Tuple Space Explosion: A Denial-of-Service Attack Against a Software Packet Classifier

Efficient and highly available packet classification is fundamental for various security primitives. In this paper, we evaluate whether the de facto Tuple Space Search (TSS) packet classification algorithm used in popular software networking stacks such as the Open vSwitch is robust against low-rate denial-of-service attacks. We present the Tuple Space Explosion (TSE) attack that exploits the fundamental space/time complexity of the TSS algorithm. TSE can degrade the switch performance to 12% of its full capacity with a very low packet rate (0.7 Mbps) when the target only has simple policies such as, "allow some, but drop others". Worse, an adversary with additional partial knowledge of these policies can virtually bring down the target with the same low attack rate. Interestingly, TSE does not generate any specific traffic patterns but only requires arbitrary headers and payloads which makes it particularly hard to detect. Due to the fundamental complexity characteristics of TSS, unfortunately, there seems to be no complete mitigation to the problem. As a long-term solution, we suggest the use of other algorithms (e.g., HaRP) that are not vulnerable to the TSE attack. As a short-term countermeasure, we propose MFCGuard that carefully manages the tuple space and keeps packet classification fast

Effects of alirocumab on types of myocardial infarction: insights from the ODYSSEY OUTCOMES trial

Aims  The third Universal Definition of Myocardial Infarction (MI) Task Force classified MIs into five types: Type 1, spontaneous; Type 2, related to oxygen supply/demand imbalance; Type 3, fatal without ascertainment of cardiac biomarkers; Type 4, related to percutaneous coronary intervention; and Type 5, related to coronary artery bypass surgery. Low-density lipoprotein cholesterol (LDL-C) reduction with statins and proprotein convertase subtilisin–kexin Type 9 (PCSK9) inhibitors reduces risk of MI, but less is known about effects on types of MI. ODYSSEY OUTCOMES compared the PCSK9 inhibitor alirocumab with placebo in 18 924 patients with recent acute coronary syndrome (ACS) and elevated LDL-C (≥1.8 mmol/L) despite intensive statin therapy. In a pre-specified analysis, we assessed the effects of alirocumab on types of MI. Methods and results  Median follow-up was 2.8 years. Myocardial infarction types were prospectively adjudicated and classified. Of 1860 total MIs, 1223 (65.8%) were adjudicated as Type 1, 386 (20.8%) as Type 2, and 244 (13.1%) as Type 4. Few events were Type 3 (n = 2) or Type 5 (n = 5). Alirocumab reduced first MIs [hazard ratio (HR) 0.85, 95% confidence interval (CI) 0.77–0.95; P = 0.003], with reductions in both Type 1 (HR 0.87, 95% CI 0.77–0.99; P = 0.032) and Type 2 (0.77, 0.61–0.97; P = 0.025), but not Type 4 MI. Conclusion  After ACS, alirocumab added to intensive statin therapy favourably impacted on Type 1 and 2 MIs. The data indicate for the first time that a lipid-lowering therapy can attenuate the risk of Type 2 MI. Low-density lipoprotein cholesterol reduction below levels achievable with statins is an effective preventive strategy for both MI types.For complete list of authors see http://dx.doi.org/10.1093/eurheartj/ehz299</p

