StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks

This paper presents a systematic solution to the persistent problem of buffer overflow attacks. Buffer overflow attacks gained notoriety in 1988 as part of the Morris Worm incident on the Internet. While it is fairly simple to fix individual buffer overflow vulnerabilities, buffer overflow attacks continue to this day. Hundreds of attacks have been discovered, and while most of the obvious vulnerabilities have now been patched, more sophisticated buffer overflow attacks continue to emerge. We describe StackGuard: a simple compiler technique that virtually eliminates buffer overflow vulnerabilities with only modest performance penalties. Privileged programs that are recompiled with the StackGuard compiler extension no longer yield control to the attacker, but rather enter a fail-safe state. These programs require no source code changes at all, and are binary-compatible with existing operating systems and libraries. We describe the compiler technique (a simple patch to gcc), as well as a set of variations on the technique that tradeoff between penetration resistance and performance. We present experimental results of both the penetration resistance and the performance impact of this technique

The Lick AGN Monitoring Project: Broad-Line Region Radii and Black Hole Masses from Reverberation Mapping of Hbeta

We have recently completed a 64-night spectroscopic monitoring campaign at the Lick Observatory 3-m Shane telescope with the aim of measuring the masses of the black holes in 12 nearby (z < 0.05) Seyfert 1 galaxies with expected masses in the range ~10^6-10^7 M_sun and also the well-studied nearby active galactic nucleus (AGN) NGC 5548. Nine of the objects in the sample (including NGC 5548) showed optical variability of sufficient strength during the monitoring campaign to allow for a time lag to be measured between the continuum fluctuations and the response to these fluctuations in the broad Hbeta emission. We present here the light curves for the objects in this sample and the subsequent Hbeta time lags for the nine objects where these measurements were possible. The Hbeta lag time is directly related to the size of the broad-line region, and by combining the lag time with the measured width of the Hbeta emission line in the variable part of the spectrum, we determine the virial mass of the central supermassive black hole in these nine AGNs. The absolute calibration of the black hole masses is based on the normalization derived by Onken et al. We also examine the time lag response as a function of velocity across the Hbeta line profile for six of the AGNs. The analysis of four leads to ambiguous results with relatively flat time lags as a function of velocity. However, SBS 1116+583A exhibits a symmetric time lag response around the line center reminiscent of simple models for circularly orbiting broad-line region (BLR) clouds, and Arp 151 shows an asymmetric profile that is most easily explained by a simple gravitational infall model. Further investigation will be necessary to fully understand the constraints placed on physical models of the BLR by the velocity-resolved response in these objects.Comment: 24 pages, 16 figures and 13 tables, submitted to Ap

Randomized Controlled Trial of Interval-Compressed Chemotherapy for the Treatment of Localized Ewing Sarcoma: A Report From the Children's Oncology Group

Chemotherapy with alternating vincristine-doxorubicin-cyclophosphamide and ifosfamide-etoposide cycles and primary tumor treatment with surgery and/or radiation therapy constitute the usual approach to localized Ewing sarcoma in North America. We tested whether chemotherapy intensification through interval compression could improve outcome

The interactome of the N-terminus of band 3 regulates red blood cell metabolism and storage quality

Band 3 (anion exchanger 1; AE1) is the most abundant membrane protein in red blood cells, which in turn are the most abundant cells in the human body. A compelling model posits that, at high oxygen saturation, the N-terminal cytosolic domain of AE1 binds to and inhibits glycolytic enzymes, thus diverting metabolic fluxes to the pentose phosphate pathway to generate reducing equivalents. Dysfunction of this mechanism occurs during red blood cell aging or storage under blood bank conditions, suggesting a role for AE1 in the regulation of the quality of stored blood and efficacy of transfusion, a life-saving intervention for millions of recipients worldwide. Here we leveraged two murine models carrying genetic ablations of AE1 to provide mechanistic evidence of the role of this protein in the regulation of erythrocyte metabolism and storage quality. Metabolic observations in mice recapitulated those in a human subject lacking expression of AE11-11 (band 3 Neapolis), while common polymorphisms in the region coding for AE11-56 correlate with increased susceptibility to osmotic hemolysis in healthy blood donors. Through thermal proteome profiling and crosslinking proteomics, we provide a map of the red blood cell interactome, with a focus on AE11-56 and validate recombinant AE1 interactions with glyceraldehyde 3-phosphate dehydrogenase. As a proof-of-principle and to provide further mechanistic evidence of the role of AE1 in the regulation of redox homeo stasis of stored red blood cells, we show that incubation with a cell-penetrating AE11-56 peptide can rescue the metabolic defect in glutathione recycling and boost post-transfusion recovery of stored red blood cells from healthy human donors and genetically ablated mice

AGN STORM 2: V. Anomalous Behavior of the CIV Light Curve in Mrk 817

An intensive reverberation mapping campaign on the Seyfert 1 galaxy Mrk817 using the Cosmic Origins Spectrograph (COS) on the Hubble Space Telescope (HST) revealed significant variations in the response of the broad UV emission lines to fluctuations in the continuum emission. The response of the prominent UV emission lines changes over a $\sim$60-day duration, resulting in distinctly different time lags in the various segments of the light curve over the 14 months observing campaign. One-dimensional echo-mapping models fit these variations if a slowly varying background is included for each emission line. These variations are more evident in the CIV light curve, which is the line least affected by intrinsic absorption in Mrk817 and least blended with neighboring emission lines. We identify five temporal windows with distinct emission line response, and measure their corresponding time delays, which range from 2 to 13 days. These temporal windows are plausibly linked to changes in the UV and X-ray obscuration occurring during these same intervals. The shortest time lags occur during periods with diminishing obscuration, whereas the longest lags occur during periods with rising obscuration. We propose that the obscuring outflow shields the ultraviolet broad lines from the ionizing continuum. The resulting change in the spectral energy distribution of the ionizing continuum, as seen by clouds at a range of distances from the nucleus, is responsible for the changes in the line response.Comment: 20 pages, 8 figures, submitted to Ap

