Comparison of System Call Representations for Intrusion Detection

Over the years, artificial neural networks have been applied successfully in many areas including IT security. Yet, neural networks can only process continuous input data. This is particularly challenging for security-related non-continuous data like system calls. This work focuses on four different options to preprocess sequences of system calls so that they can be processed by neural networks. These input options are based on one-hot encoding and learning word2vec or GloVe representations of system calls. As an additional option, we analyze if the mapping of system calls to their respective kernel modules is an adequate generalization step for (a) replacing system calls or (b) enhancing system call data with additional information regarding their context. However, when performing such preprocessing steps it is important to ensure that no relevant information is lost during the process. The overall objective of system call based intrusion detection is to categorize sequences of system calls as benign or malicious behavior. Therefore, this scenario is used to evaluate the different input options as a classification task. The results show, that each of the four different methods is a valid option when preprocessing input data, but the use of kernel modules only is not recommended because too much information is being lost during the mapping process.Comment: 12 pages, 1 figure, submitted to CISIS 201

UPC++: A high-performance communication framework for asynchronous computation

UPC++ is a C++ library that supports high-performance computation via an asynchronous communication framework. This paper describes a new incarnation that differs substantially from its predecessor, and we discuss the reasons for our design decisions. We present new design features, including future-based asynchrony management, distributed objects, and generalized Remote Procedure Call (RPC). We show microbenchmark performance results demonstrating that one-sided Remote Memory Access (RMA) in UPC++ is competitive with MPI-3 RMA; on a Cray XC40 UPC++ delivers up to a 25% improvement in the latency of blocking RMA put, and up to a 33% bandwidth improvement in an RMA throughput test. We showcase the benefits of UPC++ with irregular applications through a pair of application motifs, a distributed hash table and a sparse solver component. Our distributed hash table in UPC++ delivers near-linear weak scaling up to 34816 cores of a Cray XC40. Our UPC++ implementation of the sparse solver component shows robust strong scaling up to 2048 cores, where it outperforms variants communicating using MPI by up to 3.1x. UPC++ encourages the use of aggressive asynchrony in low-overhead RMA and RPC, improving programmer productivity and delivering high performance in irregular applications

Haulout site selection by southern elephant seals at Marion Island

Using data from an ongoing mark-resight programme at Marion Island, we tested empirically whether southern elephant seals prefer certain terrestrial sites to others during the breeding, moulting and winter haulouts, and whether the pattern of site use is the same for different age and sex groups. Southern elephant seals preferred some sites, while discriminating against other sites, with different age and sex classes using different sites for certain haulout events. Wintering young animals did not show strong site selection. Some popular sites were used for all haulouts by all age and sex groups, and apparently have all the requirements of a good site for terrestrial haulout by southern elephant seals. Site selection becomes more apparent with age, suggesting the role of haulout experience in site selection

Assessment of funnel plot asymmetry and publication bias in reproductive health meta-analyses: an analytic survey

BACKGROUND: Despite efforts to assure high methodological standards, systematic reviews may be affected by publication bias. The objective of this study was to evaluate the occurrence of publication bias in a collection of high quality systematic reviews on reproductive health. METHODS: Systematic reviews included in the Reproductive Health Library (RHL), issue No 9, were assessed. Funnel plot was used to assess meta-analyses containing 10 or more trials reporting a binary outcome. A funnel plot, the estimated number of missing studies and the adjusted combined effect size were obtained using the "trim and fill method". Meta-analyses results that were not considered to be robust due to a possible publication bias were submitted to a more detailed assessment. RESULTS: A total of 21 systematic reviews were assessed. The number of trials comprising each one ranged from 10 to 83 (median = 13), totaling 379 trials, whose results have been summarized. None of the reviews had reported any evaluation of publication bias or funnel plot asymmetry. Some degree of asymmetry in funnel plots was observed in 18 of the 21 meta-analyses evaluated (85.7%), with the estimated number of missing studies ranging from 1 to 18 (median = 3). Only for three meta-analyses, the conclusion could not be considered robust due to a possible publication bias. CONCLUSION: Asymmetry is a frequent finding in funnel plots of meta-analyses in reproductive health, but according to the present evaluation, less than 15% of meta-analyses report conclusions that would not be considered robust. Publication bias and other sources of asymmetry in funnel plots should be systematically addressed by reproductive health meta-analysts. Next amendments in Cochrane systematic reviews should include this type of evaluation. Further studies regarding the evolution of effect size and publication bias over time in systematic reviews in reproductive health are needed

