Systematically Detecting Packet Validation Vulnerabilities in Embedded Network Stacks

Embedded Network Stacks (ENS) enable low-resource devices to communicate with the outside world, facilitating the development of the Internet of Things and Cyber-Physical Systems. Some defects in ENS are thus high-severity cybersecurity vulnerabilities: they are remotely triggerable and can impact the physical world. While prior research has shed light on the characteristics of defects in many classes of software systems, no study has described the properties of ENS defects nor identified a systematic technique to expose them. The most common automated approach to detecting ENS defects is feedback-driven randomized dynamic analysis ("fuzzing"), a costly and unpredictable technique. This paper provides the first systematic characterization of cybersecurity vulnerabilities in ENS. We analyzed 61 vulnerabilities across 6 open-source ENS. Most of these ENS defects are concentrated in the transport and network layers of the network stack, require reaching different states in the network protocol, and can be triggered by only 1-2 modifications to a single packet. We therefore propose a novel systematic testing framework that focuses on the transport and network layers, uses seeds that cover a network protocol's states, and systematically modifies packet fields. We evaluated this framework on 4 ENS and replicated 12 of the 14 reported IP/TCP/UDP vulnerabilities. On recent versions of these ENSs, it discovered 7 novel defects (6 assigned CVES) during a bounded systematic test that covered all protocol states and made up to 3 modifications per packet. We found defects in 3 of the 4 ENS we tested that had not been found by prior fuzzing research. Our results suggest that fuzzing should be deferred until after systematic testing is employed.Comment: 12 pages, 3 figures, to be published in the 38th IEEE/ACM International Conference on Automated Software Engineering (ASE 2023

Influence of ocular biometric factors on the defocus curve in an enlarged depth-of-focus intraocular lens

Background: To assess the influence of biometric measurements on the defocus curve after the implantation of enlarged depth-of-focus (EDoF) intraocular lens (IOL). Methods: Patients who underwent cataract surgery with bilateral implantation of Tecnis Symfony IOL were enrolled. Preoperatively, axial length (AL), corneal keratometry (K), pupil size and corneal aberrations were measured. 1 month after surgery, distance, intermediate, and near visual acuities (VA) were recorded. At 3 months, monocular and binocular corrected contrast sensitivities under photopic and mesopic lighting conditions were measured with CSV-1000E test. At 6-months, the defocus curve between −5.00 to + 3.00 diopters (D) was assessed in steps of 0.50 D, and NEI-RQL-42 questionnaire was administered. Results: One hundred thirty one eyes of 66 patients were included. Binocular logMAR VA better than 0.1 for intermediate vision was obtained in 90% of patients, whereas only 17.7% obtained that result in near vision. The rate of satisfaction was high (96%) and most of them (85.5%) had no or little difficulties in near vision. The mean amplitude of the defocus curve was 2.35D ± 0.73D, and smaller AL, smaller pupils, younger age, and male sex were associated with wider range of clear vision. Conclusions: Tecnis Symfony IOL enables functional vision at all distances, but demographic variables and preoperative biometric measurements like AL and pupil size influence the postoperative amplitude of the defocus curve. These parameters could be used to predict the performance of EDoF IOLs

Antimicrobial Susceptibility and Characterization of Resistance Mechanisms of Corynebacterium urealyticum Clinical Isolates

Corynebacterium urealyticum is a non-diphtherial urease-producing clinically relevant corynebacterial, most frequently involved in urinary tract infections. Most of the C. urealyticum clinical isolates are frequently resistant to several antibiotics. We investigated the susceptibility of 40 C. urealyticum isolated in our institution during the period 2005-2017 to eight compounds representative of the main clinically relevant classes of antimicrobial agents. Antimicrobial susceptibility was determined by the Epsilometer test. Resistance genes were searched by PCR. All strains were susceptible to vancomycin whereas linezolid and rifampicin also showed good activity (MICs90 = 1 and 0.4 mg/L, respectively). Almost all isolates (39/40, 97.5%) were multidrug resistant. The highest resistance rate was observed for ampicillin (100%), followed by erythromycin (95%) and levofloxacin (95%). Ampicillin resistance was associated with the presence of the blaA gene, encoding a class A ?-lactamase. The two rifampicin-resistant strains showed point mutations driving amino acid replacements in conserved residues of RNA polymerase subunit ? (RpoB). Tetracycline resistance was due to an efflux-mediated mechanism. Thirty-nine PFGE patterns were identified among the 40 C. urealyticum, indicating that they were not clonally related, but producing sporadic infections. These findings raise the need of maintaining surveillance strategies among this multidrug resistant pathogen.This research was funded by Plan Nacional de I+D+i 2013-2016 and Instituto de Salud Carlos III, Subdirección General de Redes y Centros de Investigación Cooperativa, Ministerio de Ciencia, Innovación y Universidades, Spanish Network for Research in Infectious Diseases (REIPI) D16/0016/0007 and RD16/0016/0008), and co-financed by European Development Regional Fund “A way to achieve Europe”, Operative program Intelligent Growth 2014-2020

