On the Reverse Engineering of the Citadel Botnet

Citadel is an advanced information-stealing malware which targets financial information. This malware poses a real threat against the confidentiality and integrity of personal and business data. A joint operation was recently conducted by the FBI and the Microsoft Digital Crimes Unit in order to take down Citadel command-and-control servers. The operation caused some disruption in the botnet but has not stopped it completely. Due to the complex structure and advanced anti-reverse engineering techniques, the Citadel malware analysis process is both challenging and time-consuming. This allows cyber criminals to carry on with their attacks while the analysis is still in progress. In this paper, we present the results of the Citadel reverse engineering and provide additional insight into the functionality, inner workings, and open source components of the malware. In order to accelerate the reverse engineering process, we propose a clone-based analysis methodology. Citadel is an offspring of a previously analyzed malware called Zeus; thus, using the former as a reference, we can measure and quantify the similarities and differences of the new variant. Two types of code analysis techniques are provided in the methodology, namely assembly to source code matching and binary clone detection. The methodology can help reduce the number of functions requiring manual analysis. The analysis results prove that the approach is promising in Citadel malware analysis. Furthermore, the same approach is applicable to similar malware analysis scenarios.Comment: 10 pages, 17 figures. This is an updated / edited version of a paper appeared in FPS 201

Cosmetic extended hydrogel contact lens wear: A search and review of current literature

Cosmetic extended hydrogel contact lens wear: A search and review of current literatur

A conserved and essential basic region mediates tRNA binding to the Elp1 subunit of the <em>Saccharomyces cerevisiae</em> Elongator complex

Elongator is a conserved, multi-protein complex discovered in Saccharomyces cerevisiae, loss of which confers a range of pleiotropic phenotypes. Elongator in higher eukaryotes is required for normal growth and development and a mutation in the largest subunit of human Elongator (Elp1) causes familial dysautonomia, a severe recessive neuropathy. Elongator promotes addition of mcm(5) and ncm(5) modifications to uridine in the tRNA anticodon ‘wobble’ position in both yeast and higher eukaryotes. Since these modifications are required for the tRNAs to function efficiently, a translation defect caused by hypomodified tRNAs may therefore underlie the variety of phenotypes associated with Elongator dysfunction. The Elp1 carboxy-terminal domain contains a highly conserved arginine/lysine-rich region that resembles a nuclear localization sequence (NLS). Using alanine substitution mutagenesis, we show that this region is essential for Elongator's function in tRNA wobble uridine modification. However, rather than acting to determine the nucleo-cytoplasmic distribution of Elongator, we find that the basic region plays a critical role in a novel interaction between tRNA and the Elp1 carboxy-terminal domain. Thus the conserved basic region in Elp1 may be essential for tRNA wobble uridine modification by acting as tRNA binding motif

The fibrin-derived gamma377-395 peptide inhibits microglia activation and suppresses relapsing paralysis in central nervous system autoimmune disease.

Perivascular microglia activation is a hallmark of inflammatory demyelination in multiple sclerosis (MS), but the mechanisms underlying microglia activation and specific strategies to attenuate their activation remain elusive. Here, we identify fibrinogen as a novel regulator of microglia activation and show that targeting of the interaction of fibrinogen with the microglia integrin receptor Mac-1 (alpha(M)beta(2), CD11b/CD18) is sufficient to suppress experimental autoimmune encephalomyelitis in mice that retain full coagulation function. We show that fibrinogen, which is deposited perivascularly in MS plaques, signals through Mac-1 and induces the differentiation of microglia to phagocytes via activation of Akt and Rho. Genetic disruption of fibrinogen-Mac-1 interaction in fibrinogen-gamma(390-396A) knock-in mice or pharmacologically impeding fibrinogen-Mac-1 interaction through intranasal delivery of a fibrinogen-derived inhibitory peptide (gamma(377-395)) attenuates microglia activation and suppresses relapsing paralysis. Because blocking fibrinogen-Mac-1 interactions affects the proinflammatory but not the procoagulant properties of fibrinogen, targeting the gamma(377-395) fibrinogen epitope could represent a potential therapeutic strategy for MS and other neuroinflammatory diseases associated with blood-brain barrier disruption and microglia activation

