Minerva: A File-Based Ransomware Detector

Ransomware is a rapidly evolving type of malware designed to encrypt user files on a device, making them inaccessible in order to exact a ransom. Ransomware attacks resulted in billions of dollars in damages in recent years and are expected to cause hundreds of billions more in the next decade. With current state-of-the-art process-based detectors being heavily susceptible to evasion attacks, no comprehensive solution to this problem is available today. This paper presents Minerva, a new approach to ransomware detection. Unlike current methods focused on identifying ransomware based on process-level behavioral modeling, Minerva detects ransomware by building behavioral profiles of files based on all the operations they receive in a time window. Minerva addresses some of the critical challenges associated with process-based approaches, specifically their vulnerability to complex evasion attacks. Our evaluation of Minerva demonstrates its effectiveness in detecting ransomware attacks, including those that are able to bypass existing defenses. Our results show that Minerva identifies ransomware activity with an average accuracy of 99.45% and an average recall of 99.66%, with 99.97% of ransomware detected within 1 second.Comment: 19 pages, 3 figure

Introduzione

Not availabl

Reweighting NNPDFs: the W lepton asymmetry

We present a method for incorporating the information contained in new datasets into an existing set of parton distribution functions without the need for refitting. The method involves reweighting the ensemble of parton densities through the computation of the chi-square to the new dataset. We explain how reweighting may be used to assess the impact of any new data or pseudodata on parton densities and thus on their predictions. We show that the method works by considering the addition of inclusive jet data to a DIS+DY fit, and comparing to the refitted distribution. We then use reweighting to determine the impact of recent high statistics lepton asymmetry data from the D0 experiment on the NNPDF2.0 parton set. We find that the D0 inclusive muon and electron data are perfectly compatible with the rest of the data included in the NNPDF2.0 analysis and impose additional constraints on the large-x d/u ratio. The more exclusive D0 electron datasets are however inconsistent both with the other datasets and among themselves, suggesting that here the experimental uncertainties have been underestimated.Comment: 36 pages, 22 figures: errors in Eqns.12,36,37 corrected and parts of Figs.1,6,10,13,15,19 replace

A first unbiased global NLO determination of parton distributions and their uncertainties

We present a determination of the parton distributions of the nucleon from a global set of hard scattering data using the NNPDF methodology: NNPDF2.0. Experimental data include deep-inelastic scattering with the combined HERA-I dataset, fixed target Drell-Yan production, collider weak boson production and inclusive jet production. Next-to-leading order QCD is used throughout without resorting to K-factors. We present and utilize an improved fast algorithm for the solution of evolution equations and the computation of general hadronic processes. We introduce improved techniques for the training of the neural networks which are used as parton parametrization, and we use a novel approach for the proper treatment of normalization uncertainties. We assess quantitatively the impact of individual datasets on PDFs. We find very good consistency of all datasets with each other and with NLO QCD, with no evidence of tension between datasets. Some PDF combinations relevant for LHC observables turn out to be determined rather more accurately than in any other parton fit.Comment: 86 pages, 41 figures. PDF sets available from http://sophia.ecm.ub.es/nnpdf/nnpdf_pdfsets.htm and from LHAPDF. Final version to be published in Nucl. Phys. B. Various typos corrected and small clarifications added, fig. 4 added, extended discussion of data consistency especially in sect 5.1 and 5.

I.S.Mu.L.T. Achilles Tendon Ruptures Guidelines

This work provides easily accessible guidelines for the diagnosis, treatment and rehabilitation of Achilles tendon ruptures. These guidelines could be considered as recommendations for good clinical practice developed through a process of systematic review of the literature and expert opinion, to improve the quality of care for the individual patient and rationalize the use of resources. This work is divided into two sessions: 1) questions about hot topics; 2) answers to the questions following Evidence Based Medicine principles. Despite the frequency of the pathology andthe high level of satisfaction achieved in treatment of Achilles tendon ruptures, a global consensus is lacking. In fact, there is not a uniform treatment and rehabilitation protocol used for Achilles tendon ruptures

Benefit-risk profile of cytoreductive drugs along with antiplatelet and antithrombotic therapy after transient ischemic attack or ischemic stroke in myeloproliferative neoplasms

