Tracking Cyber Adversaries with Adaptive Indicators of Compromise

A forensics investigation after a breach often uncovers network and host indicators of compromise (IOCs) that can be deployed to sensors to allow early detection of the adversary in the future. Over time, the adversary will change tactics, techniques, and procedures (TTPs), which will also change the data generated. If the IOCs are not kept up-to-date with the adversary's new TTPs, the adversary will no longer be detected once all of the IOCs become invalid. Tracking the Known (TTK) is the problem of keeping IOCs, in this case regular expressions (regexes), up-to-date with a dynamic adversary. Our framework solves the TTK problem in an automated, cyclic fashion to bracket a previously discovered adversary. This tracking is accomplished through a data-driven approach of self-adapting a given model based on its own detection capabilities. In our initial experiments, we found that the true positive rate (TPR) of the adaptive solution degrades much less significantly over time than the naive solution, suggesting that self-updating the model allows the continued detection of positives (i.e., adversaries). The cost for this performance is in the false positive rate (FPR), which increases over time for the adaptive solution, but remains constant for the naive solution. However, the difference in overall detection performance, as measured by the area under the curve (AUC), between the two methods is negligible. This result suggests that self-updating the model over time should be done in practice to continue to detect known, evolving adversaries.Comment: This was presented at the 4th Annual Conf. on Computational Science & Computational Intelligence (CSCI'17) held Dec 14-16, 2017 in Las Vegas, Nevada, US

Carbon isotope budget indicates biological disequilibrium dominated ocean carbon storage at the Last Glacial Maximum.

Understanding the causes of the  ~90 ppmv atmospheric CO2 swings between glacial and interglacial climates is an important open challenge in paleoclimate research. Although the regularity of the glacial-interglacial cycles hints at a single driving mechanism, Earth System models require many independent physical and biological processes to explain the full observed CO2 signal. Here we show that biologically sequestered carbon in the ocean can explain an atmospheric CO2 change of 75 ± 40 ppmv, based on a mass balance calculation using published carbon isotopic measurements. An analysis of the carbon isotopic signatures of different water masses indicates similar regenerated carbon inventories at the Last Glacial Maximum and during the Holocene, requiring that the change in carbon storage was dominated by disequilibrium. We attribute the inferred change in carbon disequilibrium to expansion of sea-ice or change in the overturning circulation

HapBead: on-skin microfluidic haptic interface using tunable bead

On-skin haptic interfaces using soft elastomers which are thin and flexible have significantly improved in recent years. Many are focused on vibrotactile feedback that requires complicated parameter tuning. Another approach is based on mechanical forces created via piezoelectric devices and other methods for non-vibratory haptic sensations like stretching, twisting. These are often bulky with electronic components and associated drivers are complicated with limited control of timing and precision. This paper proposes HapBead, a new on-skin haptic interface that is capable of rendering vibration like tactile feedback using microfluidics. HapBead leverages a microfluidic channel to precisely and agilely oscillate a small bead via liquid flow, which then generates various motion patterns in channel that creates highly tunable haptic sensations on skin. We developed a proof-of-concept design to implement thin, flexible and easily affordable HapBead platform, and verified its haptic rendering capabilities via attaching it to users’ fingertips. A study was carried out and confirmed that participants could accurately tell six different haptic patterns rendered by HapBead. HapBead enables new wearable display applications with multiple integrated functionalities such as on-skin haptic doodles, mixed reality haptics and visual-haptic displays

Beer Cooler.

Patent for a new and improved beer cooler. This design consists "in a beer-cooler, the combination of the cup-shaped rubber cap having the opening with the faucet, said cap being adapted to form an air-tight joint between the faucet and the beer-cooler" (lines 89-93)