Detecting Obfuscated Scripts With Machine Learning Techniques

Complex operating system administration tasks can be automated and simplified by using scripting languages. For the Windows operating system, one of the most commonly used scripting languages is PowerShell. The PowerShell scripting language provides vast functionality for the system administrators. At the same time, it leaves a large attack surface for adversaries to bypass the OS protections. Signature and supervised machine learning based intrusion detection systems (IDS) can be used for monitoring and detecting such malicious scripts. However, the detection can be evaded by obfuscating the scripts. As the next step in the defense, we can use obfuscation itself as a reliable sign of malicious code. This thesis investigates the methods of detecting obfuscated PowerShell scripts with machine learning (ML) techniques. We trained the logistic regression, random forest and gradient boosting models on a balanced dataset. To generate the dataset, unobfuscated scripts were taken from open-source projects and they were obfuscated by open-source obfuscators. We then selected the most important independent features for obfuscation detection. The ML methods were compared using their ROC curves and AUC values. The best method turns out to be the gradient boosting model, which has the AUC close to one for the used dataset. Moreover, the model can classify a script faster than in one millisecond. Thus, the model can replace existing approaches to obfuscation detection, and it can be used by antivirus vendors in the process of detecting malicious PowerShell scripts

Gene Expression Patterns in Myelodyplasia Underline the Role of Apoptosis and Differentiation in Disease Initiation and Progression

The myelodysplastic syndromes (MDS) are clonal stem cell disorders, characterized by ineffective and dysplastic hematopoiesis. The genetic and epigenetic pathways that determine disease stage and progression are largely unknown. In the current study we used gene expression microarray methodology to examine the gene expression differences between normal hematopoietic cells and hematopoietic cells from patients with MDS at different disease stages, using both unselected and CD34+ selected cells. Significant differences between normal and MDS hematopoietic cells were observed for several genes and pathways. Several genes promoting or opposing apoptosis were dysregulated in MDS cases, most notably MCL1 and EPOR. Progression from RA to RAEB(T) was associated with increased expression of several histone genes. In addition, the RAR-RXR pathway, critical for maintaining a balance between self-renewal and differentiation of hematopoietic stem cells, was found to be deregulated in hematopoietic cells from patients with advanced MDS compared to patients with refractory anemia. These findings provide new insights into the understanding of the pathophysiology and progression of MDS, and may guide to new targets for therapy. Taken together with previous published data, the present results also underscore the considerable complexity of the regulation of gene expression in MDS

Poor adherence to lifestyle recommendations in patients with coronary heart disease:results from the EUROASPIRE surveys

Aims  Despite the high use of cardioprotective medications, the risk factor control in patients with coronary heart disease (CHD) is still inadequate. Guidelines identify healthy lifestyles as equally important in secondary prevention as pharmacotherapy. Here, we describe reasons for poor lifestyle adherence from the patient’s perspective. Methods and results  In the EUROASPIRE IV and V surveys, 16 259 CHD patients were examined and interviewed during a study visit ≥6 months after hospital discharge. Data gathering was fully standardized. The Brief Illness Perception questionnaire was completed by a subsample of 2379 patients. Half of those who were smoking prior to hospital admission, were still smoking; 37% of current smokers had not attempted to quit and 51% was not considering to do so. The prevalence of obesity was 38%. Half of obese patients tried to lose weight in the past month and 61% considered weight loss in the following month. In relation to physical activity, 40% was on target with half of patients trying to do more everyday activities. Less than half had the intention to engage in planned exercise. Only 29% of all patients was at goal for all three lifestyle factors. The number of adverse lifestyles was strongly related to the way patients perceive their illness as threatening. Lifestyle modifications were more successful in those having participated in a cardiac rehabilitation and prevention programme. Patients indicated lack of self-confidence as the main barrier to change their unhealthy behaviour. Conclusion  Modern secondary prevention programmes should target behavioural change in all patients with adverse lifestyles

Ischaemic heart disease in the former Soviet Union 1990-2015 according to the Global Burden of Disease 2015 Study.

OBJECTIVE: The objective of this study was to compare ischaemic heart disease (IHD) mortality and risk factor burden across former Soviet Union (fSU) and satellite countries and regions in 1990 and 2015. METHODS: The fSU and satellite countries were grouped into Central Asian, Central European and Eastern European regions. IHD mortality data for men and women of any age were gathered from national vital registration, and age, sex, country, year-specific IHD mortality rates were estimated in an ensemble model. IHD morbidity and mortality burden attributable to risk factors was estimated by comparative risk assessment using population attributable fractions. RESULTS: In 2015, age-standardised IHD death rates in Eastern European and Central Asian fSU countries were almost two times that of satellite states of Central Europe. Between 1990 and 2015, rates decreased substantially in Central Europe (men -43.5% (95% uncertainty interval -45.0%, -42.0%); women -42.9% (-44.0%, -41.0%)) but less in Eastern Europe (men -5.6% (-9.0, -3.0); women -12.2% (-15.5%, -9.0%)). Age-standardised IHD death rates also varied within regions: within Eastern Europe, rates decreased -51.7% in Estonian men (-54.0, -47.0) but increased +19.4% in Belarusian men (+12.0, +27.0). High blood pressure and cholesterol were leading risk factors for IHD burden, with smoking, body mass index, dietary factors and ambient air pollution also ranking high. CONCLUSIONS: Some fSU countries continue to experience a high IHD burden, while others have achieved remarkable reductions in IHD mortality. Control of blood pressure, cholesterol and smoking are IHD prevention priorities

