Applying Bag of System Calls for Anomalous Behavior Detection of Applications in Linux Containers

In this paper, we present the results of using bags of system calls for learning the behavior of Linux containers for use in anomaly-detection based intrusion detection system. By using system calls of the containers monitored from the host kernel for anomaly detection, the system does not require any prior knowledge of the container nature, neither does it require altering the container or the host kernel.Comment: Published version available on IEEE Xplore (http://ieeexplore.ieee.org/document/7414047/) arXiv admin note: substantial text overlap with arXiv:1611.0305

A complete quasiclassical map for the dynamics of interacting fermions

We present a strategy for mapping the dynamics of a fermionic quantum system to a set of classical dynamical variables. The approach is based on imposing the correspondence relation between the commutator and the Poisson bracket, preserving Heisenberg's equation of motion for one-body operators. In order to accommodate the effect of two-body terms, we further impose quantization on the spin-dependent occupation numbers in the classical equations of motion, with a parameter that is determined self-consistently. Expectation values for observables are taken with respect to an initial quasiclassical distribution that respects the original quantization of the occupation numbers. The proposed classical map becomes complete under the evolution of quadratic Hamiltonians and is extended for all even order observables. We show that the map provides an accurate description of the dynamics for an interacting quantum impurity model in the coulomb blockade regime, at both low and high temperatures. The numerical results are aided by a novel importance sampling scheme that employs a reference system to reduce significantly the sampling effort required to converge the classical calculations

Response theory for nonequilibrium steady-states of open quantum systems

We introduce a response theory for open quantum systems within nonequilibrium steady-states subject to a Hamiltonian perturbation. Working in the weak system-bath coupling regime, our results are derived within the Lindblad-Gorini-Kossakowski-Sudarshan formalism. We find that the response of the system to a small perturbation is not simply related to a correlation function within the system, unlike traditional linear response theory in closed systems or expectations from the fluctuation-dissipation theorem. In limiting cases, when the perturbation is small relative to the coupling to the surroundings or when it does not lead to a change of the eigenstructure of the system, a perturbative expansion exists where the response function is related to a sum of a system correlation functions and additional forces induced by the surroundings. Away from these limiting regimes however, the secular approximation results in a singular response that cannot be captured within the traditional approach, but can be described by reverting to a microscopic Hamiltonian description. These findings are illustrated by explicit calculations in coupled qubits and anharmonic oscillators in contact with bosonic baths at different temperatures

The anatomy of exhumed river-channel belts: Bedform to belt‐scale river kinematics of the Ruby Ranch Member, Cretaceous Cedar Mountain Formation, Utah, USA

Many published interpretations of ancient fluvial systems have relied on observations of extensive outcrops of thick successions. This paper, in contrast, demonstrates that a regional understanding of palaeoriver kinematics, depositional setting and sedimentation rates can be interpreted from local sedimentological measurements of bedform and barform strata. Dune and bar strata, channel planform geometry and bed topography are measured within exhumed fluvial strata exposed as ridges in the Ruby Ranch Member of the Cretaceous Cedar Mountain Formation, Utah, USA. The ridges are composed of lithified stacked channel belts, representing at least five or six re‐occupations of a single‐strand channel. Lateral sections reveal well‐preserved barforms constructed of subaqueous dune cross‐sets. The topography of palaeobarforms is preserved along the top surface of the outcrops. Comparisons of the channel‐belt centreline to local palaeotransport directions indicate that channel planform geometry was preserved through the re‐occupations, rather than being obscured by lateral migration. Rapid avulsions preserved the state of the active channel bed and its individual bars at the time of abandonment. Inferred minimum sedimentation durations for the preserved elements, inferred from cross‐set thickness distributions and assumed bedform migration rates, vary within a belt from one to ten days. Using only these local sedimentological measurements, the depositional setting is interpreted as a fluvial megafan, given the similarity in river kinematics. This paper provides a systematic methodology for the future synthesis of vertical and planview data, including the drone‐equipped 2020 Mars Rover mission, to exhumed fluvial and deltaic strata

The effect of tobacco control policies on smoking prevalence and smoking-attributable deaths. Findings from the Netherlands SimSmoke Tobacco Control Policy Simulation Model

Aim To develop a simulation model projecting the effect of tobacco control policies in the Netherlands on smoking prevalence and smoking-attributable deaths. Design, setting and participants Netherlands SimSmoke-an adapted version of the SimSmoke simulation model of tobacco control policy-uses population, smoking rates and tobacco control policy data for the Netherlands to predict the effect of seven types of policies: taxes, smoke-free legislation, mass media, advertising bans, health warnings, cessation treatment and youth access policies. Measurements Outcome measures were smoking prevalence and smoking-attributable deaths. Findings With a comprehensive set of policies, as recommended by MPOWER, smoking prevalence can be decreased by asmuch as 21% in the first year, increasing to a 35% reduction in the next 20 years and almost 40% by 30 years. By 2040, 7706 deaths can be averted in that year alone with the stronger set of policies. Without effective tobacco control policies, almost a million lives will be lost to tobacco-related diseases between 2011 and 2040. Of those, 145 000 can be saved with a comprehensive tobacco control package. Conclusions Smoking prevalence and smoking-attributable deaths in the Netherlands can be reduced substantially through tax increases, smoke-free legislation, high-intensity media campaigns, stronger advertising bans and health warnings, comprehensive cessation treatment and youth access laws. The implementation of these FCTC/ MPOWER recommended policies could be expected to show similar or even larger relative reductions in smoking prevalence in other countries which currently have weak policies

Absence of Coulomb Blockade in the Anderson Impurity Model at the Symmetric Point

In this work, we investigate the characteristics of the electric current in the so-called symmetric Anderson impurity model. We study the nonequilibrium model using two complementary approximate methods, the perturbative quantum master equation approach to the reduced density matrix, and a self-consistent equation of motion approach to the nonequilibrium Green's function. We find that at a particular symmetry point, an interacting Anderson impurity model recovers the same steady-state current as an equivalent non-interacting model, akin a two-band resonant level model. We show this in the Coulomb blockade regime for both high and low temperatures, where either the approximate master equation approach and the Green's function method provide accurate results for the current. We conclude that the steady-state current in the symmetric Anderson model at this regime does not encode characteristics of a many-body interacting system

The technology prescription: linking telecare and informatics by using a need-led paradigm

This paper summarizes a current study examining the availability, appropriateness and acceptability of a technologically dependable healthcare provision to both service users and staff. An interface between the Electronic Patient Record (EPR) and future home care technology (Telecare) is suggested in the form of a ‘technology prescription’. It is argued that appropriately prescribed technology will enable people to benefit from a modern, evidence-based service, which promotes a proactive means of addressing and preventing future health and care needs. The paper argues that technological innovations in care must not be perceived as a threat to the partnerships necessary in achieving maximum health gains, but rather be an aid to a patient centred clinical encounter