AGN STORM 2. IV. Swift X-ray and ultraviolet/optical monitoring of Mrk 817

The AGN STORM 2 campaign is a large, multiwavelength reverberation mapping project designed to trace out the structure of Mrk 817 from the inner accretion disk to the broad emission line region and out to the dusty torus. As part of this campaign, Swift performed daily monitoring of Mrk 817 for approximately 15 months, obtaining observations in X-rays and six UV/optical filters. The X-ray monitoring shows that Mrk 817 was in a significantly fainter state than in previous observations, with only a brief flare where it reached prior flux levels. The X-ray spectrum is heavily obscured. The UV/optical light curves show significant variability throughout the campaign and are well correlated with one another, but uncorrelated with the X-rays. Combining the Swift UV/optical light curves with Hubble UV continuum light curves, we measure interband continuum lags, $\tau(\lambda)$, that increase with increasing wavelength roughly following $\tau(\lambda) \propto \lambda^{4/3}$, the dependence expected for a geometrically thin, optically thick, centrally illuminated disk. Modeling of the light curves reveals a period at the beginning of the campaign where the response of the continuum is suppressed compared to later in the light curve - the light curves are not simple shifted and scaled versions of each other. The interval of suppressed response corresponds to a period of high UV line and X-ray absorption, and reduced emission line variability amplitudes. We suggest that this indicates a significant contribution to the continuum from the broad line region gas that sees an absorbed ionizing continuum.Comment: 20 pages, 13 figures, 3 tables, accepted for publication in Ap

AGN STORM 2. I. First results: A Change in the Weather of Mrk 817

We present the first results from the ongoing, intensive, multiwavelength monitoring program of the luminous Seyfert 1 galaxy Mrk 817. While this active galactic nucleus was, in part, selected for its historically unobscured nature, we discovered that the X-ray spectrum is highly absorbed, and there are new blueshifted, broad, and narrow UV absorption lines, which suggest that a dust-free, ionized obscurer located at the inner broad-line region partially covers the central source. Despite the obscuration, we measure UV and optical continuum reverberation lags consistent with a centrally illuminated Shakura–Sunyaev thin accretion disk, and measure reverberation lags associated with the optical broad-line region, as expected. However, in the first 55 days of the campaign, when the obscuration was becoming most extreme, we observe a de-coupling of the UV continuum and the UV broad emission-line variability. The correlation recovered in the next 42 days of the campaign, as Mrk 817 entered a less obscured state. The short C IV and Lyα lags suggest that the accretion disk extends beyond the UV broad-line region. Unified

AGN STORM 2. IV. Swift X-Ray and Ultraviolet/Optical Monitoring of Mrk 817

The AGN STORM 2 campaign is a large, multiwavelength reverberation mapping project designed to trace out the structure of Mrk 817 from the inner accretion disk to the broad emission line region and out to the dusty torus. As part of this campaign, Swift performed daily monitoring of Mrk 817 for approximately 15 months, obtaining observations in X-rays and six UV/optical filters. The X-ray monitoring shows that Mrk 817 was in a significantly fainter state than in previous observations, with only a brief flare where it reached prior flux levels. The X-ray spectrum is heavily obscured. The UV/optical light curves show significant variability throughout the campaign and are well correlated with one another, but uncorrelated with the X-rays. Combining the Swift UV/optical light curves with Hubble Space Telescope UV continuum light curves, we measure interband continuum lags, τ(λ), that increase with increasing wavelength roughly following τ(λ) ∝ λ 4/3, the dependence expected for a geometrically thin, optically thick, centrally illuminated disk. Modeling of the light curves reveals a period at the beginning of the campaign where the response of the continuum is suppressed compared to later in the light curve—the light curves are not simple shifted and scaled versions of each other. The interval of suppressed response corresponds to a period of high UV line and X-ray absorption, and reduced emission line variability amplitudes. We suggest that this indicates a significant contribution to the continuum from the broad-line region gas that sees an absorbed ionizing continuum

AGN STORM 2. VI. Mapping Temperature Fluctuations in the Accretion Disk of Mrk 817

We fit the UV/optical lightcurves of the Seyfert 1 galaxy Mrk 817 to produce maps of the accretion disk temperature fluctuations δ T resolved in time and radius. The δ T maps are dominated by coherent radial structures that move slowly (v ≪ c) inward and outward, which conflicts with the idea that disk variability is driven only by reverberation. Instead, these slow-moving temperature fluctuations are likely due to variability intrinsic to the disk. We test how modifying the input lightcurves by smoothing and subtracting them changes the resulting δ T maps and find that most of the temperature fluctuations exist over relatively long timescales (hundreds of days). We show how detrending active galactic nucleus (AGN) lightcurves can be used to separate the flux variations driven by the slow-moving temperature fluctuations from those driven by reverberation. We also simulate contamination of the continuum emission from the disk by continuum emission from the broad-line region (BLR), which is expected to have spectral features localized in wavelength, such as the Balmer break contaminating the U band. We find that a disk with a smooth temperature profile cannot produce a signal localized in wavelength and that any BLR contamination should appear as residuals in our model lightcurves. Given the observed residuals, we estimate that only ∼20% of the variable flux in the U and u lightcurves can be due to BLR contamination. Finally, we discus how these maps not only describe the data but can make predictions about other aspects of AGN variability