Exercise-Based Cardiac Rehabilitation in Twelve European Countries Results of the European Cardiac Rehabilitation Registry

AIM: Results from EuroCaReD study should serve as a benchmark to improve guideline adherence and treatment quality of cardiac rehabilitation (CR) in Europe. METHODS AND RESULTS: Data from 2.054 CR patients in 12 European countries were derived from 69 centres. 76% were male. Indication for CR differed between countries being predominantly ACS in Switzerland (79%), Portugal (62%) and Germany (61%), elective PCI in Greece (37%), Austria (36%) and Spain (32%), and CABG in Croatia and Russia (36%). A minority of patients presented with chronic heart failure (4%). At CR start, most patients already were under medication according to current guidelines for the treatment of CV risk factors. A wide range of CR programme designs was found (duration 3 to 24weeks; total number of sessions 30 to 196). Patient programme adherence after admission was high (85%). With reservations that eCRF follow-up data exchange remained incomplete, patient CV risk profiles experienced only small improvements. CR success as defined by an increase of exercise capacity >25W was significantly higher in young patients and those who were employed. Results differed by countries. After CR only 9% of patients were admitted to a structured post-CR programme. CONCLUSIONS: Clinical characteristics of CR patients, indications and programmes in Europe are different. Guideline adherence is poor. Thus, patient selection and CR programme designs should become more evidence-based. Routine eCRF documentation of CR results throughout European countries was not sufficient in its first application because of incomplete data exchange. Therefore better adherence of CR centres to minimal routine clinical standards is requested

Alcohol consumption patterns across Europe and adherence to the European guidelines in coronary patients : findings from the ESC-EORP EUROASPIRE V survey

Background and aims: Alcohol consumption is an important risk factor for cardiovascular morbidity and mortality worldwide. The highest levels of alcohol consumption are observed in Europe, where alcohol as contributing cause of coronary heart disease (CHD) is also most significant. We aimed to describe alcohol consumption patterns across European regions and adherence to the current guidelines in patients with a recent CHD event. Methods: The ESC-EORP survey (EUROASPIRE V) has been conducted in 2016-2017 at 131 centers in 27 Eu-ropean countries in 7350 patients with a recent CHD. Median alcohol consumption, as well as the proportion of abstainers and excessive drinkers (i.e. >70 g/week for women and >140 for men, as recommended by the European guidelines on cardiovascular prevention), was calculated for each region. To assess adherence to guidelines, proportions of participants who were advised to reduce excessive alcohol consumption and participants who were incorrectly not advised were calculated per region. Results: Mean age was 64 years (SD: 9.5), 75% were male. Abstention rates were 53% in males and 77% in females, whereas excessive drinking was reported by 9% and 5% of them, respectively. Overall, 57% of the participants were advised to reduce alcohol consumption. In the total population, 3% were incorrectly not advised, however, this percentage differed per region (range: 1%-9%). In regions where alcohol consumption was highest, participants were less often advised to reduce their consumption. Conclusion: In this EUROASPIRE V survey, the majority of CHD patients adhere to the current drinking guidelines, but substantial heterogeneity exists between European regions

Physical Rehabilitation Needs in the BRICS Nations from 1990 to 2017: Cross-National Analyses Using Data from the Global Burden of Disease Study