The logic of kinetic regulation in the thioredoxin system

<p>Abstract</p> <p>Background</p> <p>The thioredoxin system consisting of NADP(H), thioredoxin reductase and thioredoxin provides reducing equivalents to a large and diverse array of cellular processes. Despite a great deal of information on the kinetics of individual thioredoxin-dependent reactions, the kinetic regulation of this system as an integrated whole is not known. We address this by using kinetic modeling to identify and describe kinetic behavioral motifs found within the system.</p> <p>Results</p> <p>Analysis of a realistic computational model of the <it>Escherichia coli </it>thioredoxin system revealed several modes of kinetic regulation in the system. In keeping with published findings, the model showed that thioredoxin-dependent reactions were adaptable (i.e. changes to the thioredoxin system affected the kinetic profiles of these reactions). Further and in contrast to other systems-level descriptions, analysis of the model showed that apparently unrelated thioredoxin oxidation reactions can affect each other via their combined effects on the thioredoxin redox cycle. However, the scale of these effects depended on the kinetics of the individual thioredoxin oxidation reactions with some reactions more sensitive to changes in the thioredoxin cycle and others, such as the Tpx-dependent reduction of hydrogen peroxide, less sensitive to these changes. The coupling of the thioredoxin and Tpx redox cycles also allowed for ultrasensitive changes in the thioredoxin concentration in response to changes in the thioredoxin reductase concentration. We were able to describe the kinetic mechanisms underlying these behaviors precisely with analytical solutions and core models.</p> <p>Conclusions</p> <p>Using kinetic modeling we have revealed the logic that underlies the functional organization and kinetic behavior of the thioredoxin system. The thioredoxin redox cycle and associated reactions allows for a system that is adaptable, interconnected and able to display differential sensitivities to changes in this redox cycle. This work provides a theoretical, systems-biological basis for an experimental analysis of the thioredoxin system and its associated reactions.</p

Living in Living Cities

This paper presents an overview of current and potential applications of living technology to some urban problems. Living technology can be described as technology that exhibits the core features of living systems. These features can be useful to solve dynamic problems. In particular, urban problems concerning mobility, logistics, telecommunications, governance, safety, sustainability, and society and culture are presented, while solutions involving living technology are reviewed. A methodology for developing living technology is mentioned, while supraoptimal public transportation systems are used as a case study to illustrate the benefits of urban living technology. Finally, the usefulness of describing cities as living systems is discussed.Comment: 40 pages, 4 figures, overview pape

Refugee and Migrant Women's Views of Antenatal Ultrasound on the Thai Burmese Border: A Mixed Methods Study

Antenatal ultrasound suits developing countries by virtue of its versatility, relatively low cost and safety, but little is known about women's or local provider's perspectives of this upcoming technology in such settings. This study was undertaken to better understand how routine obstetric ultrasound is experienced in a displaced Burmese population and identify barriers to its acceptance by local patients and providers.Qualitative (30 observations, 19 interviews, seven focus group discussions) and quantitative methods (questionnaire survey with 644 pregnant women) were used to provide a comprehensive understanding along four major themes: safety, emotions, information and communication, and unintended consequences of antenatal ultrasound in refugee and migrant clinics on the Thai Burmese border. One of the main concerns expressed by women was the danger of childbirth which they mainly attributed to fetal malposition. Both providers and patients recognized ultrasound as a technology improving the safety of pregnancy and delivery. A minority of patients experienced transitory shyness or anxiety before the ultrasound, but reported that these feelings could be ameliorated with improved patient information and staff communication. Unintended consequences of overuse and gender selective abortions in this population were not common.The results of this study are being used to improve local practice and allow development of explanatory materials for this population with low literacy. We strongly encourage facilities introducing new technology in resource poor settings to assess acceptability through similar inquiry

Alternative Strategies to Reduce Maternal Mortality in India: A Cost-Effectiveness Analysis

A cost-effectiveness study by Sue Goldie and colleagues finds that better family planning, provision of safe abortion, and improved intrapartum and emergency obstetrical care could reduce maternal mortality in India by 75% in 5 years