Detecting and characterizing lateral phishing at scale

We present the first large-scale characterization of lateral phishing attacks, based on a dataset of 113 million employee-sent emails from 92 enterprise organizations. In a lateral phishing attack, adversaries leverage a compromised enterprise account to send phishing emails to other users, benefit-ting from both the implicit trust and the information in the hijacked user's account. We develop a classifier that finds hundreds of real-world lateral phishing emails, while generating under four false positives per every one-million employee-sent emails. Drawing on the attacks we detect, as well as a corpus of user-reported incidents, we quantify the scale of lateral phishing, identify several thematic content and recipient targeting strategies that attackers follow, illuminate two types of sophisticated behaviors that attackers exhibit, and estimate the success rate of these attacks. Collectively, these results expand our mental models of the 'enterprise attacker' and shed light on the current state of enterprise phishing attacks

Multi-MetaRing fairness control in a WDM folded-bus architecture

The paper deals with fairness issues in a slotted, single-hop, WDM (Wavelength Division Multiplexing) optical architecture, based on a folded bus topology, previously proposed as a broadband access system or as a metro network. The peculiar fairness problem arising in this folded bus based architecture is addressed and an extension of the MetaRing protocol to the WDM scenario, named Multi-MetaRing, is proposed. Feasible Multi-MetaRing strategies are defined and analyzed. Both fair access and high aggregate network throughput can be achieved with a low complexity distributed access protocol by properly handling node access through all WDM channel

Transform-domain analysis of packet delay in network nodes with QoS-aware scheduling

In order to differentiate the perceived QoS between traffic classes in heterogeneous packet networks, equipment discriminates incoming packets based on their class, particularly in the way queued packets are scheduled for further transmission. We review a common stochastic modelling framework in which scheduling mechanisms can be evaluated, especially with regard to the resulting per-class delay distribution. For this, a discrete-time single-server queue is considered with two classes of packet arrivals, either delay-sensitive (1) or delay-tolerant (2). The steady-state analysis relies on the use of well-chosen supplementary variables and is mainly done in the transform domain. Secondly, we propose and analyse a new type of scheduling mechanism that allows precise control over the amount of delay differentiation between the classes. The idea is to introduce N reserved places in the queue, intended for future arrivals of class 1

Fast and efficient neural conversion of human hematopoietic cells

Neurons obtained directly from human somatic cells hold great promise for disease modeling and drug screening. Available protocols rely on overexpression of transcription factors using integrative vectors and are often slow, complex, and inefficient. We report a fast and efficient approach for generating induced neural cells (iNCs) directly from human hematopoietic cells using Sendai virus. Upon SOX2 and c-MYC expression, CD133-positive cord blood cells rapidly adopt a neuroepithelial morphology and exhibit high expansion capacity. Under defined neurogenic culture conditions, they express mature neuronal markers and fire spontaneous action potentials that can be modulated with neurotransmitters. SOX2 and c-MYC are also sufficient to convert peripheral blood mononuclear cells into iNCs. However, the conversion process is less efficient and resulting iNCs have limited expansion capacity and electrophysiological activity upon differentiation. Our study demonstrates rapid and efficient generation of iNCs from hematopoietic cells while underscoring the impact of target cells on conversion efficiency

Comparing Presenting Clinical Features in 48 Children With Microscopic Polyangiitis to 183 Children Who Have Granulomatosis With Polyangiitis (Wegener's) : an ARChiVe Cohort Study

OBJECTIVE: To uniquely classify children with microscopic polyangiitis (MPA), to describe their demographic characteristics, presenting clinical features, and initial treatments in comparison to patients with granulomatosis with polyangiitis (Wegener's) (GPA). METHODS: The European Medicines Agency (EMA) classification algorithm was applied by computation to categorical data from patients recruited to the ARChiVe (A Registry for Childhood Vasculitis: e-entry) cohort, with the data censored to November 2015. The EMA algorithm was used to uniquely distinguish children with MPA from children with GPA, whose diagnoses had been classified according to both adult- and pediatric-specific criteria. Descriptive statistics were used for comparisons. RESULTS: In total, 231 of 440 patients (64% female) fulfilled the classification criteria for either MPA (n\u2009=\u200948) or GPA (n\u2009=\u2009183). The median time to diagnosis was 1.6 months in the MPA group and 2.1 months in the GPA group (ranging to 39 and 73 months, respectively). Patients with MPA were significantly younger than those with GPA (median age 11 years versus 14 years). Constitutional features were equally common between the groups. In patients with MPA compared to those with GPA, pulmonary manifestations were less frequent (44% versus 74%) and less severe (primarily, hemorrhage, requirement for supplemental oxygen, and pulmonary failure). Renal pathologic features were frequently found in both groups (75% of patients with MPA versus 83% of patients with GPA) but tended toward greater severity in those with MPA (primarily, nephrotic-range proteinuria, requirement for dialysis, and end-stage renal disease). Airway/eye involvement was absent among patients with MPA, because these GPA-defining features preclude a diagnosis of MPA within the EMA algorithm. Similar proportions of patients with MPA and those with GPA received combination therapy with corticosteroids plus cyclophosphamide (69% and 78%, respectively) or both drugs in combination with plasmapheresis (19% and 22%, respectively). Other treatments administered, ranging in decreasing frequency from 13% to 3%, were rituximab, methotrexate, azathioprine, and mycophenolate mofetil. CONCLUSION: Younger age at disease onset and, perhaps, both gastrointestinal manifestations and more severe kidney disease seem to characterize the clinical profile in children with MPA compared to those with GPA. Delay in diagnosis suggests that recognition of these systemic vasculitides is suboptimal. Compared with adults, initial treatment regimens in children were comparable, but the complete reversal of female-to-male disease prevalence ratios is a provocative finding