We analyzed 597 patients with myeloproliferative neoplasms (MPN) who presented transient ischemic attacks (TIA, n = 270) or ischemic stroke (IS, n = 327). Treatment included aspirin, oral anticoagulants, and cytoreductive drugs. The composite incidence of recurrent TIA and IS, acute myocardial infarction (AMI), and cardiovascular (CV) death was 4.21 and 19.2%, respectively at one and five years after the index event, an estimate unexpectedly lower than reported in the general population. Patients tended to replicate the first clinical manifestation (hazard ratio, HR: 2.41 and 4.41 for recurrent TIA and IS, respectively); additional factors for recurrent TIA were previous TIA (HR: 3.40) and microvascular disturbances (HR: 2.30); for recurrent IS arterial hypertension (HR: 4.24) and IS occurrence after MPN diagnosis (HR: 4.47). CV mortality was predicted by age over 60 years (HR: 3.98), an index IS (HR: 3.61), and the occurrence of index events after MPN diagnosis (HR: 2.62). Cytoreductive therapy was a strong protective factor (HR: 0.24). The rate of major bleeding was similar to the general population (0.90 per 100 patient-years). In conclusion, the long-term clinical outcome after TIA and IS in MPN appears even more favorable than in the general population, suggesting an advantageous benefit-risk profile of antithrombotic and cytoreductive treatment

Reweighting a parton shower using a neural network: the final-state case

The use of QCD calculations that include the resummation of soft-collinear logarithms via parton-shower algorithms is currently not possible in PDF fits due to the high computational cost of evaluating observables for each variation of the PDFs. Unfortunately the interpolation methods that are otherwise applied to overcome this issue are not readily generalised to all-order parton-shower contributions. Instead, we propose an approximation based on training a neural network to predict the effect of varying the input parameters of a parton shower on the cross section in a given observable bin, interpolating between the variations of a training data set. This first publication focuses on providing a proof-of-principle for the method, by varying the shower dependence on $\alpha_\text{S}$ for both a simplified shower model and a complete shower implementation for three different observables, the leading emission scale, the number of emissions and the Thrust event shape. The extension to the PDF dependence of the initial-state shower evolution that is needed for the application to PDF fits is left to a forthcoming publication.Comment: additional references added in introductio

Prednisone vs high-dose dexamethasone in newly diagnosed adult primary immune thrombocytopenia: a randomized trial

A debate exists regarding which type of corticosteroids (standard-dose prednisone [PDN] or high-dose dexamethasone [HD-DXM]) is the best first-line treatment for adult patients with newly diagnosed untreated primary immune thrombocytopenia (pITP). An ad hoc study compared PDN with HD-DXM in newly diagnosed untreated patients with pITP (aged >= 18 but <= 80 years, platelet count of <= 20 or >20 but <50 x 10(9)/L, and bleeding score of >= 8). Patients were randomised to receive PDN 1 mg/kg per day from days 0 to 28 (Arm A) or HD-DXM 40 mg per day for 4 days, every 14 days, for 3 consecutive courses (Arm B). Fifty-nine of 113 patients (52.2%) were randomized to Arm A and 54 of 113 (47.8%) to Arm B. In evaluable patients, total initial responses (complete response [CR], partial response [PR], minimal response [MR]) were 44 of 56 (78.57%) in Arm A and 46 of 49 (93.88%) in Arm B at days 42 and 46, respectively (P = 0.0284). Total final responses (at day 180 from initial response) were 26 of 43 (60.47%) in Arm A and 23 of 39 (58.97%) in Arm B (P = 0.8907). Total persistent responses (at 12 months from initial response) were 25 of 31 (80.65%) in Arm A and 20 of 36 (55.56%) in Arm B (P = 0.0292). Seven relapses occurred. Median follow-up was 44.4 months. Overall survival was 100% at 48 months, overall disease-free survival was 81.11% at 48 months from day 180. PDN and pulsed HD-DXM were well tolerated; HD-DXM allows effective initial responses but less long lasting than PDN. This trial was registered at www.clinicaltrials.gov as #NCT00657410

Sleep in the Human Hippocampus: A Stereo-EEG Study

Background. There is compelling evidence indicating that sleep plays a crucial role in the consolidation of new declarative, hippocampus-dependent memories. Given the increasing interest in the spatiotemporal relationships between cortical and hippocampal activity during sleep, this study aimed to shed more light on the basic features of human sleep in the hippocampus. Methodology/Principal Findings. We recorded intracerebral stereo-EEG directly from the hippocampus and neocortical sites in five epileptic patients undergoing presurgical evaluations. The time course of classical EEG frequency bands during the first three NREM-REM sleep cycles of the night was evaluated. We found that delta power shows, also in the hippocampus, the progressive decrease across sleep cycles, indicating that a form of homeostatic regulation of delta activity is present also in this subcortical structure. Hippocampal sleep was also characterized by: i) a lower relative power in the slow oscillation range during NREM sleep compared to the scalp EEG; ii) a flattening of the time course of the very low frequencies (up to 1 Hz) across sleep cycles, with relatively high levels of power even during REM sleep; iii) a decrease of power in the beta band during REM sleep, at odds with the typical increase of power in the cortical recordings. Conclusions/Significance. Our data imply that cortical slow oscillation is attenuated in the hippocampal structures during NREM sleep. The most peculiar feature of hippocampal sleep is the increased synchronization of the EEG rhythms during REM periods. This state of resonanc