Side-channel based intrusion detection for industrial control systems

Industrial Control Systems are under increased scrutiny. Their security is historically sub-par, and although measures are being taken by the manufacturers to remedy this, the large installed base of legacy systems cannot easily be updated with state-of-the-art security measures. We propose a system that uses electromagnetic side-channel measurements to detect behavioural changes of the software running on industrial control systems. To demonstrate the feasibility of this method, we show it is possible to profile and distinguish between even small changes in programs on Siemens S7-317 PLCs, using methods from cryptographic side-channel analysis.Comment: 12 pages, 7 figures. For associated code, see https://polvanaubel.com/research/em-ics/code

Prolactin

During an oral glucose tolerance test (OGTT) glucose and insulin levels were measured in 26 patients with prolactin-producing pituitary tumours without growth hormone excess. Basal glucose and insulin levels did not differ from the values of an age-matched control group. After glucose load the hyperprolactinaemic patients showed a decrease in glucose tolerance and a hyperinsulinaemia. Bromocriptine (CB 154), which suppressed PRL, improved glucose tolerance and decreased insulin towards normal in a second OGTT. — Human PRL or CB 154 had no significant influence on insulin release due to glucose in the perfused rat pancreas. — These findings suggest a diabetogenic effect of PRL. CB 154 might be a useful drug in improving glucose utilization in hormone-active pituitary tumours

Making Masking Security Proofs Concrete - Or How to Evaluate the Security of any Leaking Device

We investigate the relationships between theoretical studies of leaking cryptographic devices and concrete security evaluations with standard side-channel attacks. Our contributions are in four parts. First, we connect the formal analysis of the masking countermeasure proposed by Duc et al. (Eurocrypt 2014) with the Eurocrypt 2009 evaluation framework for side-channel key recovery attacks. In particular, we re-state their main proof for the masking countermeasure based on a mutual information metric, which is frequently used in concrete physical security evaluations. Second, we discuss the tightness of the Eurocrypt 2014 bounds based on experimental case studies. This allows us to conjecture a simplified link between the mutual information metric and the success rate of a side-channel adversary, ignoring technical parameters and proof artifacts. Third, we introduce heuristic (yet well-motivated) tools for the evaluation of the masking countermeasure when its independent leakage assumption is not perfectly fulfilled, as it is frequently encountered in practice. Thanks to these tools, we argue that masking with non-independent leakages may provide improved security levels in certain scenarios. Eventually, we consider the tradeoff between measurement complexity and key enumeration in divide-and-conquer side-channel attacks, and show that it can be predicted based on the mutual information metric, by solving a non-linear integer programming problem for which efficient solutions exist. The combination of these observations enables significant reductions of the evaluation costs for certification bodies

Cardiorespiratory fitness, adiposity and incident asthma in adults

Available large-scale prospective studies on adiposity and asthma used body mass index as an indicator of adiposity. Studies involving more accurate measures of adiposity, such as body fat percentage (BF%), are needed to confirm or contrast body mass index - related results. Cardiorepiratory fitness is a strong predictor of morbidity and mortality, and the available literature suggests that moderate-high cardiorespiratory fitness reduces many of the health hazards associated with obesity. The present study aimed: 1) to examine whether cardiorespiratory fitness and/or BF% are associated with subsequent acquisition of asthma in adults; and 2) to test the hypothesis that a high cardiorespiratory fitness level can reduce the risk of incident asthma in individuals with excess adiposity

IL-9 Induces VEGF Secretion from Human Mast Cells and IL-9/IL-9 Receptor Genes Are Overexpressed in Atopic Dermatitis

Interleukin 9 (IL-9) has been implicated in mast cell-related inflammatory diseases, such as asthma, where vascular endothelial growth factor (VEGF) is involved. Here we report that IL-9 (10–20 ng/ml) induces gene expression and secretion of VEGF from human LAD2. IL-9 does not induce mast cell degranulation or the release of other mediators (IL-1, IL-8, or TNF). VEGF production in response to IL-9 involves STAT-3 activation. The effect is inhibited (about 80%) by the STAT-3 inhibitor, Stattic. Gene-expression of IL-9 and IL-9 receptor is significantly increased in lesional skin areas of atopic dermatitis (AD) patients as compared to normal control skin, while serum IL-9 is not different from controls. These results imply that functional interactions between IL-9 and mast cells leading to VEGF release contribute to the initiation/propagation of the pathogenesis of AD, a skin inflammatory disease

Crossing borders to bind proteins—a new concept in protein recognition based on the conjugation of small organic molecules or short peptides to polypeptides from a designed set

A new concept for protein recognition and binding is highlighted. The conjugation of small organic molecules or short peptides to polypeptides from a designed set provides binder molecules that bind proteins with high affinities, and with selectivities that are equal to those of antibodies. The small organic molecules or peptides need to bind the protein targets but only with modest affinities and selectivities, because conjugation to the polypeptides results in molecules with dramatically improved binder performance. The polypeptides are selected from a set of only sixteen sequences designed to bind, in principle, any protein. The small number of polypeptides used to prepare high-affinity binders contrasts sharply with the huge libraries used in binder technologies based on selection or immunization. Also, unlike antibodies and engineered proteins, the polypeptides have unordered three-dimensional structures and adapt to the proteins to which they bind. Binder molecules for the C-reactive protein, human carbonic anhydrase II, acetylcholine esterase, thymidine kinase 1, phosphorylated proteins, the D-dimer, and a number of antibodies are used as examples to demonstrate that affinities are achieved that are higher than those of the small molecules or peptides by as much as four orders of magnitude. Evaluation by pull-down experiments and ELISA-based tests in human serum show selectivities to be equal to those of antibodies. Small organic molecules and peptides are readily available from pools of endogenous ligands, enzyme substrates, inhibitors or products, from screened small molecule libraries, from phage display, and from mRNA display. The technology is an alternative to established binder concepts for applications in drug development, diagnostics, medical imaging, and protein separation