Verifying Policy Enforcers

Policy enforcers are sophisticated runtime components that can prevent failures by enforcing the correct behavior of the software. While a single enforcer can be easily designed focusing only on the behavior of the application that must be monitored, the effect of multiple enforcers that enforce different policies might be hard to predict. So far, mechanisms to resolve interferences between enforcers have been based on priority mechanisms and heuristics. Although these methods provide a mechanism to take decisions when multiple enforcers try to affect the execution at a same time, they do not guarantee the lack of interference on the global behavior of the system. In this paper we present a verification strategy that can be exploited to discover interferences between sets of enforcers and thus safely identify a-priori the enforcers that can co-exist at run-time. In our evaluation, we experimented our verification method with several policy enforcers for Android and discovered some incompatibilities.Comment: Oliviero Riganelli, Daniela Micucci, Leonardo Mariani, and Yli\`es Falcone. Verifying Policy Enforcers. Proceedings of 17th International Conference on Runtime Verification (RV), 2017. (to appear

Flexible and Robust Privacy-Preserving Implicit Authentication

Implicit authentication consists of a server authenticating a user based on the user's usage profile, instead of/in addition to relying on something the user explicitly knows (passwords, private keys, etc.). While implicit authentication makes identity theft by third parties more difficult, it requires the server to learn and store the user's usage profile. Recently, the first privacy-preserving implicit authentication system was presented, in which the server does not learn the user's profile. It uses an ad hoc two-party computation protocol to compare the user's fresh sampled features against an encrypted stored user's profile. The protocol requires storing the usage profile and comparing against it using two different cryptosystems, one of them order-preserving; furthermore, features must be numerical. We present here a simpler protocol based on set intersection that has the advantages of: i) requiring only one cryptosystem; ii) not leaking the relative order of fresh feature samples; iii) being able to deal with any type of features (numerical or non-numerical). Keywords: Privacy-preserving implicit authentication, privacy-preserving set intersection, implicit authentication, active authentication, transparent authentication, risk mitigation, data brokers.Comment: IFIP SEC 2015-Intl. Information Security and Privacy Conference, May 26-28, 2015, IFIP AICT, Springer, to appea

<i>Lrig1</i> expression identifies airway basal cells with high proliferative capacity and restricts lung squamous cell carcinoma growth

Lung squamous cell carcinoma (LUSC) accounts for a significant proportion of cancer deaths worldwide, and is preceded by the appearance of progressively disorganised pre-invasive lesions in the airway epithelium. Yet the biological mechanisms underlying progression of pre-invasive lesions into invasive LUSC are not fully understood. LRIG1 is downregulated in pre-invasive airway lesions and invasive LUSC tumours and this correlates with decreased lung cancer patient survival.Using an Lrig1 knock-in reporter mouse and human airway epithelial cells collected at bronchoscopy, we show that during homeostasis LRIG1 is heterogeneously expressed in the airway epithelium. In basal airway epithelial cells, the suspected cell of origin of LUSC, LRIG1 identifies a subpopulation of progenitor cells with higher in vitro proliferative and self-renewal potential in both the mouse and human. Using the N-nitroso-tris-chloroethylurea (NTCU)-induced murine model of LUSC, we find that Lrig1 loss-of-function leads to abnormally high cell proliferation during the earliest stages of pre-invasive disease and to the formation of significantly larger invasive tumours, suggesting accelerated disease progression.Together, our findings identify LRIG1 as a marker of basal airway progenitor cells with high proliferative potential and as a regulator of pre-invasive lung cancer progression. This work highlights the clinical relevance of LRIG1 and the potential of the NTCU-induced LUSC model for functional assessment of candidate tumour suppressors and oncogenes

The RhoA transcriptional program in pre-T cells

The GTPase RhoA is essential for the development of pre-T cells in the thymus. To investigate the mechanisms used by RhoA to control thymocyte development we have used Affymetrix gene profiling to identify RhoA regulated genes in T cell progenitors. The data show that RhoA plays a specific and essential role in pre-T cells because it is required for the expression of transcription factors of the Egr-1 and AP-1 families that have critical functions in thymocyte development. Loss of RhoA function in T cell progenitors causes a developmental block that pheno-copies the consequence of losing pre-TCR expression in Recombinase gene 2 (Rag2) null mice. Transcriptional profiling reveals both common and unique gene targets for RhoA and the pre-TCR indicating that RhoA participates in the pre-TCR induced transcriptional program but also mediates pre-TCR independent gene transcription

Ablation of β1 integrin in mammary epithelium reveals a key role for integrin in glandular morphogenesis and differentiation

Integrin-mediated adhesion regulates the development and function of a range of tissues; however, little is known about its role in glandular epithelium. To assess the contribution of β1 integrin, we conditionally deleted its gene in luminal epithelia during different stages of mouse mammary gland development and in cultured primary mammary epithelia. Loss of β1 integrin in vivo resulted in impaired alveologenesis and lactation. Cultured β1 integrin–null cells displayed abnormal focal adhesion function and signal transduction and could not form or maintain polarized acini. In vivo, epithelial cells became detached from the extracellular matrix but remained associated with each other and did not undergo overt apoptosis. β1 integrin–null mammary epithelial cells did not differentiate in response to prolactin stimulation because of defective Stat5 activation. In mice where β1 integrin was deleted after the initiation of differentiation, fewer defects in alveolar morphology occurred, yet major deficiencies were also observed in milk protein and milk fat production and Stat5 activation, indicating a permissive role for β1 integrins in prolactin signaling. This study demonstrates that β1 integrin is critical for the alveolar morphogenesis of a glandular epithelium and for maintenance of its differentiated function. Moreover, it provides genetic evidence for the cooperation between integrin and cytokine signaling pathways

