ESCAPADE: Encryption-type-ransomeware: system call based pattern detection

Encryption-type ransomware has risen in prominence lately as the go-to malware for threat actors aiming to compromise Android devices. In this paper, we present a ransomware detection technique based on behaviours observed in the system calls performed by the malware. We identify and present some common high-level system call behavioural patterns targeted at encryption-type ransomware and evaluate these patterns. We further present our repeatable and extensible methodology for extracting the system call log and patterns

Simultaneous Analysis of Multiple Mycobacterium tuberculosis Knockdown Mutants In Vitro and In Vivo

Mycobacterium tuberculosis (Mtb) represents one of the most persistent bacterial threats to human health and new drugs are needed to limit its impact. Conditional knockdown mutants can help validate new drug targets, but the analysis of individual mutants is laborious and time consuming. Here, we describe quantitative DNA tags (qTags) and their use to simultaneously analyze conditional Mtb knockdown mutants that allowed silencing the glyoxylate and methylcitrate cycles (via depletion of isocitrate lyase, ICL), the serine protease Rv3671c, and the core subunits of the mycobacterial proteasome, PrcB and PrcA. The impact of gene silencing in multi-strain cultures was determined by measuring the relative abundance of mutant-specific qTags with real-time PCR. This achieved accurate quantification over a broad range of qTag abundances and depletion of ICL, Rv3671c, or PrcBA resulted in the expected impairment of growth of Mtb with butyrate as the primary carbon source, survival during oxidative stress, acid stress and starvation. The impact of depleting ICL, Rv3671c, or PrcBA in multi-strain mouse infections was analyzed with two approaches. We first measured the relative abundance of mutant-specific qTags in total chromosomal DNA isolated from bacteria that were recovered from infected lungs on agar plates. We then developed a two-step amplification procedure, which allowed us to measure the abundances of individual mutants directly in infected lung tissue. Both strategies confirmed that inactivation of Rv3671c and PrcBA severely reduced persistence of Mtb in mice. The multi-strain infections furthermore suggested that silencing ICL not only prevented growth of Mtb during acute infections but also prevented survival of Mtb during chronic infections. Analyses of the ICL knockdown mutant in single-strain infections confirmed this and demonstrated that silencing of ICL during chronic infections impaired persistence of Mtb to the extent that the pathogen was cleared from the lungs of most mice

Evaluating the Sensitivity of Mycobacterium tuberculosis to Biotin Deprivation Using Regulated Gene Expression

In the search for new drug targets, we evaluated the biotin synthetic pathway of Mycobacterium tuberculosis (Mtb) and constructed an Mtb mutant lacking the biotin biosynthetic enzyme 7,8-diaminopelargonic acid synthase, BioA. In biotin-free synthetic media, ΔbioA did not produce wild-type levels of biotinylated proteins, and therefore did not grow and lost viability. ΔbioA was also unable to establish infection in mice. Conditionally-regulated knockdown strains of Mtb similarly exhibited impaired bacterial growth and viability in vitro and in mice, irrespective of the timing of transcriptional silencing. Biochemical studies further showed that BioA activity has to be reduced by approximately 99% to prevent growth. These studies thus establish that de novo biotin synthesis is essential for Mtb to establish and maintain a chronic infection in a murine model of TB. Moreover, these studies provide an experimental strategy to systematically rank the in vivo value of potential drug targets in Mtb and other pathogens

VapC Toxins from Mycobacterium tuberculosis Are Ribonucleases that Differentially Inhibit Growth and Are Neutralized by Cognate VapB Antitoxins

