Detecting Malicious Code by Model Checking

Abstract. The ease of compiling malicious code from source code in higher programming languages has increased the volatility of malicious programs: The first appearance of a new worm in the wild is usually followed by modified versions in quick succession. As demonstrated by Christodorescu and Jha, however, classical detection software relies on static patterns, and is easily outsmarted. In this paper, we present a flexible method to detect malicious code patterns in executables by model checking. While model checking was originally developed to verify the correctness of systems against specifications, we argue that it lends itself equally well to the specification of malicious code patterns. To this end, we introduce the specification language CTPL (Computation Tree Predicate Logic) which extends the well-known logic CTL, and describe an efficient model checking algorithm. Our practical experiments demonstrate that we are able to detect a large number of worm variants with a single specification. Key words: Model Checking, Malware Detection.

Managing the Socially Marginalized: Attitudes Towards Welfare, Punishment and Race

Welfare and incarceration policies have converged to form a system of governance over socially marginalized groups, particularly racial minorities. In both of these policy areas, rehabilitative and social support objectives have been replaced with a more punitive and restrictive system. The authors examine the convergence in individual-level attitudes concerning welfare and criminal punishment, using national survey data. The authors\u27 analysis indicates a statistically significant relationship between punitive attitudes toward welfare and punishment. Furthermore, accounting for the respondents\u27 racial attitudes explains the bivariate relationship between welfare and punishment. Thus, racial attitudes seemingly link support for punitive approaches to opposition to welfare expenditures. The authors discuss the implications of this study for welfare and crime control policies by way of the conclusion

Isotope or mass encoding of combinatorial libraries

Background: Combinatorial chemistry using solid-phase synthesis is a rapidly developing technology that can result in a significant reduction in the time required to find and optimize lead compounds. The application of this approach to traditional medicinal chemistry has led to the construction of libraries of small organic molecules on resin beads. A major difficulty in developing large combinatorial libraries is the lack of a facile encoding and decoding methodology to identify active compounds.Results: Several encoding schemes are described which use the ability of mass spectrometry to ascertain isotopic distributions. Molecular tags are attached to resin beads in parallel or on the linker used for chemical library synthesis. The tags are encoded via a controlled ratio of a number of stable isotopes on the tagging molecules, and range from a single to a complex isotopic distribution.Conclusions: A novel coding scheme is described that is useful for the generation of large encoded combinatorial libraries. The code can be cleaved after assay and analyzed by mass spectrometry in an automated fashion. An important element of the combinatorial discovery process is the ability to extract the structure-activity relationship (SAR) information made available by library screening. The speed and sensitivity of the mass-encoding scheme has the potential to determine the full SAR for a given library

High Temperature Matter and Gamma Ray Spectra from Microscopic Black Holes

The relativistic viscous fluid equations describing the outflow of high temperature matter created via Hawking radiation from microscopic black holes are solved numerically for a realistic equation of state. We focus on black holes with initial temperatures greater than 100 GeV and lifetimes less than 6 days. The spectra of direct photons and photons from $\pi^0$ decay are calculated for energies greater than 1 GeV. We calculate the diffuse gamma ray spectrum from black holes distributed in our galactic halo. However, the most promising route for their observation is to search for point sources emitting gamma rays of ever-increasing energy.Comment: 33 pages, 13 figures, to be submitted to PR

Excitations in confined helium

We design models for helium in matrices like aerogel, Vycor or Geltech from a manifestly microscopic point of view. For that purpose, we calculate the dynamic structure function of 4He on Si substrates and between two Si walls as a function of energy, momentum transfer, and the scattering angle. The angle--averaged results are in good agreement with the neutron scattering data; the remaining differences can be attributed to the simplified model used here for the complex pore structure of the materials. A focus of the present work is the detailed identification of coexisting layer modes and bulk--like excitations, and, in the case of thick films, ripplon excitations. Involving essentially two--dimensional motion of atoms, the layer modes are sensitive to the scattering angle.Comment: Phys. Rev. B (2003, in press

Correlations and Fluctuations in High-Energy Nuclear Collisions

Nucleon correlations in the target and projectile nuclei are shown to reduce significantly the fluctuations in multiple nucleon-nucleon collisions, total multiplicity and transverse energy in relativistic heavy-ion collisions, in particular for heavy projectile and target. The interplay between cross-section fluctuations, from color transparency and opacity, and nuclear correlations is calculated and found to be able to account for large fluctuations in transverse energy spectra. Numerical implementation of correlations and cross-section fluctuations in Monte-Carlo codes is discussed.Comment: 30 pages, in Revtex, plus 4 figures. Figures and preprint can be obtained by mailing address to: [email protected]

Increasing Concentrations of 17β-Estradiol Has Differential Effects on Secretion of Luteinizing Hormone and Follicle-Stimulating Hormone and Amounts of mRNA for Gonadotropin Subunits during the Follicular Phase of the Bovine Estrous Cycle