Assessing the risk of cardiovascular events in patients receiving immune checkpoint inhibitors

Funding Information: This article is part of the CLARIFY project, supported by the European Union Horizon 2020 Research and Innovation Program under grant agreement number 875160. Publisher Copyright: Copyright © 2022 Torrente, Blanco, Franco, Garitaonaindia, Calvo, Collazo-Lorduy, Gutiérrez, Sánchez, González-del-Alba, Hernández, Méndez, Cantos, Núñez, Sousa and Provencio.Background: Immune checkpoint inhibitors (ICIs) have revolutionized cancer treatment. However, despite their excellent therapeutic effect, these medications typically result in a broad spectrum of toxicity reactions. Immune-related cardiotoxicity is uncommon but can be potentially fatal, and its true incidence is underestimated in clinical trials. The aim of this study is to assess the incidence and identify risk factors for developing a cardiac event in patients treated with ICIs. Methods: We conducted a single-institution retrospective study, including patients treated with ICIs in our center. The main outcomes were cardiac events (CE) and cardiovascular death. Results: A total of 378 patients were analyzed. The incidence of CE was 16.7%, during a median follow-up of 50.5 months. The multivariable analysis showed that age, a history of arrhythmia or ischemic heart disease, and prior immune-related adverse events were significantly associated with CE. Conclusion: CE during ICI treatment are more common than currently appreciated. A complete initial cardiovascular evaluation is recommended, especially in high-risk patients, being necessary a multidisciplinary approach of a specialized cardio-oncology team.publishersversionpublishe

Global application of an unoccupied aerial vehicle photogrammetry protocol for predicting aboveground biomass in non‐forest ecosystems

P. 1-15Non-forest ecosystems, dominated by shrubs, grasses and herbaceous plants, provide ecosystem services including carbon sequestration and forage for grazing, and are highly sensitive to climatic changes. Yet these ecosystems are poorly represented in remotely sensed biomass products and are undersampled by in situ monitoring. Current global change threats emphasize the need for new tools to capture biomass change in non-forest ecosystems at appropriate scales. Here we developed and deployed a new protocol for photogrammetric height using unoccupied aerial vehicle (UAV) images to test its capability for delivering standardized measurements of biomass across a globally distributed field experiment. We assessed whether canopy height inferred from UAV photogrammetry allows the prediction of aboveground biomass (AGB) across low-stature plant species by conducting 38 photogrammetric surveys over 741 harvested plots to sample 50 species. We found mean canopy height was strongly predictive of AGB across species, with a median adjusted R2 of 0.87 (ranging from 0.46 to 0.99) and median prediction error from leave-one-out cross-validation of 3.9%. Biomass per-unit-of-height was similar within but different among, plant functional types. We found that photogrammetric reconstructions of canopy height were sensitive to wind speed but not sun elevation during surveys. We demonstrated that our photogrammetric approach produced generalizable measurements across growth forms and environmental settings and yielded accuracies as good as those obtained from in situ approaches. We demonstrate that using a standardized approach for UAV photogrammetry can deliver accurate AGB estimates across a wide range of dynamic and heterogeneous ecosystems. Many academic and land management institutions have the technical capacity to deploy these approaches over extents of 1–10 ha−1. Photogrammetric approaches could provide much-needed information required to calibrate and validate the vegetation models and satellite-derived biomass products that are essential to understand vulnerable and understudied non-forested ecosystems around the globe.S

Role of age and comorbidities in mortality of patients with infective endocarditis

Purpose: The aim of this study was to analyse the characteristics of patients with IE in three groups of age and to assess the ability of age and the Charlson Comorbidity Index (CCI) to predict mortality. Methods: Prospective cohort study of all patients with IE included in the GAMES Spanish database between 2008 and 2015. Patients were stratified into three age groups:<65 years, 65 to 80 years, and = 80 years.The area under the receiver-operating characteristic (AUROC) curve was calculated to quantify the diagnostic accuracy of the CCI to predict mortality risk. Results: A total of 3120 patients with IE (1327 < 65 years;1291 65-80 years;502 = 80 years) were enrolled.Fever and heart failure were the most common presentations of IE, with no differences among age groups.Patients =80 years who underwent surgery were significantly lower compared with other age groups (14.3%, 65 years; 20.5%, 65-79 years; 31.3%, =80 years). In-hospital mortality was lower in the <65-year group (20.3%, <65 years;30.1%, 65-79 years;34.7%, =80 years;p < 0.001) as well as 1-year mortality (3.2%, <65 years; 5.5%, 65-80 years;7.6%, =80 years; p = 0.003).Independent predictors of mortality were age = 80 years (hazard ratio [HR]:2.78;95% confidence interval [CI]:2.32–3.34), CCI = 3 (HR:1.62; 95% CI:1.39–1.88), and non-performed surgery (HR:1.64;95% CI:11.16–1.58).When the three age groups were compared, the AUROC curve for CCI was significantly larger for patients aged <65 years(p < 0.001) for both in-hospital and 1-year mortality. Conclusion: There were no differences in the clinical presentation of IE between the groups. Age = 80 years, high comorbidity (measured by CCI), and non-performance of surgery were independent predictors of mortality in patients with IE.CCI could help to identify those patients with IE and surgical indication who present a lower risk of in-hospital and 1-year mortality after surgery, especially in the <65-year group

