Toward the automation of threat modeling and risk assessment in IoT systems

The Internet of Things (IoT) has recently become one of the most relevant emerging technologies in the IT landscape. IoT systems are characterized by the high heterogeneity of involved architectural components (e.g., device platforms, services, networks, architectures) and involve a multiplicity of application domains. In the IoT scenario, the identification of specific security requirements and the security design are very complex and expensive tasks, since they heavily depend on the configuration deployment actually in place and require security experts. In order to overcome these issues, we propose an approach aimed at supporting the security analysis of an IoT system by means of an almost completely automated process for threat modeling and risk assessment, which also helps identify the security controls to implement in order to mitigate existing security risks. We demonstrate the effectiveness of the approach by discussing its application to a home automation system, built on top of commercial IoT products

Toward automated threat modeling of edge computing systems

Edge computing brings processing and storage capabilities closer to the data sources, to reduce network latency, save bandwidth, and preserve data locality. Despite the clear benefits, this paradigm brings unprecedented cyber risks due to the combination of the security issues and challenges typical of cloud and Internet of Things (IoT) worlds. Notwithstanding an increasing interest in edge security by academic and industrial communities, there is still no discernible industry consensus on edge computing security best practices, and activities like threat analysis and countermeasure selection are still not well established and are completely left to security experts.In order to cope with the need for a simplified yet effective threat modeling process, which is affordable in presence of limited security skills and economic resources, and viable in modern development approaches, in this paper, we propose an automated threat modeling and countermeasure selection strategy targeting edge computing systems. Our approach leverages a comprehensive system model able to describe the main involved architectural elements and the associated data flow, with a focus on the specific properties that may actually impact on the applicability of threats and of associated countermeasures

The Reduction of Flavins by Borohydride: 3,4-Dihydroflavin

Peer Reviewedhttp://deepblue.lib.umich.edu/bitstream/2027.42/66296/1/j.1432-1033.1969.tb00621.x.pd

The Douglas-Fir Genome Sequence Reveals Specialization of the Photosynthetic Apparatus in Pinaceae.

A reference genome sequence for Pseudotsuga menziesii var. menziesii (Mirb.) Franco (Coastal Douglas-fir) is reported, thus providing a reference sequence for a third genus of the family Pinaceae. The contiguity and quality of the genome assembly far exceeds that of other conifer reference genome sequences (contig N50 = 44,136 bp and scaffold N50 = 340,704 bp). Incremental improvements in sequencing and assembly technologies are in part responsible for the higher quality reference genome, but it may also be due to a slightly lower exact repeat content in Douglas-fir vs. pine and spruce. Comparative genome annotation with angiosperm species reveals gene-family expansion and contraction in Douglas-fir and other conifers which may account for some of the major morphological and physiological differences between the two major plant groups. Notable differences in the size of the NDH-complex gene family and genes underlying the functional basis of shade tolerance/intolerance were observed. This reference genome sequence not only provides an important resource for Douglas-fir breeders and geneticists but also sheds additional light on the evolutionary processes that have led to the divergence of modern angiosperms from the more ancient gymnosperms

Management of incidental findings during imaging research in "healthy" volunteers: current UK practice

OBJECTIVES: Incidental findings (IF) are becoming increasingly common due to the proliferation of imaging research. IFs can be life-changing for “healthy” volunteers. This study examined variation in IF management in UK research studies of healthy volunteers, including comparison with ethical and legal guidelines, thus providing baseline data and informing future practice. METHODS: Questionnaire of participant background [medical/non-medical; radiologist/non-radiologist; years as principal investigator (PI)], type of research (involving children or not), institutional policy, volunteer information, radiologist involvement in reporting scans and IF disclosure mechanisms. Investigator's current and perceived “ideal” practice was examined. Participants were PIs performing imaging research of healthy volunteers approved by UK ethics committees (2006–2009). RESULTS: 63/146 (43%) surveys completed. 54/61 (88.5%) had site-specific guidelines. Information commonly provided to volunteers should IF be found: personal data (51/62; 82%), contingency plans (54/62; 87%) and disclosure to general practitioner (GP)/treating physician (47/62; 76%). PIs used different strategies for image review. Commonest: radiologist reports research scans only when researcher suspicious of IF [15/57 (26%) compared with 5/28 (16%) in ideal practice]. Commonest ideal reporting strategy: routine reporting by specialist radiologists [9/28 (29%) compared with 8/57 (14%) in current practice]. 49/56 (87.5%) have a standardised disclosure contingency plan, usually involving GP. PIs most commonly disclosed IFs to volunteers when judged relevant (27/58; 47%), most commonly face to face (22/54; 41%), by volunteer's GP (26/60; 43%). Background of PI influenced consent, reporting and disclosure practice. CONCLUSION: There is wide variation in handling IFs in UK imaging research. Much of the current practice contravenes the vague existing legal and ethical guidelines, and is unlikely to be in the best interests of volunteers or researchers

Incidental findings found in "healthy" volunteers during imaging performed for research: current legal and ethical implications

Incidental findings found in “healthy” volunteers during research imaging are common and have important implications for study design and performance, particularly in the areas of informed consent, subjects' rights, clinical image analysis and disclosure. In this study, we aimed to determine current practice and regulations concerning information that should be given to research subjects when obtaining consent, reporting of research images, who should be informed about any incidental findings and the method of disclosure. We reviewed all UK, European and international humanitarian, legal and ethical agencies' guidance. We found that the guidance on what constitutes incidental pathology, how to recognise it and what to do about it is inconsistent between agencies, difficult to find and less complete in the UK than elsewhere. Where given, guidance states that volunteers should be informed during the consent process about how research images will be managed, whether a mechanism exists for identifying incidental findings, arrangements for their disclosure, the potential benefit or harm and therapeutic options. The effects of incidentally discovered pathology on the individual can be complex and far-reaching. Radiologist involvement in analysis of research images varies widely; many incidental findings might therefore go unrecognised. In conclusion, guidance on the management of research imaging is inconsistent, limited and does not address the interests of volunteers. Improved standards to guide management of research images and incidental findings are urgently required

Oxidative stress in Nipah virus-infected human small airway epithelial cells

Nipah virus (NiV) is a zoonotic emerging pathogen that can cause severe and often fatal respiratory disease in humans. The pathogenesis of NiV infection of the human respiratory tract remains unknown. Reactive oxygen species (ROS) produced by airway epithelial cells in response to viral infections contribute to lung injury by inducing inflammation and oxidative stress; however, the role of ROS in NiV-induced respiratory disease is unknown. To investigate whethe