On the Reverse Engineering of the Citadel Botnet

Citadel is an advanced information-stealing malware which targets financial information. This malware poses a real threat against the confidentiality and integrity of personal and business data. A joint operation was recently conducted by the FBI and the Microsoft Digital Crimes Unit in order to take down Citadel command-and-control servers. The operation caused some disruption in the botnet but has not stopped it completely. Due to the complex structure and advanced anti-reverse engineering techniques, the Citadel malware analysis process is both challenging and time-consuming. This allows cyber criminals to carry on with their attacks while the analysis is still in progress. In this paper, we present the results of the Citadel reverse engineering and provide additional insight into the functionality, inner workings, and open source components of the malware. In order to accelerate the reverse engineering process, we propose a clone-based analysis methodology. Citadel is an offspring of a previously analyzed malware called Zeus; thus, using the former as a reference, we can measure and quantify the similarities and differences of the new variant. Two types of code analysis techniques are provided in the methodology, namely assembly to source code matching and binary clone detection. The methodology can help reduce the number of functions requiring manual analysis. The analysis results prove that the approach is promising in Citadel malware analysis. Furthermore, the same approach is applicable to similar malware analysis scenarios.Comment: 10 pages, 17 figures. This is an updated / edited version of a paper appeared in FPS 201

A conserved and essential basic region mediates tRNA binding to the Elp1 subunit of the <em>Saccharomyces cerevisiae</em> Elongator complex

Elongator is a conserved, multi-protein complex discovered in Saccharomyces cerevisiae, loss of which confers a range of pleiotropic phenotypes. Elongator in higher eukaryotes is required for normal growth and development and a mutation in the largest subunit of human Elongator (Elp1) causes familial dysautonomia, a severe recessive neuropathy. Elongator promotes addition of mcm(5) and ncm(5) modifications to uridine in the tRNA anticodon ‘wobble’ position in both yeast and higher eukaryotes. Since these modifications are required for the tRNAs to function efficiently, a translation defect caused by hypomodified tRNAs may therefore underlie the variety of phenotypes associated with Elongator dysfunction. The Elp1 carboxy-terminal domain contains a highly conserved arginine/lysine-rich region that resembles a nuclear localization sequence (NLS). Using alanine substitution mutagenesis, we show that this region is essential for Elongator's function in tRNA wobble uridine modification. However, rather than acting to determine the nucleo-cytoplasmic distribution of Elongator, we find that the basic region plays a critical role in a novel interaction between tRNA and the Elp1 carboxy-terminal domain. Thus the conserved basic region in Elp1 may be essential for tRNA wobble uridine modification by acting as tRNA binding motif

Cosmetic extended hydrogel contact lens wear: A search and review of current literature

Cosmetic extended hydrogel contact lens wear: A search and review of current literatur

The extension problem for partial Boolean structures in Quantum Mechanics

Alternative partial Boolean structures, implicit in the discussion of classical representability of sets of quantum mechanical predictions, are characterized, with definite general conclusions on the equivalence of the approaches going back to Bell and Kochen-Specker. An algebraic approach is presented, allowing for a discussion of partial classical extension, amounting to reduction of the number of contexts, classical representability arising as a special case. As a result, known techniques are generalized and some of the associated computational difficulties overcome. The implications on the discussion of Boole-Bell inequalities are indicated.Comment: A number of misprints have been corrected and some terminology changed in order to avoid possible ambiguitie

Axially rigid steerable needle with compliant active tip control

Steerable instruments allow for precise access to deeply-seated targets while sparing sensitive tissues and avoiding anatomical structures. In this study we present a novel omnidirectional steerable instrument for prostate high-dose-rate (HDR) brachytherapy (BT). The instrument utilizes a needle with internal compliant mechanism, which enables distal tip steering through proximal instrument bending while retaining high axial and flexural rigidity. Finite element analysis evaluated the design and the prototype was validated in experiments involving tissue simulants and ex-vivo bovine tissue. Ultrasound (US) images were used to provide visualization and shape-reconstruction of the instrument during the insertions. In the experiments lateral tip steering up to 20 mm was found. Manually controlled active needle tip steering in inhomogeneous tissue simulants and ex-vivo tissue resulted in mean targeting errors of 1.4 mm and 2 mm in 3D position, respectively. The experiments show that steering response of the instrument is history-independent. The results indicate that the endpoint accuracy of the steerable instrument is similar to that of the conventional rigid HDR BT needle while adding the ability to steer along curved paths. Due to the design of the steerable needle sufficient axial and flexural rigidity is preserved to enable puncturing and path control within various heterogeneous tissues. The developed instrument has the potential to overcome problems currently unavoidable with conventional instruments, such as pubic arch interference in HDR BT, without major changes to the clinical workflow

Pseudophakic cystoid macular edema: update 2016

Pseudophakic cystoid macular edema (PCME) is the most common complication of cataract surgery, leading in some cases to a decrease in vision. Although the pathogenesis of PCME is not completely understood, the contribution of postsurgical inflammation is generally accepted. Consequently, anti-inflammatory medicines, including steroids and nonsteroidal anti-inflammatory drugs, have been postulated as having a role in both the prophylaxis and treatment of PCME. However, the lack of a uniformly accepted PCME definition, conflicting data on some risk factors, and the scarcity of studies comparing the role of nonsteroidal anti-inflammatory drugs to steroids in PCME prevention make the problem of PCME one of the puzzles of ophthalmology. This paper presents an updated review on the pathogenesis, risk factors, and use of anti-inflammatory drugs in PCME that reflect current research and practice

QUANTITATIVE CLINICAL NEUROLOGICAL TESTING. I. A STUDY OF A BATTERY OF TESTS DESIGNED TO EVALUATE IN PART THE NEUROLOGICAL FUNCTION OF PATIENTS WITH MULTIPLE SCLEROSIS AND ITS USE IN A THERAPEUTIC TRIAL *

Peer Reviewedhttp://deepblue.lib.umich.edu/bitstream/2027.42/73100/1/j.1749-6632.1965.tb20231.x.pd