Can i take your subdomain? Exploring same-site attacks in the modern web

Related-domain attackers control a sibling domain of their target web application, e.g., as the result of a subdomain takeover. Despite their additional power over traditional web attackers, related-domain attackers received only limited attention from the research community. In this paper we define and quantify for the first time the threats that related-domain attackers pose to web application security. In particular, we first clarify the capabilities that related-domain attackers can acquire through different attack vectors, showing that different instances of the related-domain attacker concept are worth attention. We then study how these capabilities can be abused to compromise web application security by focusing on different angles, including cookies, CSP, CORS, postMessage, and domain relaxation. By building on this framework, we report on a large-scale security measurement on the top 50k domains from the Tranco list that led to the discovery of vulnerabilities in 887 sites, where we quantified the threats posed by related-domain attackers to popular web applications

From early stress to 12-month development in very preterm infants: Preliminary findings on epigenetic mechanisms and brain growth

Very preterm (VPT) infants admitted to Neonatal Intensive Care Unit (NICU) are at risk for altered brain growth and less-than-optimal socio-emotional development. Recent research suggests that early NICU-related stress contributes to socio-emotional impairments in VPT infants at 3 months through epigenetic regulation (i.e., DNA methylation) of the serotonin transporter gene (SLC6A4). In the present longitudinal study we assessed: (a) the effects of NICU-related stress and SLC6A4 methylation variations from birth to discharge on brain development at term equivalent age (TEA); (b) the association between brain volume at TEA and socio-emotional development (i.e., Personal-Social scale of Griffith Mental Development Scales, GMDS) at 12 months corrected age (CA). Twenty-four infants had complete data at 12-month-age. SLC6A4 methylation was measured at a specific CpG previously associated with NICU-related stress and socio-emotional stress. Findings confirmed that higher NICU-related stress associated with greater increase of SLC6A4 methylation at NICU discharge. Moreover, higher SLC6A4 discharge methylation was associated with reduced anterior temporal lobe (ATL) volume at TEA, which in turn was significantly associated with less-than-optimal GMDS Personal-Social scale score at 12 months CA. The reduced ATL volume at TEA mediated the pathway linking stress-related increase in SLC6A4 methylation at NICU discharge and socio-emotional development at 12 months CA. These findings suggest that early adversity-related epigenetic changes might contribute to the long-lasting programming of socio-emotional development in VPT infants through epigenetic regulation and structural modifications of the developing brain

The Assertive Brain : Anterior Cingulate Phosphocreatine plus Creatine Levels Correlate With Self-Directedness in Healthy Adolescents

Despite various advances in the study of the neurobiological underpinnings of personality traits, the specific neural correlates associated with character and temperament traits are not yet fully understood. Therefore, this study aims to fill this gap by exploring the biochemical basis of personality, which is explored with the temperament and character inventory (TCI), during brain development in a sample of adolescents. Twenty-six healthy adolescents (aged between 13 and 21 years; 9 males and 18 females) with behavioral and emotional problems underwent a TCI evaluation and a 3T single-voxel proton magnetic resonance spectroscopy (1H MRS) acquisition of the anterior cingulate cortex (ACC). Absolute metabolite levels were estimated using LCModel: significant correlations between metabolite levels and selective TCI scales were identified. Specifically, phosphocreatine plus creatine (PCr+Cre) significantly correlated with self-directedness, positively, and with a self-transcendence (ST), negatively, while glycerophosphocholine plus phosphocholine (GPC+PC) and myo-inositol negatively correlated with ST. To the best of our knowledge, this is the first study reporting associations of brain metabolites with personality traits in adolescents. Therefore, our results represent a step forward for personality neuroscience within the study of biochemical systems and brain structures

The future of Cybersecurity in Italy: Strategic focus area

This volume has been created as a continuation of the previous one, with the aim of outlining a set of focus areas and actions that the Italian Nation research community considers essential. The book touches many aspects of cyber security, ranging from the definition of the infrastructure and controls needed to organize cyberdefence to the actions and technologies to be developed to be better protected, from the identification of the main technologies to be defended to the proposal of a set of horizontal actions for training, awareness raising, and risk management