The chromosome of Mycobacterium tuberculosis (Mtb) encodes forty seven toxin-antitoxin modules belonging to the VapBC family. The role of these modules in the physiology of Mtb and the function(s) served by their expansion are unknown. We investigated ten vapBC modules from Mtb and the single vapBC from M. smegmatis. Of the Mtb vapCs assessed, only Rv0549c, Rv0595c, Rv2549c and Rv2829c were toxic when expressed from a tetracycline-regulated promoter in M. smegmatis. The same genes displayed toxicity when conditionally expressed in Mtb. Toxicity of Rv2549c in M. smegmatis correlated with the level of protein expressed, suggesting that the VapC level must exceed a threshold for toxicity to be observed. In addition, the level of Rv2456 protein induced in M. smegmatis was markedly lower than Rv2549c, which may account for the lack of toxicity of this and other VapCs scored as ‘non-toxic’. The growth inhibitory effects of toxic VapCs were neutralized by expression of the cognate VapB as part of a vapBC operon or from a different chromosomal locus, while that of non-cognate antitoxins did not. These results demonstrated a specificity of interaction between VapCs and their cognate VapBs, a finding corroborated by yeast two-hybrid analyses. Deletion of selected vapC or vapBC genes did not affect mycobacterial growth in vitro, but rendered the organisms more susceptible to growth inhibition following toxic VapC expression. However, toxicity of ‘non-toxic’ VapCs was not unveiled in deletion mutant strains, even when the mutation eliminated the corresponding cognate VapB, presumably due to insufficient levels of VapC protein. Together with the ribonuclease (RNase) activity demonstrated for Rv0065 and Rv0617 – VapC proteins with similarity to Rv0549c and Rv3320c, respectively – these results suggest that the VapBC family potentially provides an abundant source of RNase activity in Mtb, which may profoundly impact the physiology of the organism

A Survey on the Security and the Evolution of Osmotic and Catalytic Computing for 5G Networks

The 5G networks have the capability to provide high compatibility for the new applications, industries, and business models. These networks can tremendously improve the quality of life by enabling various use cases that require high data-rate, low latency, and continuous connectivity for applications pertaining to eHealth, automatic vehicles, smart cities, smart grid, and the Internet of Things (IoT). However, these applications need secure servicing as well as resource policing for effective network formations. There have been a lot of studies, which emphasized the security aspects of 5G networks while focusing only on the adaptability features of these networks. However, there is a gap in the literature which particularly needs to follow recent computing paradigms as alternative mechanisms for the enhancement of security. To cover this, a detailed description of the security for the 5G networks is presented in this article along with the discussions on the evolution of osmotic and catalytic computing-based security modules. The taxonomy on the basis of security requirements is presented, which also includes the comparison of the existing state-of-the-art solutions. This article also provides a security model, "CATMOSIS", which idealizes the incorporation of security features on the basis of catalytic and osmotic computing in the 5G networks. Finally, various security challenges and open issues are discussed to emphasize the works to follow in this direction of research.Comment: 34 pages, 7 tables, 7 figures, Published In 5G Enabled Secure Wireless Networks, pp. 69-102. Springer, Cham, 201

Prokayrotic Ubiquitin-Like Protein (Pup) Proteome of Mycobacterium tuberculosis

Prokaryotic ubiquitin-like protein (Pup) in Mycobacterium tuberculosis (Mtb) is the first known post-translational small protein modifier in prokaryotes, and targets several proteins for degradation by a bacterial proteasome in a manner akin to ubiquitin (Ub) mediated proteolysis in eukaryotes. To determine the extent of pupylation in Mtb, we used tandem affinity purification to identify its “pupylome”. Mass spectrometry identified 55 out of 604 purified proteins with confirmed pupylation sites. Forty-four proteins, including those with and without identified pupylation sites, were tested as substrates of proteolysis in Mtb. Under steady state conditions, the majority of the test proteins did not accumulate in degradation mutants, suggesting not all targets of pupylation are necessarily substrates of the proteasome under steady state conditions. Four proteins implicated in Mtb pathogenesis, Icl (isocitrate lyase), Ino1 (inositol-1-phosphate synthase), MtrA (Mtb response regulator A) and PhoP (phosphate response regulator P), showed altered levels in degradation defective Mtb. Icl, Ino1 and MtrA accumulated in Mtb degradation mutants, suggesting these proteins are targeted to the proteasome. Unexpectedly, PhoP was present in wild type Mtb but undetectable in the degradation mutants. Taken together, these data demonstrate that pupylation regulates numerous proteins in Mtb and may not always lead to degradation

