sec-certs: Examining the security certification practice for better vulnerability mitigation

Products certified under security certification frameworks such as Common Criteria undergo significant scrutiny during the costly certification process. Yet, critical vulnerabilities, including private key recovery (ROCA, Minerva, TPM-Fail...), get discovered in certified products with high assurance levels. Furthermore, assessing which certified products are impacted by such vulnerabilities is complicated due to the large amount of unstructured certification-related data and unclear relationships between the certificates. To address these problems, we conducted a large-scale automated analysis of Common Criteria and FIPS 140 certificates. We trained unsupervised models to learn which vulnerabilities from NIST's National Vulnerability Database impact existing certified products and how certified products reference each other. Our tooling automates the analysis of tens of thousands of certification-related documents, extracting machine-readable features where manual analysis is unattainable. Further, we identify the security requirements that are associated with products being affected by fewer and less severe vulnerabilities (on average). This indicates which aspects of certification correlate with higher security. We demonstrate how our tool can be used for better vulnerability mitigation on four case studies of known, high-profile vulnerabilities. All tools and continuously updated results are available at https://seccerts.org

Air Pollutants over Industrial and Non-Industrial Areas: Historical Concentration Estimates

Only a few researchers have addressed the issue of lifetime exposure related to air pollutant concentration. This study aims to develop a methodology to obtain the most reliable estimates of historical concentrations of air pollutants, which would be further applied to the long-term exposure evaluation. In particular, PM10, PM2.5, NO2, SO2, benzene, and B(a)P concentrations have been obtained. Data of monitored concentrations, model calculations, and subsequent implementation of several corrections based on previous work on temporal and spatial correlations of these substances in the air have been deployed. This work makes an original contribution to the field of meteorology and epidemiology because of this innovative technique to estimate the most reliable historical concentrations of air pollutants. The novelty of our work lies in the additional implications of this study because historical concentration data serve as input data for the construction of epidemiological associations. The approach is based primarily on the availability of monitoring results of air pollutants

Advancements in NORM metrology - Results and impact of the European joint research project MetroNORM

The results of the three years European Metrology Research Programme’s (EMRP) joint research project ‘Metrology for processing materials with high natural radioactivity’ (MetroNORM) are presented. In this project, metrologically sound novel instruments and procedures for laboratory and in-situ NORM activity measurements have been developed. Additionally, standard reference materials and sources for traceable calibration and improved decay data of natural radionuclides have been established.JRC.G.2-Standards for Nuclear Safety, Security and Safeguard

Ticagrelor in patients with diabetes and stable coronary artery disease with a history of previous percutaneous coronary intervention (THEMIS-PCI) : a phase 3, placebo-controlled, randomised trial

Background: Patients with stable coronary artery disease and diabetes with previous percutaneous coronary intervention (PCI), particularly those with previous stenting, are at high risk of ischaemic events. These patients are generally treated with aspirin. In this trial, we aimed to investigate if these patients would benefit from treatment with aspirin plus ticagrelor. Methods: The Effect of Ticagrelor on Health Outcomes in diabEtes Mellitus patients Intervention Study (THEMIS) was a phase 3 randomised, double-blinded, placebo-controlled trial, done in 1315 sites in 42 countries. Patients were eligible if 50 years or older, with type 2 diabetes, receiving anti-hyperglycaemic drugs for at least 6 months, with stable coronary artery disease, and one of three other mutually non-exclusive criteria: a history of previous PCI or of coronary artery bypass grafting, or documentation of angiographic stenosis of 50% or more in at least one coronary artery. Eligible patients were randomly assigned (1:1) to either ticagrelor or placebo, by use of an interactive voice-response or web-response system. The THEMIS-PCI trial comprised a prespecified subgroup of patients with previous PCI. The primary efficacy outcome was a composite of cardiovascular death, myocardial infarction, or stroke (measured in the intention-to-treat population). Findings: Between Feb 17, 2014, and May 24, 2016, 11 154 patients (58% of the overall THEMIS trial) with a history of previous PCI were enrolled in the THEMIS-PCI trial. Median follow-up was 3·3 years (IQR 2·8–3·8). In the previous PCI group, fewer patients receiving ticagrelor had a primary efficacy outcome event than in the placebo group (404 [7·3%] of 5558 vs 480 [8·6%] of 5596; HR 0·85 [95% CI 0·74–0·97], p=0·013). The same effect was not observed in patients without PCI (p=0·76, p interaction=0·16). The proportion of patients with cardiovascular death was similar in both treatment groups (174 [3·1%] with ticagrelor vs 183 (3·3%) with placebo; HR 0·96 [95% CI 0·78–1·18], p=0·68), as well as all-cause death (282 [5·1%] vs 323 [5·8%]; 0·88 [0·75–1·03], p=0·11). TIMI major bleeding occurred in 111 (2·0%) of 5536 patients receiving ticagrelor and 62 (1·1%) of 5564 patients receiving placebo (HR 2·03 [95% CI 1·48–2·76], p<0·0001), and fatal bleeding in 6 (0·1%) of 5536 patients with ticagrelor and 6 (0·1%) of 5564 with placebo (1·13 [0·36–3·50], p=0·83). Intracranial haemorrhage occurred in 33 (0·6%) and 31 (0·6%) patients (1·21 [0·74–1·97], p=0·45). Ticagrelor improved net clinical benefit: 519/5558 (9·3%) versus 617/5596 (11·0%), HR=0·85, 95% CI 0·75–0·95, p=0·005, in contrast to patients without PCI where it did not, p interaction=0·012. Benefit was present irrespective of time from most recent PCI. Interpretation: In patients with diabetes, stable coronary artery disease, and previous PCI, ticagrelor added to aspirin reduced cardiovascular death, myocardial infarction, and stroke, although with increased major bleeding. In that large, easily identified population, ticagrelor provided a favourable net clinical benefit (more than in patients without history of PCI). This effect shows that long-term therapy with ticagrelor in addition to aspirin should be considered in patients with diabetes and a history of PCI who have tolerated antiplatelet therapy, have high ischaemic risk, and low bleeding risk

Analysis of Outcomes in Ischemic vs Nonischemic Cardiomyopathy in Patients With Atrial Fibrillation A Report From the GARFIELD-AF Registry

IMPORTANCE Congestive heart failure (CHF) is commonly associated with nonvalvular atrial fibrillation (AF), and their combination may affect treatment strategies and outcomes