"BIBLIOTECA BRAIDENSE DI MILANO Rinforzo strutturale della volta con un sistema composito innovativo "

L’intervento di restauro della volta della “Sala dei Manoscritti”, finanziato con appositi fondi del Ministero per i Beni e le Attività Culturali (Direzione Generale per i Beni Librari e gli Istituti Culturali), fu concepito principalmente a seguito della riapertura di dissesti statici, sicuramente di antica data, come poteva dedursi dai depositi di polveri dentro le fessure delle crepe, tornati ad evidenziarsi a seguito di opere condotte in prossimità delle cantine per la realizzazione di una nuova centrale termica interrrata, che causò, nella Sala in questione, distacco di piccoli brani di intonaco, vecchie sigillature e polvere. L’intervento si divise così in due fasi, strettamente correlate: una di consolidamento statico ed una di restauro dell’apparato decorativo; entrambe le fasi furono valutate in considerazione delle difficoltà di allestimento di qualsiasi cantiere in un sito così particolare sia sotto il profilo dell’utilizzo corrente, legato alla sua funzione, sia alla presenza di arredi di pregio e di ciò, ancor più di pregio, che in tali arredi era contenuto. Quindi la convivenza del cantiere con la funzione della biblioteca, evitando di conseguenza, di spostare arredi, libri, e documenti antichi, pur salvaguardandoli dalla presenza del cantiere stesso, fu uno dei principali problemi che venne posto sul piano operativo

Brain mitochondrial impairment in early-onset Parkinson's disease with or without PINK1 mutation

Background: PINK1 mutations are likely to affect mitochondrial function. The objective of this study was to study brain mitochondrial function in patients with early-onset Parkinson's disease, with or without PINK1 mutations. Methods: We investigated brain intracellular pH, mitochondrial activity, and energetics with functional magnetic resonance spectroscopy in patients with early-onset Parkinson's disease with PINK1 mutations (n = 10), early-onset Parkinson's disease without PINK1 mutations (n = 10), and healthy sex- and age-matched subjects (n = 20). We measured peak areas of phosphocreatine and beta adenosine triphosphate. Results: The EOPD- group had normal PCr + \u3b2ATP contents at rest (P = NS) and under activation (P = NS), but reduced contents during recovery (P < 0.001). The EOPD+ group had abnormal PCr + \u3b2ATP contents at rest (P < 0.001) and during activation (P < 0.001); during recovery, the contents only partially recovered (P < 0.001). Brain intracellular pH alterations were more severe with EOPD+ than with EOPD 12. Conclusions: Brain mitochondrial impairments were similar in early-onset Parkinson's disease without PINK1 mutations and late-onset Parkinson's disease. However, mitochondrial impairments were more severe in early-onset Parkinson's disease with PINK1 mutations

Deep learning for the prediction of treatment response in depression

Background: Mood disorders are characterized by heterogeneity in severity, symptoms and treatment response. The possibility of selecting the correct therapy on the basis of patient-specific biomarker may be a considerable step towards personalized psychiatry. Machine learning methods are gaining increasing popularity in the medical field. Once trained, the possibility to consider single patients in the analyses instead of whole groups makes them particularly appealing to investigate treatment response. Deep learning, a branch of machine learning, lately gained attention, due to its effectiveness in dealing with large neuroimaging data and to integrate them with clinical, molecular or -omics biomarkers. Methods: In this mini-review, we summarize studies that use deep learning methods to predict response to treatment in depression. We performed a bibliographic search on PUBMED, Google Scholar and Web of Science using the terms “psychiatry”, “mood disorder”, “depression”, “treatment”, “deep learning”, “neural networks”. Only studies considering patients’ datasets are considered. Results: Eight studies met the inclusion criteria. Accuracies in prediction of response to therapy were considerably high in all studies, but results may be not easy to interpret. Limitations: The major limitation for the current studies is the small sample size, which constitutes an issue for machine learning methods. Conclusions: Deep learning shows promising results in terms of prediction of treatment response, often outperforming regression methods and reaching accuracies of around 80%. This could be of great help towards personalized medicine. However, more efforts are needed in terms of increasing datasets size and improved interpretability of result