Natural History of MYH7-Related Dilated Cardiomyopathy

BACKGROUND: Variants in myosin heavy chain 7 (MYH7) are responsible for disease in 1% to 5% of patients with dilated cardiomyopathy (DCM); however, the clinical characteristics and natural history of MYH7-related DCM are poorly described. OBJECTIVE: We sought to determine the phenotype and prognosis of MYH7-related DCM. We also evaluated the influence of variant location on phenotypic expression. METHODS: We studied clinical data from 147 individuals with DCM-causing MYH7 variants (47.6% female; 35.6 ± 19.2 years) recruited from 29 international centers. RESULTS: At initial evaluation, 106 (72.1%) patients had DCM (left ventricular ejection fraction: 34.5% ± 11.7%). Median follow-up was 4.5 years (IQR: 1.7-8.0 years), and 23.7% of carriers who were initially phenotype-negative developed DCM. Phenotypic expression by 40 and 60 years was 46% and 88%, respectively, with 18 patients (16%) first diagnosed at <18 years of age. Thirty-six percent of patients with DCM met imaging criteria for LV noncompaction. During follow-up, 28% showed left ventricular reverse remodeling. Incidence of adverse cardiac events among patients with DCM at 5 years was 11.6%, with 5 (4.6%) deaths caused by end-stage heart failure (ESHF) and 5 patients (4.6%) requiring heart transplantation. The major ventricular arrhythmia rate was low (1.0% and 2.1% at 5 years in patients with DCM and in those with LVEF of ≤35%, respectively). ESHF and major ventricular arrhythmia were significantly lower compared with LMNA-related DCM and similar to DCM caused by TTN truncating variants. CONCLUSIONS: MYH7-related DCM is characterized by early age of onset, high phenotypic expression, low left ventricular reverse remodeling, and frequent progression to ESHF. Heart failure complications predominate over ventricular arrhythmias, which are rare

Probing invisible neutrino decay with KM3NeT-ORCA

In the era of precision measurements of the neutrino oscillation parameters, upcoming neutrino experiments will also be sensitive to physics beyond the Standard Model. KM3NeT/ORCA is a neutrino detector optimised for measuring atmospheric neutrinos from a few GeV to around 100 GeV. In this paper, the sensitivity of the KM3NeT/ORCA detector to neutrino decay has been explored. A three-flavour neutrino oscillation scenario, where the third neutrino mass state $\nu_3$ decays into an invisible state, e.g. a sterile neutrino, is considered. We find that KM3NeT/ORCA would be sensitive to invisible neutrino decays with $1/\alpha_3=\tau_3/m_3 < 180$~$\mathrm{ps/eV}$ at $90\%$ confidence level, assuming true normal ordering. Finally, the impact of neutrino decay on the precision of KM3NeT/ORCA measurements for $\theta_{23}$, $\Delta m^2_{31}$ and mass ordering have been studied. No significant effect of neutrino decay on the sensitivity to these measurements has been found.Comment: 27 pages, 14 figures, bibliography updated, typos correcte

Embedded Software of the KM3NeT Central Logic Board

The KM3NeT Collaboration is building and operating two deep sea neutrino telescopes at the bottom of the Mediterranean Sea. The telescopes consist of latices of photomultiplier tubes housed in pressure-resistant glass spheres, called digital optical modules and arranged in vertical detection units. The two main scientific goals are the determination of the neutrino mass ordering and the discovery and observation of high-energy neutrino sources in the Universe. Neutrinos are detected via the Cherenkov light, which is induced by charged particles originated in neutrino interactions. The photomultiplier tubes convert the Cherenkov light into electrical signals that are acquired and timestamped by the acquisition electronics. Each optical module houses the acquisition electronics for collecting and timestamping the photomultiplier signals with one nanosecond accuracy. Once finished, the two telescopes will have installed more than six thousand optical acquisition nodes, completing one of the more complex networks in the world in terms of operation and synchronization. The embedded software running in the acquisition nodes has been designed to provide a framework that will operate with different hardware versions and functionalities. The hardware will not be accessible once in operation, which complicates the embedded software architecture. The embedded software provides a set of tools to facilitate remote manageability of the deployed hardware, including safe reconfiguration of the firmware. This paper presents the architecture and the techniques, methods and implementation of the embedded software running in the acquisition nodes of the KM3NeT neutrino telescopes

