to identify randomness, which in turn can indicate the presence of encryption and, by extension, a ransomware attack. However, common file formats such as images and compressed data can look random from the perspective of some of these tests. In this work, we investigate the current frequent use of statistical tests in the context of ransomware detection, primarily focusing on false positive rates. The main aim of our work is to show that the current over-dependence on simple statistical tests within anti-ransomware tools can cause serious issues with the reliability and consistency of ransomware detection in the form of frequent false classifications. We determined thresholds for five key statistics frequently used in detecting randomness, namely Shannon entropy, chi-square, arithmetic mean, Monte Carlo estimation for Pi and serial correlation coefficient. We obtained a large data set of 84,327 files comprising of images, compressed data and encrypted data. We then tested these thresholds (taken from a variety of previous publications in the literature where possible) against our dataset, showing that the rate of false positives is far beyond what could be considered acceptable. False positive rates were often above 50% and even above 90% on several occasions. False negative rates were also generally between 5% and 20%, numbers which are also far too high. As a direct result of these experiments, we determine that relying on these simple statistical approaches is not good enough to detect ransomware attacks consistently. We instead recommend the exploration of higher-order statistics such as skewness and kurtosis for future ransomware detection techniques

Housekeeping genes for quantitative expression studies in the three-spined stickleback Gasterosteus aculeatus

Background During the last years the quantification of immune response under immunological challenges, e.g. parasitation, has been a major focus of research. In this context, the expression of immune response genes in teleost fish has been surveyed for scientific and commercial purposes. Despite the fact that it was shown in teleostei and other taxa that the gene for beta-actin is not the most stably expressed housekeeping gene (HKG), depending on the tissue and experimental treatment, the gene has been us Results To establish a reliable method for the measurement of immune gene expression in Gasterosteus aculeatus, sequences from the now available genome database and an EST library of the same species were used to select oligonucleotide primers for HKG, in order to perform quantitative reverse-transcription (RT) PCR. The expression stability of ten candidate reference genes was evaluated in three different tissues, and in five parasite treatment groups, using the three algorithms BestKeeper, geNorm and N Conclusion As they were the most stably expressed genes in all tissues examined, we suggest using the genes for the L13a ribosomal binding protein and ubiquitin as alternative or additional reference genes in expression analysis in Gasterosteus aculeatus.

The association of health literacy with adherence in older 2 adults, and its role in interventions: a systematic meta-review

Background: Low health literacy is a common problem among older adults. It is often suggested to be associated with poor adherence. This suggested association implies a need for effective adherence interventions in low health literate people. However, previous reviews show mixed results on the association between low health literacy and poor adherence. A systematic meta-review of systematic reviews was conducted to study the association between health literacy and adherence in adults above the age of 50. Evidence for the effectiveness of adherence interventions among adults in this older age group with low health literacy was also explored. Methods: Eight electronic databases (MEDLINE, ERIC, EMBASE, PsycINFO, CINAHL, DARE, the Cochrane Library, and Web of Knowledge) were searched using a variety of keywords regarding health literacy and adherence. Additionally, references of identified articles were checked. Systematic reviews were included if they assessed the association between health literacy and adherence or evaluated the effectiveness of interventions to improve adherence in adults with low health literacy. The AMSTAR tool was used to assess the quality of the included reviews. The selection procedure, data-extraction, and quality assessment were performed by two independent reviewers. Seventeen reviews were selected for inclusion. Results: Reviews varied widely in quality. Both reviews of high and low quality found only weak or mixed associations between health literacy and adherence among older adults. Reviews report on seven studies that assess the effectiveness of adherence interventions among low health literate older adults. The results suggest that some adherence interventions are effective for this group. The interventions described in the reviews focused mainly on education and on lowering the health literacy demands of adherence instructions. No conclusions could be drawn about which type of intervention could be most beneficial for this population. Conclusions: Evidence on the association between health literacy and adherence in older adults is relatively weak. Adherence interventions are potentially effective for the vulnerable population of older adults with low levels of health literacy, but the evidence on this topic is limited. Further research is needed on the association between health literacy and general health behavior, and on the effectiveness of interventions

