NGBPA Next Generation BotNet Protocol Analysis

Abstract The command & control (c&c) protocols of botnets are moving away from plaintext IRC communicationt towards encrypted and obfuscated protocols. In gen-eral, these protocols are proprietary. Therefore, standard network monitoring tools are not able to extract the commands from the collected traffic. However, if we want to monitor these new botnets, we need to know how their protocol decryption works. In this paper we present a novel approach in malware analysis for locating the en-cryption and decryption functions in botnet programs. This information can be used to extract these functions for c&c protocols. We illustrate the applicability of our approach by a sample from the Kraken botnet. Using our approach, we were able to identify the encryption routine within minutes. We then extracted the c&c protocol encryption and decryption. Both are presented in this paper.

Knowledge management infrastructure to support quality improvement: A qualitative study of maternity services in four European hospitals

The influence of multilevel healthcare system interactions on clinical quality improvement (QI) is still largely unexplored. Through the lens of knowledge management (KM) theory, this study explores how hospital managers can enhance the conditions for clinical QI given the specific multilevel and professional interactions in various healthcare systems. The research used an in-depth multilevel analysis in maternity departments in four purposively sampled European hospitals (Portugal, England, Norway and Sweden). The study combines analysis of macro-level policy documents and regulations with semi-structured interviews (96) and non-participant observations (193 hours) of hospital and clinical managers and clinical staff in maternity departments. There are four main conclusions: First, the unique multilevel configuration of national healthcare policy, hospital management and clinical professionals influence the development of clinical QI efforts. Second, these different configurations provide various and often insufficient support and guidance which affect professionals’ action strategies in QI efforts. Third, hospital managers’ opportunities and capabilities for developing a consistent KM infrastructure with reinforcing enabling conditions which merge national policies and guidelines with clinical reality is crucial for clinical QI. Fourth, understanding these interrelationships provides an opportunity for improvement of the KM infrastructure for hospital managers through tailored interventions

Neurochemical Aftermath of Repetitive Mild Traumatic Brain Injury

IMPORTANCE: Evidence is accumulating that repeated mild traumatic brain injury (mTBI) incidents can lead to persistent, long-term debilitating symptoms and in some cases a progressive neurodegenerative condition referred to as chronic traumatic encephalopathy. However, to our knowledge, there are no objective tools to examine to which degree persistent symptoms after mTBI are caused by neuronal injury. OBJECTIVE: To determine whether persistent symptoms after mTBI are associated with brain injury as evaluated by cerebrospinal fluid biochemical markers for axonal damage and other aspects of central nervous system injury. DESIGN, SETTINGS, AND PARTICIPANTS: A multicenter cross-sectional study involving professional Swedish ice hockey players who have had repeated mTBI, had postconcussion symptoms for more than 3 months, and fulfilled the criteria for postconcussion syndrome (PCS) according to the Diagnostic and Statistical Manual of Mental Disorders (Fourth Edition) matched with neurologically healthy control individuals. The participants were enrolled between January 2014 and February 2016. The players were also assessed with Rivermead Post Concussion Symptoms Questionnaire and magnetic resonance imaging. MAIN OUTCOMES AND MEASURES: Neurofilament light protein, total tau, glial fibrillary acidic protein, amyloid β, phosphorylated tau, and neurogranin concentrations in cerebrospinal fluid. RESULTS: A total of 31 participants (16 men with PCS; median age, 31 years; range, 22-53 years; and 15 control individuals [11 men and 4 women]; median age, 25 years; range, 21-35 years) were assessed. Of 16 players with PCS, 9 had PCS symptoms for more than 1 year, while the remaining 7 returned to play within a year. Neurofilament light proteins were significantly increased in players with PCS for more than 1 year (median, 410 pg/mL; range, 230-1440 pg/mL) compared with players whose PCS resolved within 1 year (median, 210 pg/mL; range, 140-460 pg/mL) as well as control individuals (median 238 pg/mL, range 128-526 pg/mL; P = .04 and P = .02, respectively). Furthermore, neurofilament light protein concentrations correlated with Rivermead Post Concussion Symptoms Questionnaire scores and lifetime concussion events (ρ = 0.58, P = .02 and ρ = 0.52, P = .04, respectively). Overall, players with PCS had significantly lower cerebrospinal fluid amyloid-β levels compared with control individuals (median, 1094 pg/mL; range, 845-1305 pg/mL; P = .05). CONCLUSIONS AND RELEVANCE: Increased cerebrospinal fluid neurofilament light proteins and reduced amyloid β were observed in patients with PCS, suggestive of axonal white matter injury and amyloid deposition. Measurement of these biomarkers may be an objective tool to assess the degree of central nervous system injury in individuals with PCS and to distinguish individuals who are at risk of developing chronic traumatic encephalopathy

Exponential distribution of long heart beat intervals during atrial fibrillation and their relevance for white noise behaviour in power spectrum