The NOD/RIP2 Pathway Is Essential for Host Defenses Against Chlamydophila pneumoniae Lung Infection

Here we investigated the role of the Nod/Rip2 pathway in host responses to Chlamydophila pneumoniae–induced pneumonia in mice. Rip2−/− mice infected with C. pneumoniae exhibited impaired iNOS expression and NO production, and delayed neutrophil recruitment to the lungs. Levels of IL-6 and IFN-γ levels as well as KC and MIP-2 levels in bronchoalveolar lavage fluid (BALF) were significantly decreased in Rip2−/− mice compared to wild-type (WT) mice at day 3. Rip2−/− mice showed significant delay in bacterial clearance from the lungs and developed more severe and chronic lung inflammation that continued even on day 35 and led to increased mortality, whereas WT mice cleared the bacterial load, recovered from acute pneumonia, and survived. Both Nod1−/− and Nod2−/− mice also showed delayed bacterial clearance, suggesting that C. pneumoniae is recognized by both of these intracellular receptors. Bone marrow chimera experiments demonstrated that Rip2 in BM-derived cells rather than non-hematopoietic stromal cells played a key role in host responses in the lungs and clearance of C. pneumoniae. Furthermore, adoptive transfer of WT macrophages intratracheally was able to rescue the bacterial clearance defect in Rip2−/− mice. These results demonstrate that in addition to the TLR/MyD88 pathway, the Nod/Rip2 signaling pathway also plays a significant role in intracellular recognition, innate immune host responses, and ultimately has a decisive impact on clearance of C. pneumoniae from the lungs and survival of the infectious challenge

The changing global distribution and prevalence of canine transmissible venereal tumour.

BACKGROUND: The canine transmissible venereal tumour (CTVT) is a contagious cancer that is naturally transmitted between dogs by the allogeneic transfer of living cancer cells during coitus. CTVT first arose several thousand years ago and has been reported in dog populations worldwide; however, its precise distribution patterns and prevalence remain unclear. RESULTS: We analysed historical literature and obtained CTVT prevalence information from 645 veterinarians and animal health workers in 109 countries in order to estimate CTVT's former and current global distribution and prevalence. This analysis confirmed that CTVT is endemic in at least 90 countries worldwide across all inhabited continents. CTVT is estimated to be present at a prevalence of one percent or more in dogs in at least 13 countries in South and Central America as well as in at least 11 countries in Africa and 8 countries in Asia. In the United States and Australia, CTVT was reported to be endemic only in remote indigenous communities. Comparison of current and historical reports of CTVT indicated that its prevalence has declined in Northern Europe, possibly due to changes in dog control laws during the nineteenth and twentieth centuries. Analysis of factors influencing CTVT prevalence showed that presence of free-roaming dogs was associated with increased CTVT prevalence, while dog spaying and neutering were associated with reduced CTVT prevalence. Our analysis indicated no gender bias for CTVT and we found no evidence that animals with CTVT frequently harbour concurrent infectious diseases. Vincristine was widely reported to be the most effective therapy for CTVT. CONCLUSIONS: Our results provide a survey of the current global distribution of CTVT, confirming that CTVT is endemic in at least 90 countries worldwide. Additionally, our analysis highlights factors that continue to modify CTVT's prevalence around the world and implicates free-roaming dogs as a reservoir for the disease. Our analysis also documents the disappearance of the disease from the United Kingdom during the twentieth century, which appears to have been an unintentional result of the introduction of dog control policies.This is the author's accepted manuscript. The final version of this article has been published by BioMed Central: http://www.biomedcentral.com/1746-6148/10/168