RiPKI: The Tragic Story of RPKI Deployment in the Web Ecosystem

Previous arXiv version of this paper has been published under the title "When BGP Security Meets Content Deployment: Measuring and Analysing RPKI-Protection of Websites", Proc. of Fourteenth ACM Workshop on Hot Topics in Networks (HotNets), New York:ACM, 2015Previous arXiv version of this paper has been published under the title "When BGP Security Meets Content Deployment: Measuring and Analysing RPKI-Protection of Websites", Proc. of Fourteenth ACM Workshop on Hot Topics in Networks (HotNets), New York:ACM, 2015Web content delivery is one of the most important services on the Internet. Access to websites is typically secured via TLS. However, this security model does not account for prefix hijacking on the network layer, which may lead to traffic blackholing or transparent interception. Thus, to achieve comprehensive security and service availability, additional protective mechanisms are necessary such as the RPKI, a recently deployed Resource Public Key Infrastructure to prevent hijacking of traffic by networks. This paper argues two positions. First, that modern web hosting practices make route protection challenging due to the propensity to spread servers across many different networks, often with unpredictable client redirection strategies, and, second, that we need a better understanding why protection mechanisms are not deployed. To initiate this, we empirically explore the relationship between web hosting infrastructure and RPKI deployment. Perversely, we find that less popular websites are more likely to be secured than the prominent sites. Worryingly, we find many large-scale CDNs do not support RPKI, thus making their customers vulnerable. This leads us to explore business reasons why operators are hesitant to deploy RPKI, which may help to guide future research on improving Internet security

Human antimicrobial peptide LL-37 is present in atherosclerotic plaques and induces death of vascular smooth muscle cells: a laboratory study

BACKGROUND: Death of smooth muscle cells in the atherosclerotic plaques makes the plaques more prone to rupture, which can initiate an acute ischemic event. The development of atherosclerosis includes the migration of immune cells e.g. monocytes/macrophages and T lymphocytes into the lesions. Immune cells can release antimicrobial peptides. One of these, human cathelicidin antimicrobial peptide hCAP-18, is cleaved by proteinase 3 generating a 4.5 kDa C-terminal fragment named LL-37, which has been shown to be cytotoxic. The aim of the study was to explore a potential role of LL-37 in the pathophysiology of atherosclerosis. METHODS: We investigated the presence of LL-37 in human atherosclerotic lesions obtained at autopsy using immunohistochemistry. The direct effects of LL-37 on cultured vascular smooth muscle cells and isolated neutrophil granulocytes were investigated with morphological, biochemical and flow cytometry analysis. RESULTS: The neointima of atherosclerotic plaques was found to contain LL-37-like immunoreactivity, mainly in macrophages. In cultured smooth muscle cells, LL-37 at 30 μg/ml caused cell shrinkage, membrane blebbing, nuclear condensation, DNA fragmentation and an increase in caspase-3 activity as studied by microscopy, ELISA and enzyme activity assay, respectively. Flow cytometry demonstrated that LL-37 in a subset of the cells caused a small but rapidly developing increase in membrane permeability to propidium iodide, followed by a gradual development of FITC-annexin V binding. Another cell population stained heavily with both propidium iodide and FITC-annexin V. Neutrophil granulocytes were resistant to these effects of LL-37. CONCLUSION: This study shows that LL-37 is present in atherosclerotic lesions and that it induces death of vascular smooth muscle cells. In a subset of cells, the changes indicate the development of apoptosis triggered by an initial mild perturbation of plasma membrane integrity. The findings suggest a role for LL-37 as a mediator of immune cell-induced death of vascular smooth muscle cells in atherosclerosis

From Vulnerable Plaque to Vulnerable Patient

Atherosclerotic cardiovascular disease results in >19 million deaths annually, and coronary heart disease accounts for the majority of this toll. Despite major advances in treatment of coronary heart disease patients, a large number of victims of the disease who are apparently healthy die suddenly without prior symptoms. Available screening and diagnostic methods are insufficient to identify the victims before the event occurs. The recognition of the role of the vulnerable plaque has opened new avenues of opportunity in the field of cardiovascular medicine. This consensus document concludes the following. (1) Rupture-prone plaques are not the only vulnerable plaques. All types of atherosclerotic plaques with high likelihood of thrombotic complications and rapid progression should be considered as vulnerable plaques. We propose a classification for clinical as well as pathological evaluation of vulnerable plaques. (2) Vulnerable plaques are not the only culprit factors for the development of acute coronary syndromes, myocardial infarction, and sudden cardiac death. Vulnerable blood (prone to thrombosis) and vulnerable myocardium (prone to fatal arrhythmia) play an important role in the outcome. Therefore, the term "vulnerable patient" may be more appropriate and is proposed now for the identification of subjects with high likelihood of developing cardiac events in the near future. (3) A quantitative method for cumulative risk assessment of vulnerable patients needs to be developed that may include variables based on plaque, blood, and myocardial vulnerability. In Part I of this consensus document, we cover the new definition of vulnerable plaque and its relationship with vulnerable patients. Part II of this consensus document will focus on vulnerable blood and vulnerable myocardium and provide an outline of overall risk assessment of vulnerable patients. Parts I and II are meant to provide a general consensus and overviews the new field of vulnerable patient. Recently developed assays (eg, C-reactive protein), imaging techniques (eg, CT and MRI), noninvasive electrophysiological tests (for vulnerable myocardium), and emerging catheters (to localize and characterize vulnerable plaque) in combination with future genomic and proteomic techniques will guide us in the search for vulnerable patients. It will also lead to the development and deployment of new therapies and ultimately to reduce the incidence of acute coronary syndromes and sudden cardiac death. We encourage healthcare policy makers to promote translational research for screening and treatment of vulnerable patients