The statistical properties of heart beat intervals of 130 long-term surface electrocardiogram recordings during atrial fibrillation (AF) are investigated. We find that the distribution of interbeat intervals exhibits a characteristic exponential tail, which is absent during sinus rhythm, as tested in a corresponding control study with 72 healthy persons. The rate of the exponential decay lies in the range 3-12 Hz and shows diurnal variations. It equals, up to statistical uncertainties, the level of the previously uncovered white noise part in the power spectrum, which is also characteristic for AF. The overall statistical features can be described by decomposing the intervals into two statistically independent times, where the first one is associated with a correlated process with 1/f noise characteristics, while the second one belongs to an uncorrelated process and is responsible for the exponential tail. It is suggested to use the rate of the exponential decay as a further parameter for a better classification of AF and for the medical diagnosis. The relevance of the findings with respect to a general understanding of AF is pointed out

Security Analysis of Sensor Networks

Wireless sensor networks distribute a common sensing and computing task within the large number of participants that use wireless communication. Such networks require a self-organizing and energy-aware set of protocols. Several protocols have beed designed for such environments, however to make certain proof of their secureness, their formal analysis is required. In our article, we show an analysis framework capable of proving security properties of such protocols. Our methodology is based on the CSP process algebra. We will demonstrate its power by giving an attack possibility for an existing protocol, and the extensibility of the model will also be pointed

Participatory Mapping to Address Neighborhood Level Data Deficiencies for food Security Assessment in Southeastern Virginia, USA

Background: Food is not equitably available. Deficiencies and generalizations limit national datasets, food security assessments, and interventions. Additional neighborhood level studies are needed to develop a scalable and transferable process to complement national and internationally comparative data sets with timely, granular, nuanced data. Participatory geographic information systems (PGIS) offer a means to address these issues by digitizing local knowledge. Methods: The objectives of this study were two-fold: (i) identify granular locations missing from food source and risk datasets and (ii) examine the relation between the spatial, socio-economic, and agency contributors to food security. Twenty-nine subject matter experts from three cities in Southeastern Virginia with backgrounds in food distribution, nutrition management, human services, and associated research engaged in a participatory mapping process. Results: Results show that publicly available and other national datasets are not inclusive of non-traditional food sources or updated frequently enough to reflect changes associated with closures, expansion, or new programs. Almost 6 percent of food sources were missing from publicly available and national datasets. Food pantries, community gardens and fridges, farmers markets, child and adult care programs, and meals served in community centers and homeless shelters were not well represented. Over 24 km2 of participant identified need was outside United States Department of Agriculture low income, low access areas. Economic, physical, and social barriers to food security were interconnected with transportation limitations. Recommendations address an international call from development agencies, countries, and world regions for intervention methods that include systemic and generational issues with poverty, incorporate non-traditional spaces into food distribution systems, incentivize or regulate healthy food options in stores, improve educational opportunities, increase data sharing. Conclusions: Leveraging city and regional agency as appropriate to capitalize upon synergistic activities was seen as critical to achieve these goals, particularly for non-traditional partnership building. To address neighborhood scale food security needs in Southeastern Virginia, data collection and assessment should address both environment and utilization issues from consumer and producer perspectives including availability, proximity, accessibility, awareness, affordability, cooking capacity, and preference. The PGIS process utilized to facilitate information sharing about neighborhood level contributors to food insecurity and translate those contributors to intervention strategies through discussion with local subject matter experts and contextualization within larger scale food systems dynamics is transferable

‘O sibling, where art thou?’ – a review of avian sibling recognition with respect to the mammalian literature

Avian literature on sibling recognition is rare compared to that developed by mammalian researchers. We compare avian and mammalian research on sibling recognition to identify why avian work is rare, how approaches differ and what avian and mammalian researchers can learn from each other. Three factors: (1) biological differences between birds and mammals, (2) conceptual biases and (3) practical constraints, appear to influence our current understanding. Avian research focuses on colonial species because sibling recognition is considered adaptive where ‘mixing potential’ of dependent young is high; research on a wider range of species, breeding systems and ecological conditions is now needed. Studies of acoustic recognition cues dominate avian literature; other types of cues (e.g. visual, olfactory) deserve further attention. The effect of gender on avian sibling recognition has yet to be investigated; mammalian work shows that gender can have important influences. Most importantly, many researchers assume that birds recognise siblings through ‘direct familiarisation’ (commonly known as associative learning or familiarity); future experiments should also incorporate tests for ‘indirect familiarisation’ (commonly known as phenotype matching). If direct familiarisation proves crucial, avian research should investigate how periods of separation influence sibling discrimination. Mammalian researchers typically interpret sibling recognition in broad functional terms (nepotism, optimal outbreeding); some avian researchers more successfully identify specific and testable adaptive explanations, with greater relevance to natural contexts. We end by reporting exciting discoveries from recent studies of avian sibling recognition that inspire further interest in this topic