The extension problem for partial Boolean structures in Quantum Mechanics

Alternative partial Boolean structures, implicit in the discussion of classical representability of sets of quantum mechanical predictions, are characterized, with definite general conclusions on the equivalence of the approaches going back to Bell and Kochen-Specker. An algebraic approach is presented, allowing for a discussion of partial classical extension, amounting to reduction of the number of contexts, classical representability arising as a special case. As a result, known techniques are generalized and some of the associated computational difficulties overcome. The implications on the discussion of Boole-Bell inequalities are indicated.Comment: A number of misprints have been corrected and some terminology changed in order to avoid possible ambiguitie

Axially rigid steerable needle with compliant active tip control

Steerable instruments allow for precise access to deeply-seated targets while sparing sensitive tissues and avoiding anatomical structures. In this study we present a novel omnidirectional steerable instrument for prostate high-dose-rate (HDR) brachytherapy (BT). The instrument utilizes a needle with internal compliant mechanism, which enables distal tip steering through proximal instrument bending while retaining high axial and flexural rigidity. Finite element analysis evaluated the design and the prototype was validated in experiments involving tissue simulants and ex-vivo bovine tissue. Ultrasound (US) images were used to provide visualization and shape-reconstruction of the instrument during the insertions. In the experiments lateral tip steering up to 20 mm was found. Manually controlled active needle tip steering in inhomogeneous tissue simulants and ex-vivo tissue resulted in mean targeting errors of 1.4 mm and 2 mm in 3D position, respectively. The experiments show that steering response of the instrument is history-independent. The results indicate that the endpoint accuracy of the steerable instrument is similar to that of the conventional rigid HDR BT needle while adding the ability to steer along curved paths. Due to the design of the steerable needle sufficient axial and flexural rigidity is preserved to enable puncturing and path control within various heterogeneous tissues. The developed instrument has the potential to overcome problems currently unavoidable with conventional instruments, such as pubic arch interference in HDR BT, without major changes to the clinical workflow

Pseudophakic cystoid macular edema: update 2016

Pseudophakic cystoid macular edema (PCME) is the most common complication of cataract surgery, leading in some cases to a decrease in vision. Although the pathogenesis of PCME is not completely understood, the contribution of postsurgical inflammation is generally accepted. Consequently, anti-inflammatory medicines, including steroids and nonsteroidal anti-inflammatory drugs, have been postulated as having a role in both the prophylaxis and treatment of PCME. However, the lack of a uniformly accepted PCME definition, conflicting data on some risk factors, and the scarcity of studies comparing the role of nonsteroidal anti-inflammatory drugs to steroids in PCME prevention make the problem of PCME one of the puzzles of ophthalmology. This paper presents an updated review on the pathogenesis, risk factors, and use of anti-inflammatory drugs in PCME that reflect current research and practice

Anatomy of Malicious Singularities

As well known, the b-boundaries of the closed Friedman world model and of Schwarzschild solution consist of a single point. We study this phenomenon in a broader context of differential and structured spaces. We show that it is an equivalence relation $\rho$, defined on the Cauchy completed total space $\bar{E}$ of the frame bundle over a given space-time, that is responsible for this pathology. A singularity is called malicious if the equivalence class $[p_0]$ related to the singularity remains in close contact with all other equivalence classes, i.e., if $p_0 \in \mathrm{cl}[p]$ for every $p \in E$. We formulate conditions for which such a situation occurs. The differential structure of any space-time with malicious singularities consists only of constant functions which means that, from the topological point of view, everything collapses to a single point. It was noncommutative geometry that was especially devised to deal with such situations. A noncommutative algebra on $\bar{E}$, which turns out to be a von Neumann algebra of random operators, allows us to study probabilistic properties (in a generalized sense) of malicious singularities. Our main result is that, in the noncommutative regime, even the strongest singularities are probabilistically irrelevant.Comment: 16 pages in LaTe