Background: This study analyzes the current and evolving physical rehabilitation needs of BRICS nations (Brazil, Russian Federation, India, China, South Africa), a coalition of large emergent economies increasingly important for global health. Methods: Secondary, cross-national analyses of data on Years Lived with Disability (YLDs) were extracted from the Global Burden of Disease Study 2017. Total physical rehabilitation needs, and those stratified per major condition groups are analyzed for the year 2017 (current needs), and for every year since 1990 (evolution over time). ANOVAs are used to detect significant yearly changes. Results: Total physical rehabilitation needs have increased significantly from 1990 to 2017 in each of the BRICS nations, in every metric analyzed (YLD Counts, YLDs per 100,000 people, and percentage of YLDs relevant to physical rehabilitation; all p < 0.01). Musculoskeletal & pain conditions were leading cause of physical rehabilitation needs across the BRICS nations but to varying degrees: from 36% in South Africa to 60% in Brazil. Country-specific trends include: 25% of South African needs were from HIV-related conditions (no other BRICS nation had more than 1%); India had both absolute and relative growths of pediatric rehabilitation needs (p < 0.01); China had an exponential growth in the per-capita needs from neurological and neoplastic conditions (p < 0.01; r2 = 0.97); Brazil had a both absolute and relative growth of needs coming from musculoskeletal & pain conditions (p < 0.01); and the Russian Federation had the highest neurological rehabilitation needs per capita in 2017 (over than three times those of India, South Africa or Brazil). Conclusions: total physical rehabilitation needs have been increasing in each of the BRICS nations, both in absolute and relative values. Apart from the common growing trend, each of the BRICS nations had own patterns for the amount, typology, and evolution of their physical rehabilitation needs, which must be taken into account while planning for health and physical rehabilitation programs, policies and resources

AML risk stratification models utilizing ELN-2017 guidelines and additional prognostic factors: a SWOG report.

Background: The recently updated European LeukemiaNet risk stratification guidelines combine cytogenetic abnormalities and genetic mutations to provide the means to triage patients with acute myeloid leukemia for optimal therapies. Despite the identification of many prognostic factors, relatively few have made their way into clinical practice. Methods: In order to assess and improve the performance of the European LeukemiaNet guidelines, we developed novel prognostic models using the biomarkers from the guidelines, age, performance status and select transcript biomarkers. The models were developed separately for mononuclear cells and viable leukemic blasts from previously untreated acute myeloid leukemia patients (discovery cohort, Results: Models using European LeukemiaNet guidelines were significantly associated with clinical outcomes and, therefore, utilized as a baseline for comparisons. Models incorporating age and expression of select transcripts with biomarkers from European LeukemiaNet guidelines demonstrated higher area under the curve and C-statistics but did not show a substantial improvement in performance in the validation cohort. Subset analyses demonstrated that models using only the European LeukemiaNet guidelines were a better fit for younger patients (age \u3c 55) than for older patients. Models integrating age and European LeukemiaNet guidelines visually showed more separation between risk groups in older patients. Models excluding results for Conclusions: While European LeukemiaNet guidelines remain a critical tool for triaging patients with acute myeloid leukemia, the findings illustrate the need for additional prognostic factors, including age, to improve risk stratification

Total cardiovascular or fatal events in people with type 2 diabetes and cardiovascular risk factors treated with dulaglutide in the REWIND trail:a post hoc analysis

Abstract Background The Researching cardiovascular Events with a Weekly INcretin in Diabetes (REWIND) double blind randomized trial demonstrated that weekly subcutaneous dulaglutide 1.5 mg, a glucagon like peptide-1 receptor agonist, versus matched placebo reduced the first outcome of major adverse cardiovascular event (MACE), cardiovascular death, nonfatal myocardial infarction or nonfatal stroke (594 versus 663 events) in 9901 persons with type 2 diabetes and either chronic cardiovascular disease or risk factors, and followed during 5.4 years. These findings were based on a time-to-first-event analysis and preclude relevant information on the burden of total major events occurring during the trial. This analysis reports on the total cardiovascular or fatal events in the REWIND participants Methods We compared the total incidence of MACE or non-cardiovascular deaths, and the total incidence of expanded MACE (MACE, unstable angina, heart failure or revascularization) or non-cardiovascular deaths between participants randomized to dulaglutide and those randomized to placebo. Incidences were expressed as number per 1000 person-years. Hazard ratios (HR) were calculated using the conditional time gap and proportional means models. Results Participants had a mean age of 66.2 years, 46.3% were women and 31% had previous cardiovascular disease. During the trial there were 1972 MACE or non-cardiovascular deaths and 3673 expanded MACE or non-cardiovascular deaths. The incidence of total MACE or non-cardiovascular deaths in the dulaglutide and placebo groups was 35.8 and 40.3 per 1000 person-years, respectively [absolute reduction = 4.5 per 1000 person-years; conditional time gap HR 0.90 (95% CI, 0.82–0.98) p = 0.020, and proportional means HR 0.89 (95% CI, 0.80–0.98) p = 0.022]. The incidence of total expanded MACE or non-cardiovascular deaths in the dulaglutide and placebo groups was 67.1 and 74.7 per 1000 person-years, respectively [absolute reduction = 7.6 per 1000 person-years; conditional time gap HR 0.93 (95% CI, 0.87–0.99) p = 0.023, and proportional means HR 0.90 (95% CI, 0.82–0.99) p = 0.028]. Conclusions These findings suggest that weekly subcutaneous dulaglutide reduced total cardiovascular or fatal event burden in people with type 2 diabetes at moderate cardiovascular risk. Clinical Trial Registration: https://www.clinicaltrials.gouv . Unique Identifier NCT01394952)