The hypothesis tested was that 17β-estradiol (E2) would increase amounts of mRNA for α, LHβ, and FSHβ subunits during the follicular phase of the estrous cycle prior to the preovulatory surge of gonadotropins in cows. On Day 16 (Day 0 = estrus) of the estrous cycle, all cows were treated with prostaglandin F2α (PGF2α). Cows served as intact controls (CONT, n = 4) were ovariectomized (OVX, n = 5), or were ovariectomized and administered E2 (OVXE, n = 6) in increasing doses starting at the time of treatment with PGF2α. Cows were bled for 6 h before and for 40 h after PGF2α treatment to characterize pulsatile secretion of LH and FSH. Forty hours after PGF2α treatment, pituitaries were collected for evaluation of amounts of mRNA for α, LHβ, and FSHβ subunits. Amplitude of LH pulses was greater (p \u3c 0.05) in cows from the OVXE than from the CONT group. Concentrations of FSH were greater in cows from both the OVXE and OVX (p \u3c 0.01) groups than from the CONT group. Amounts of mRNA for α and FSHβ subunits were greater (p \u3c 0.01) in pituitaries of cows from the OVX than from the CONT or OVXE groups. Amounts of mRNA for LHP subunit in pituitaries of cows from the OVX group tended to be greater (p \u3c 0.08) than from the CONT group. Cows in the OVXE group tended (p \u3c 0.08) to have greater amounts of mRNA for FSHβ subunit than did CONT cows. Amounts of mRNA for α and LHβ subunits in cows from the OVXE and CONT groups did not differ (p \u3e 0.10). Pituitary weight and content of LH and FSH were not different (p \u3e 0.10) among cows of the different groups. Ovariectomy resulted in enhanced secretion of gonadotropins and increased amounts of mRNA for gonadotropin subunits above values detected in CONT cows. Ovariectomized cows administered E2, in follicular-phase patterns had amounts of mRNA for a and LHβ similar to those in CONT cows even though secretion of LH was enhanced in the OVXE group. We reject our hypothesis and conclude that E2 has a divergent role in regulation of gonadotropins. Release of LH is enhanced by E2, but E2 reduced mRNA for gonadotropin subunits (tended to reduce mRNA for FSHβ subunit) in ovariectomized cows to amounts detected in intact cows during the follicular phase of the bovine estrous cycle

Extinction of the Kapitza Anomaly for Phonons along the Surface Normal Direction

We have succeeded in extinguishing the anomalous Kapitza transmission of phonons whose wave vector is normal to a surface treated by conventional means and handled in air. In the same experiments, phonons approaching the surface with oblique wave vectors are anomalously transmitted. We argue that these results demonstrate that the Kapitza anomaly is due to surface defects which couple to the phonon strain field

Effects of 17β-Estradiol on Distribution of Pituitary Isoforms of Luteinizing Hormone and Follicle-Stimulating Hormone during the Follicular Phase of the Bovine Estrous Cycle

The objective of this study was to examine the influence of 17β-estradiol (E2) on distribution of LH and FSH isoforms during the follicular phase of the bovine estrous cycle prior to the preovulatory surges of LH and FSH. On Day 16 of the estrous cycle (Day 0 = estrus), intact controls (CONT; n = 4) were treated with prostaglandin F2α (PGF2α) to induce luteal regression and initiation of the follicular phase. Other cows were also treated with PGF2α and either ovariectomized (OVX; n = 5) or ovariectomized and given E2 implants (OVXE; n = 6) to mimic the pattern of increasing E2 concentrations during the follicular phase of the estrous cycle. Pituitaries were collected 40 h after treatment with PGF2α, or ovariectomy (0 h). Aliquots of pituitary extracts were chromatofocused on pH 10.5-4.0 gradients. The LH resolved into thirteen isoforms (designated A-L and S, beginning with the most basic form) while FSH resolved into nine isoforms (designated I-IX, beginning with the most basic form). The percentage of LH as isoform F (elution pH = 9.32 + 0.01) was greater (p \u3c 0.05) in the OVX group (48.5%) than in the OVXE group (45.0% ). LH isoforms I (elution pH = 6.98 ± 0.01) and J (elution pH = 6.48 ± 0.01) were more abundant (p \u3c 0.05) in cows from the OVXE (2.3 and 5.8%, respectively) than the OVX group (1.4 and 3.7%, respectively). Distribution of LH isoforms in cows from the three groups did not differ (p \u3e 0.10). Distribution of FSH isoforms were similar (p \u3e 0.05) among all groups. In summary, removal of the ovary (OVX) resulted in a slight increase in percentage of the basic LH isoform F, while removal of the ovary and administration of E2 (OVXE) in a pattern that mimicked increasing concentrations of E2 during the follicular phase of the estrous cycle resulted in a slight increase in the percentage of acidic LH isoforms (I and J). There was no influence of ovariectomy or treatment with E2 on distribution of FSH isoforms in the pituitary. Thus, gonadotropin heterogeneity does not appear to change significantly during the follicular phase of the bovine estrous cycle

Dynamics of liquid 4He in Vycor

We have measured the dynamic structure factor of liquid 4He in Vycor using neutron inelastic scattering. Well-defined phonon-roton (p-r) excitations are observed in the superfluid phase for all wave vectors 0.3 < Q < 2.15. The p-r energies and lifetimes at low temperature (T = 0.5 K) and their temperature dependence are the same as in bulk liquid 4He. However, the weight of the single p-r component does not scale with the superfluid fraction (SF) as it does in the bulk. In particular, we observe a p-r excitation between T_c = 1.952 K, where SF = 0, and T_(lambda)=2.172 K of the bulk. This suggests, if the p-r excitation intensity scales with the Bose condensate, that there is a separation of the Bose-Einstein condensation temperature and the superfluid transition temperature T_c of 4He in Vycor. We also observe a two-dimensional layer mode near the roton wave vector. Its dispersion is consistent with specific heat and SF measurements and with layer modes observed on graphite surfaces.Comment: 3 pages, 4 figure