Hydroxychloroquine prescription trends and predictors for excess dosing per recent ophthalmology guidelines

Background Hydroxychloroquine (HCQ) retinopathy may be more common than previously recognized; recent ophthalmology guidelines have revised recommendations from ideal body weight (IBW)-based dosing to actual body weight (ABW)-based dosing. However, contemporary HCQ prescribing trends in the UK remain unknown. Methods We examined a UK general population database to investigate HCQ dosing between 2007 and 2016. We studied trends of excess HCQ dosing per ophthalmology guidelines (defined by exceeding 6.5 mg/kg of IBW and 5.0 mg/kg of ABW) and determined their independent predictors using multivariable logistic regression analyses. Results Among 20,933 new HCQ users (78% female), the proportions of initial HCQ excess dosing declined from 40% to 36% using IBW and 38% to 30% using ABW, between 2007 and 2016. Among these, 47% of women were excess-dosed (multivariable OR 12.52; 95% CI 10.99–14.26) using IBW and 38% (multivariable OR 1.98; 95% CI,1.81–2.15) using ABW. Applying IBW, 37% of normal and 44% of obese patients were excess-dosed; however, applying ABW, 53% of normal and 10% of obese patients were excess-dosed (multivariable ORs = 1.61 and 0.1 (reference = normal); both p < 0.01). Long-term HCQ users showed similar excess dosing. Conclusion A substantial proportion of HCQ users in the UK, particularly women, may have excess HCQ dosing per the previous or recent weight-based guidelines despite a modest decline in recent years. Over half of normal-BMI individuals were excess-dosed per the latest guidelines. This implies the potential need to reduce dosing for many patients but also calls for further research to establish unifying evidence-based safe and effective dosing strategies

Cancer mortality and morbidity among plutonium workers at the Sellafield plant of British Nuclear Fuels

The mortality of all 14 319 workers employed at the Sellafield plant of British Nuclear Fuels between 1947 and 1975 was studied up to the end of 1992, and cancer incidence was examined from 1971 to 1986, in relation to their exposures to plutonium and to external radiation. The cancer mortality rate was 5% lower than that of England and Wales and 3% less than that of Cumbria. The significant excesses of deaths from cancer of the pleura and thyroid found in an earlier study persist with further follow-up (14 observed, 4.0 expected for pleura; 6 observed, 2.2 expected for thyroid). All of the deaths from pleural cancer were among radiation workers. For neither site was there a significant association between the risk of the cancer and accumulated radiation dose. There were significant deficits of deaths from cancers of mouth and pharynx, liver and gall bladder, and larynx and leukaemia when compared with the national rates. Among all radiation workers, there was a significant positive association between accumulated external radiation dose and mortality from cancers of ill-defined and secondary sites (10-year lag, P = 0.04), leukaemia (no lag, P = 0.03; 2-year lag, P = 0.05), multiple myeloma (20-year lag, P = 0.02), all lymphatic and haematopoietic cancers (20-year lag, P = 0.03) and all causes of death combined (20-year lag, P = 0.008). Among plutonium workers, there were significant excesses of deaths from cancer of the breast (6 observed, 2.6 expected) and ill-defined and secondary cancers (29 observed, 20.1 expected). No significant positive trends were observed between the risk of deaths from cancers of any specific site, or all cancers combined, and cumulative plutonium and external radiation doses. For no cancer site was there a significant excess of cancer registrations compared with rates for England and Wales. Analysis of trends in cancer incidence showed significant increases in risk with cumulative plutonium plus external radiation doses for all lymphatic and haematopoietic neoplasms for 0-, 10- and 20-year lag periods. Taken as a whole, our findings do not suggest that workers at Sellafield who have been exposed to plutonium are at an overall significantly increased risk of cancer compared with other radiation workers. © 1999 Cancer Research Campaig

Benefits and risks of the hormetic effects of dietary isothiocyanates on cancer prevention

The isothiocyanate (ITC) sulforaphane (SFN) was shown at low levels (1-5 µM) to promote cell proliferation to 120-143% of the controls in a number of human cell lines, whilst at high levels (10-40 µM) it inhibited such cell proliferation. Similar dose responses were observed for cell migration, i.e. SFN at 2.5 µM increased cell migration in bladder cancer T24 cells to 128% whilst high levels inhibited cell migration. This hormetic action was also found in an angiogenesis assay where SFN at 2.5 µM promoted endothelial tube formation (118% of the control), whereas at 10-20 µM it caused significant inhibition. The precise mechanism by which SFN influences promotion of cell growth and migration is not known, but probably involves activation of autophagy since an autophagy inhibitor, 3-methyladenine, abolished the effect of SFN on cell migration. Moreover, low doses of SFN offered a protective effect against free-radical mediated cell death, an effect that was enhanced by co-treatment with selenium. These results suggest that SFN may either prevent or promote tumour cell growth depending on the dose and the nature of the target cells. In normal cells, the promotion of cell growth may be of benefit, but in transformed or cancer cells it may be an undesirable risk factor. In summary, ITCs have a biphasic effect on cell growth and migration. The benefits and risks of ITCs are not only determined by the doses, but are affected by interactions with Se and the measured endpoint