Implementation and first results of the KM3NeT real-time core-collapse supernova neutrino search

The authors acknowledge the financial support of the funding agencies: Agence Nationale de la Recherche (contract ANR-15-CE31-0020), Centre National de la Recherche Scientifique (CNRS), Commission Europeenne (FEDER fund and Marie Curie Program), Institut Universitaire de France (IUF), LabEx UnivEarthS (ANR-10-LABX-0023 and ANR-18-IDEX-0001), Paris ile-de-France Region, France; Shota Rustaveli National Science Foundation of Georgia (SRNSFG, FR-18-1268), Georgia; Deutsche Forschungsgemeinschaft (DFG), Germany; The General Secretariat of Research and Technology (GSRT), Greece; Istituto Nazionale di Fisica Nucleare (INFN), Ministero dell'Universita e della Ricerca (MIUR), PRIN 2017 program (Grant NAT-NET 2017W4HA7S) Italy; Ministry of Higher Education Scientific Research and Professional Training, ICTP through Grant AF-13, Morocco; Nederlandse organisatie voor Wetenschappelijk Onderzoek (NWO), the Netherlands; The National Science Centre, Poland (2015/18/E/ST2/00758); National Authority for Scientific Research (ANCS), Romania; Ministerio de Ciencia, Innovacion, Investigacion y Universidades (MCIU): Programa Estatal de Generacion de Conocimiento (refs. PGC2018-096663-B-C41, -A-C42, -B-C43, -B-C44) (MCIU/FEDER), Generalitat Valenciana: Prometeo (PROMETEO/2020/019), Grisolia (ref. GRISOLIA/2018/119) and GenT (refs. CIDEGENT/2018/034, /2019/043, /2020/049) programs, Junta de Andalucia (ref. A-FQM-053-UGR18), La Caixa Foundation (ref. LCF/BQ/IN17/11620019), EU: MSC program (ref. 101025085), Spain.The KM3NeT research infrastructure is unconstruction in the Mediterranean Sea. KM3NeT will study atmospheric and astrophysical neutrinos with two multipurpose neutrino detectors, ARCA and ORCA, primarily aimed at GeV–PeV neutrinos. Thanks to the multiphotomultiplier tube design of the digital optical modules, KM3NeT is capable of detecting the neutrino burst from a Galactic or near-Galactic core-collapse supernova. This potential is already exploitable with the first detection units deployed in the sea. This paper describes the real-time implementation of the supernova neutrino search, operating on the two KM3NeT detectors since the first months of 2019. A quasi-online astronomy analysis is introduced to study the time profile of the detected neutrinos for especially significant events. Themechanism of generation and distribution of alerts, aswell as the integration into theSNEWSandSNEWS 2.0 global alert systems, are described. The approach for the follow-up of external alerts with a search for a neutrino excess in the archival data is defined. Finally, an overviewof the current detector capabilities and a report after the first two years of operation are given.French National Research Agency (ANR)European Commission ANR-15-CE31-0020Centre National de la Recherche Scientifique (CNRS)Commission EuropeenneInstitut Universitaire de France (IUF)LabEx UnivEarthS ANR-10-LABX-0023 ANR-18-IDEX-0001Shota Rustaveli National Science Foundation of Georgia (SRNSFG), Georgia FR-18-1268German Research Foundation (DFG)Greek Ministry of Development-GSRTIstituto Nazionale di Fisica Nucleare (INFN)Ministry of Education, Universities and Research (MIUR)PRIN 2017 program, Italy NAT-NET 2017W4HA7SMinistry of Higher Education Scientific Research and Professional Training, ICTP, Morocco AF-13Netherlands Organization for Scientific Research (NWO) Netherlands GovernmentNational Science Centre, Poland 2015/18/E/ST2/00758National Authority for Scientific Research (ANCS), RomaniaMinisterio de Ciencia, Innovacion, Investigacion y Universidades (MCIU): Programa Estatal de Generacion de Conocimiento PGC2018-096663-B-C41 PGC2018-096663-A-C42 PGC2018-096663-B-C43 PGC2018-096663-B-C44Generalitat Valenciana PROMETEO/2020/019Grisolia program GRISOLIA/2018/119 CIDEGENT/2018/034Junta de Andalucia A-FQM-053-UGR18La Caixa Foundation LCF/BQ/IN17/11620019EU: MSC program 101025085Paris Ile-de-France Region, FranceGenT program CIDEGENT/2018/034 CIDEGENT/2019/043 CIDEGENT/2020/04