SlowFuzz: Automated Domain-Independent Detection of Algorithmic Complexity Vulnerabilities

Algorithmic complexity vulnerabilities occur when the worst-case time/space complexity of an application is significantly higher than the respective average case for particular user-controlled inputs. When such conditions are met, an attacker can launch Denial-of-Service attacks against a vulnerable application by providing inputs that trigger the worst-case behavior. Such attacks have been known to have serious effects on production systems, take down entire websites, or lead to bypasses of Web Application Firewalls. Unfortunately, existing detection mechanisms for algorithmic complexity vulnerabilities are domain-specific and often require significant manual effort. In this paper, we design, implement, and evaluate SlowFuzz, a domain-independent framework for automatically finding algorithmic complexity vulnerabilities. SlowFuzz automatically finds inputs that trigger worst-case algorithmic behavior in the tested binary. SlowFuzz uses resource-usage-guided evolutionary search techniques to automatically find inputs that maximize computational resource utilization for a given application.Comment: ACM CCS '17, October 30-November 3, 2017, Dallas, TX, US

A theory-based approach to understanding condom errors and problems reported by men attending an STI clinic

The official published version can be accessed from the link below - Copyright @ 2008 Springer VerlagWe employed the information–motivation–behavioral skills (IMB) model to guide an investigation of correlates for correct condom use among 278 adult (18–35 years old) male clients attending a sexually transmitted infection (STI) clinic. An anonymous questionnaire aided by a CD-recording of the questions was administered. Linear Structural Relations Program was used to conduct path analyses of the hypothesized IMB model. Parameter estimates showed that while information did not directly affect behavioral skills, it did have a direct (negative) effect on condom use errors. Motivation had a significant direct (positive) effect on behavioral skills and a significant indirect (positive) effect on condom use errors through behavioral skills. Behavioral skills had a direct (negative) effect on condom use errors. Among men attending a public STI clinic, these findings suggest brief, clinic-based, safer sex programs for men who have sex with women should incorporate activities to convey correct condom use information, instill motivation to use condoms correctly, and directly enhance men’s behavioral skills for correct use of condoms

Structure and evolution of the intracratonic Congo Basin

Surface wave tomography, heat flow, and crustal thickness measurements have demonstrated that the thickness of the continental lithosphere varies by at least a factor of 2. Since the thermal time constant of the lithosphere depends upon the square of its thickness, subsidence records of extensional sedimentary basins offer a potential way of extending these observations into the past. Here we examine the Congo basin, a large and iconic intracratonic sedimentary basin in Central Africa. This roughly circular basin covers an area in excess of 1.4 × 106 km2 with more than 5 km thickness of sedimentary rocks, the oldest parts of which are late Precambrian in age. First, we assess the thickness of the lithosphere. We have estimated its thickness across Africa using maps of shear wave velocity obtained by inversion of fundamental and higher-mode surface waveforms. The Congo Basin sits on 220 ± 30 km thick lithosphere and appears to be part of a southern core to the continent encompassing both Archean cratons and Proterozoic mobile belts. This thickness is consistent with published estimates from kimberlites. Reappraisal of legacy seismic reflection images demonstrates that the sedimentary section is underlain by a Late Precambrian rift zone and that the basin is still subsiding today. Subsidence modeling of two deep wells is consistent with uniform extension and cooling of the lithosphere by a factor of 1.2 during latest Precambrian and Cambrian time; we argue that the exceptional 0.55 Ga history of the basin is a direct consequence of the lithospheric thermal time constant being a factor of 4 longer than normal. Today, the basin coincides with a long-wavelength −30 to −40 mGal gravity anomaly. We interpret this gravity anomaly as the surficial manifestation of 400–600 m of recent mantle convective drawdown in response to the onset of upwelling plumes around the flanks of the southern African continent. The alternative explanation, that it is the static manifestation of locally thick lithosphere, is inconsistent with global trends of mantle density depletion. Our interpretation is consistent with fast seismic velocities observed throughout the sublithospheric upper mantle underneath the basin and recent geodynamic modeling

Small cell lung cancer cell lines secrete predominantly ACTH precursor peptides not ACTH.

A panel of 18 well characterised human small cell lung cancer (SCLC) cell lines was assessed for the production of adrenocorticotrophin (ACTH) and its precursor peptides, pro-opiomelanocortin (POMC) and pro-ACTH. These precursor peptides were measured directly using a novel two-site immunoradiometric assay (IRMA) based on monoclonal antibodies, in conjunction with a similar IRMA for ACTH 1-39. Significant concentrations of ACTH precursors were secreted by 10 of the 18 cell lines (56%). The low levels of ACTH immunoreactivity detected in seven cell lines could be accounted for by the known cross-reactivity of precursors in the ACTH IRMA. This suggests there is little, if any, processing of ACTH precursors to ACTH. Cell pellet extracts contained undetectable or low levels of ACTH precursors and ACTH, indicating that these peptides are not stored intracellularly. During the growth of the SCLC cells in vitro ACTH precursors accumulated progressively in the culture medium. Thus the combination of a direct assay for the ACTH precursors and the panel of SCLC cell lines provides a valuable in vitro model for the expression of POMC in human tumours

Increasing condom use in heterosexual men: development of a theory-based interactive digital intervention

Increasing condom use to prevent sexually transmitted infections is a key public health goal. Interventions are more likely to be effective if they are theory- and evidence-based. The Behaviour Change Wheel (BCW) provides a framework for intervention development. To provide an example of how the BCW was used to develop an intervention to increase condom use in heterosexual men (the MenSS website), the steps of the BCW intervention development process were followed, incorporating evidence from the research literature and views of experts and the target population. Capability (e.g. knowledge) and motivation (e.g. beliefs about pleasure) were identified as important targets of the intervention. We devised ways to address each intervention target, including selecting interactive features and behaviour change techniques. The BCW provides a useful framework for integrating sources of evidence to inform intervention content and deciding which influences on behaviour to target

Social stress and glucocorticoids alter PERIOD2 rhythmicity in the liver, but not in the suprachiasmatic nucleus

Circadian (~24 h) rhythms in behavior and physiological functions are under control of an endogenous circadian pacemaker in the suprachiasmatic nucleus (SCN) of the hypothalamus. The SCN directly drives some of these rhythms or serves as a coordinator of peripheral oscillators residing in other tissues and organs. Disruption of the circadian organization may contribute to disease, including stress-related disorders. Previous research indicates that the master clock in the SCN is resistant to stress, although it is unclear whether stress affects rhythmicity in other tissues, possibly mediated by glucocorticoids, released in stressful situations. In the present study, we examined the effect of uncontrollable social defeat stress and glucocorticoid hormones on the central and peripheral clocks, respectively in the SCN and liver. Transgenic PERIOD2::LUCIFERASE knock-in mice were used to assess the rhythm of the clock protein PERIOD2 (PER2) in SCN slices and liver tissue collected after 10 consecutive days of social defeat stress. The rhythmicity of PER2 expression in the SCN was not affected by stress exposure, whereas in the liver the expression showed a delayed phase in defeated compared to non-defeated control mice. In a second experiment, brain slices and liver samples were collected from transgenic mice and exposed to different doses of corticosterone. Corticosterone did not affect PER2 rhythm of the SCN samples, but caused a phase shift in PER2 expression in liver samples. This study confirms earlier findings that the SCN is resistant to stress and shows that clocks in the liver are affected by social stress, which might be due to the direct influence of glucocorticoids released from the adrenal gland