Correlated fragile site expression allows the identification of candidate fragile genes involved in immunity and associated with carcinogenesis

Common fragile sites (cfs) are specific regions in the human genome that are particularly prone to genomic instability under conditions of replicative stress. Several investigations support the view that common fragile sites play a role in carcinogenesis. We discuss a genome-wide approach based on graph theory and Gene Ontology vocabulary for the functional characterization of common fragile sites and for the identification of genes that contribute to tumour cell biology. CFS were assembled in a network based on a simple measure of correlation among common fragile site patterns of expression. By applying robust measurements to capture in quantitative terms the non triviality of the network, we identified several topological features clearly indicating departure from the Erdos-Renyi random graph model. The most important outcome was the presence of an unexpected large connected component far below the percolation threshold. Most of the best characterized common fragile sites belonged to this connected component. By filtering this connected component with Gene Ontology, statistically significant shared functional features were detected. Common fragile sites were found to be enriched for genes associated to the immune response and to mechanisms involved in tumour progression such as extracellular space remodeling and angiogenesis. Our results support the hypothesis that fragile sites serve a function; we propose that fragility is linked to a coordinated regulation of fragile genes expression.Comment: 18 pages, accepted for publication in BMC Bioinformatic

A model to predict cardiovascular events in patients with newly diagnosed Wegener's granulomatosis and microscopic polyangiitis

Objective To create a prognostic tool to quantify the 5-year cardiovascular (CV) risk in patients with newly diagnosed Wegener's granulomatosis (WG) and microscopic polyangiitis (MPA) without premorbid CV disease. Methods We reviewed CV outcomes during the long-term followup of patients in the first 4 European Vasculitis Study Group (EUVAS) trials of WG and MPA. CV events were defined as CV death, stroke, myocardial infarction, coronary artery bypass graft, or percutaneous coronary intervention. Logistic regression was performed to create a model to predict the absolute risk of a CV event. The model was tested using the Wegener's Granulomatosis Etanercept Trial (WGET) cohort. Results Seventy-four (13.8%) of 535 patients with 5 years of followup from the EUVAS trials had at least 1 CV event: 33 (11.7%) of 281 WG versus 41 (16.1%) of 254 MPA. The independent determinants of CV outcomes were older age (odds ratio [OR] 1.45, 95% confidence interval [95% CI] 1.11–1.90), diastolic hypertension (OR 1.97, 95% CI 0.98–3.95), and positive proteinase 3 (PR3) antineutrophil cytoplasmic antibody (ANCA) status (OR 0.39, 95% CI 0.20–0.74). The model was validated using the WGET cohort (area under the receiver operating characteristic curve of 0.80). Conclusion Within 5 years of diagnosis of WG or MPA, 14% of patients will have a CV event. We have constructed and validated a tool to quantify the risk of a CV event based on age, diastolic hypertension, and PR3 ANCA status in patients without prior CV disease. In patients with vasculitis, PR3 ANCA is associated with a reduced CV risk compared to myeloperoxidase ANCA or negative ANCA status.Peer Reviewedhttp://deepblue.lib.umich.edu/bitstream/2027.42/83751/1/20433_ftp.pd

Greater Number of Weekly Stairs Climbed is Associated With Lower Low Back Pain Prevalence Among Female but not Male Physical Therapists

INTRODUCTION: Certain cardiovascular health benefits of stair climbing are now widely accepted, but no prior studies have as yet been found linking the quantity of stairs climbed to low back pain (LBP) morbidity. Low back pain is a common musculoskeletal impairment, and research has begun to show an association between LBP and gluteus maximus (GM) weakness. With stair climbing being the activity which most activates GM, the aim of the present research was to assess the relationship between stair ambulation and LBP prevalence. The hypothesis of this cross-sectional study was that individuals with LBP would report a significantly lower numbers of stair flights climbed compared with individuals without LBP. METHODS: A survey tool was developed and distributed via email to a convenience sample of orthopedic physical therapists. Survey items included information regarding medical history, physical activity, workplace, and LBP factors, using a one-year prevalence period. RESULTS: A total of 363 respondents took the survey and, after application of exclusion criteria, 248 records remained in our final sample. When analyzing all genders together, non LBP (NLBP) respondents reported a mean of 51.62 flights climbed per week; and LBP respondents reported 37.82 flights climbed per week, with P = 0.077. When males and females were analyzed separately, a statistically significant difference in mean number of flights of stairs climbed was found among female respondents (61.51 flights climbed for NLBP and 35.61 flights climbed for LBP females; P = 0.031). When analyzed based on chronicity of LBP, an even stronger association between stairs climbed and LBP prevalence was found for female respondents with acute LBP (P = 0.009). CONCLUSIONS: More weekly stairs climbed was associated with a lower LBP prevalence among females, especially with respect to acute LBP. Randomized, longitudinal research is, however, required to confirm a relationship between stair climbing and LBP