ESCAPADE: Encryption-type-ransomeware: system call based pattern detection

Encryption-type ransomware has risen in prominence lately as the go-to malware for threat actors aiming to compromise Android devices. In this paper, we present a ransomware detection technique based on behaviours observed in the system calls performed by the malware. We identify and present some common high-level system call behavioural patterns targeted at encryption-type ransomware and evaluate these patterns. We further present our repeatable and extensible methodology for extracting the system call log and patterns

Rabies Virus Populations in Humans and Mice Show Minor Inter-Host Variability within Various Central Nervous System Regions and Peripheral Tissues

Rabies virus (RABV) has a broad host range and infects multiple cell types throughout the infection cycle. Next-generation sequencing (NGS) and minor variant analysis are powerful tools for studying virus populations within specific hosts and tissues, leading to novel insights into the mechanisms of host-switching and key factors for infecting specific cell types. In this study we investigated RABV populations and minor variants in both original (non-passaged) samples and in vitro-passaged isolates of various CNS regions (hippocampus, medulla oblongata and spinal cord) of a fatal human rabies case, and of multiple CNS and non-CNS tissues of experimentally infected mice. No differences in virus populations were detected between the human CNS regions, and only one non-synonymous single nucleotide polymorphism (SNP) was detected in the fifth in vitro passage of virus isolated from the spinal cord. However, the appearance of this SNP shows the importance of sequencing newly passaged virus stocks before further use. Similarly, we did not detect apparent differences in virus populations isolated from different CNS and non-CNS tissues of experimentally infected mice. Sequencing of viruses obtained from pharyngeal swab and salivary gland proved difficult, and we propose methods for improving sampling

Applying refinement to the use of mice and rats in rheumatoid arthritis research

Rheumatoid arthritis (RA) is a painful, chronic disorder and there is currently an unmet need for effective therapies that will benefit a wide range of patients. The research and development process for therapies and treatments currently involves in vivo studies, which have the potential to cause discomfort, pain or distress. This Working Group report focuses on identifying causes of suffering within commonly used mouse and rat ‘models’ of RA, describing practical refinements to help reduce suffering and improve welfare without compromising the scientific objectives. The report also discusses other, relevant topics including identifying and minimising sources of variation within in vivo RA studies, the potential to provide pain relief including analgesia, welfare assessment, humane endpoints, reporting standards and the potential to replace animals in RA research

First molecular analysis of rabies virus in Qatar and clinical cases imported into Qatar, a case report

Identifying the origin of the rabies virus (RABV) infection may have significant implications for control measures. Here, we identified the source of a RABV infection of two Nepalese migrants in Qatar by comparing their RABV genomes with RABV genomes isolated from the brains of a RABV infected camel and fox from Qatar

Recommendations, guidelines, and best practice for the use of human induced pluripotent stem cells for neuropharmacological studies of neuropsychiatric disorders

The number of individuals suffering from neuropsychiatric disorders (NPDs) has increased worldwide, with 3 million disability-adjusted life-years calculated in 2019. Though research using various approaches including genetics, imaging, clinical and animal models has advanced our knowledge regarding NPDs, we still lack basic knowledge regarding the underlying pathophysiological mechanisms. Moreover, there is an urgent need for highly effective therapeutics for NPDs. Human induced pluripotent stem cells (hiPSCs) generated from somatic cells enabled scientists to create brain cells in a patient-specific manner. However, there are challenges to the use of hiPSCs that need to be addressed. In the current paper, consideration of best practices for neuropharmacological and neuropsychiatric research using hiPSCs will be discussed. Specifically, we provide recommendations for best practice in patient recruitment, including collecting demographic, clinical, medical (before and after treatment and response), diagnostic (including scales) and genetic data from the donors. We highlight considerations regarding donor genetics and sex, in addition to discussing biological and technical replicates. Furthermore, we present our views on selecting control groups/lines, experimental designs, and considerations for conducting neuropharmacological studies using hiPSC-based models in the context of NPDs. In doing so, we explore key issues in the field concerning reproducibility, statistical analysis, and how to translate in vitro studies into clinically relevant observations. The aim of this article is to provide a key resource for hiPSC researchers to perform robust and reproducible neuropharmacological studies, with the ultimate aim of improving identification and clinical translation of novel therapeutic drugs for NPDs