Evacetrapib and Cardiovascular Outcomes in High-Risk Vascular Disease

BACKGROUND: The cholesteryl ester transfer protein inhibitor evacetrapib substantially raises the high-density lipoprotein (HDL) cholesterol level, reduces the low-density lipoprotein (LDL) cholesterol level, and enhances cellular cholesterol efflux capacity. We sought to determine the effect of evacetrapib on major adverse cardiovascular outcomes in patients with high-risk vascular disease. METHODS: In a multicenter, randomized, double-blind, placebo-controlled phase 3 trial, we enrolled 12,092 patients who had at least one of the following conditions: an acute coronary syndrome within the previous 30 to 365 days, cerebrovascular atherosclerotic disease, peripheral vascular arterial disease, or diabetes mellitus with coronary artery disease. Patients were randomly assigned to receive either evacetrapib at a dose of 130 mg or matching placebo, administered daily, in addition to standard medical therapy. The primary efficacy end point was the first occurrence of any component of the composite of death from cardiovascular causes, myocardial infarction, stroke, coronary revascularization, or hospitalization for unstable angina. RESULTS: At 3 months, a 31.1% decrease in the mean LDL cholesterol level was observed with evacetrapib versus a 6.0% increase with placebo, and a 133.2% increase in the mean HDL cholesterol level was seen with evacetrapib versus a 1.6% increase with placebo. After 1363 of the planned 1670 primary end-point events had occurred, the data and safety monitoring board recommended that the trial be terminated early because of a lack of efficacy. After a median of 26 months of evacetrapib or placebo, a primary end-point event occurred in 12.9% of the patients in the evacetrapib group and in 12.8% of those in the placebo group (hazard ratio, 1.01; 95% confidence interval, 0.91 to 1.11; P=0.91). CONCLUSIONS: Although the cholesteryl ester transfer protein inhibitor evacetrapib had favorable effects on established lipid biomarkers, treatment with evacetrapib did not result in a lower rate of cardiovascular events than placebo among patients with high-risk vascular disease. (Funded by Eli Lilly; ACCELERATE ClinicalTrials.gov number, NCT01687998 .)

Effect of alirocumab on mortality after acute coronary syndromes. An analysis of the ODYSSEY OUTCOMES randomized clinical trial

Background: Previous trials of PCSK9 (proprotein convertase subtilisin-kexin type 9) inhibitors demonstrated reductions in major adverse cardiovascular events, but not death. We assessed the effects of alirocumab on death after index acute coronary syndrome. Methods: ODYSSEY OUTCOMES (Evaluation of Cardiovascular Outcomes After an Acute Coronary Syndrome During Treatment With Alirocumab) was a double-blind, randomized comparison of alirocumab or placebo in 18 924 patients who had an ACS 1 to 12 months previously and elevated atherogenic lipoproteins despite intensive statin therapy. Alirocumab dose was blindly titrated to target achieved low-density lipoprotein cholesterol (LDL-C) between 25 and 50 mg/dL. We examined the effects of treatment on all-cause death and its components, cardiovascular and noncardiovascular death, with log-rank testing. Joint semiparametric models tested associations between nonfatal cardiovascular events and cardiovascular or noncardiovascular death. Results: Median follow-up was 2.8 years. Death occurred in 334 (3.5%) and 392 (4.1%) patients, respectively, in the alirocumab and placebo groups (hazard ratio [HR], 0.85; 95% CI, 0.73 to 0.98; P=0.03, nominal P value). This resulted from nonsignificantly fewer cardiovascular (240 [2.5%] vs 271 [2.9%]; HR, 0.88; 95% CI, 0.74 to 1.05; P=0.15) and noncardiovascular (94 [1.0%] vs 121 [1.3%]; HR, 0.77; 95% CI, 0.59 to 1.01; P=0.06) deaths with alirocumab. In a prespecified analysis of 8242 patients eligible for ≥3 years follow-up, alirocumab reduced death (HR, 0.78; 95% CI, 0.65 to 0.94; P=0.01). Patients with nonfatal cardiovascular events were at increased risk for cardiovascular and noncardiovascular deaths (P<0.0001 for the associations). Alirocumab reduced total nonfatal cardiovascular events (P<0.001) and thereby may have attenuated the number of cardiovascular and noncardiovascular deaths. A post hoc analysis found that, compared to patients with lower LDL-C, patients with baseline LDL-C ≥100 mg/dL (2.59 mmol/L) had a greater absolute risk of death and a larger mortality benefit from alirocumab (HR, 0.71; 95% CI, 0.56 to 0.90; Pinteraction=0.007). In the alirocumab group, all-cause death declined wit h achieved LDL-C at 4 months of treatment, to a level of approximately 30 mg/dL (adjusted P=0.017 for linear trend). Conclusions: Alirocumab added to intensive statin therapy has the potential to reduce death after acute coronary syndrome, particularly if treatment is maintained for ≥3 years, if baseline LDL-C is ≥100 mg/dL, or if achieved LDL-C is low. Clinical Trial Registration: URL: https://www.clinicaltrials.gov. Unique identifier: NCT01663402