Windows credential theft: Methods and mitigations

Compromising Windows account credentials, especially in a domain environment, is a critical phase in an attack against an organization. This paper will first survey the most common tools and techniques used to uncover usernames and their plaintext credentials in standard red team procedures. These methods are compared against the new proposed method that uses low level hooking in the local security authority subsystem service to stealthily compromise plaintext credentials upon login. The latter has many advantages over pre-existing tools designed to capture credentials on Windows based computers. Finally, mitigation procedures will be examined that are designed to thwart credential theft or limit further domain compromise

A survey of the possibility of establishing junior high schools in certain communities within a twenty-five mile radius of the city of Sacramento

It was the purpose of this study to answer the question: Is it reasonably possible for certain of the school districts near Sacramento to institute junior high schools within their boundaries

Neuro-Ophthalmology Subspecialty Highlight: With Dr. Sarah Thornton, Wills Eye Hospital

Neuro-Ophthalmology is a subspecialty within ophthalmology that combines the complexities of nervous system disease with the intricacies of the ocular manifestations of those diseases. Neuro-ophthalmologists work closely with neurologists, neurosurgeons, rheumatologists, and other ophthalmologists in different subspecialties, such as retina and glaucoma, to get to the source of their patients’ problems. Neuro-ophthalmology is typically a 1-year fellowship undertaken after residency training is completed, where physicians will learn the complex ways different diseases can manifest in the eye

Covert Channel in the BitTorrent Tracker Protocol

Covert channels have the unique quality of masking evidence that a communication has ever occurred between two parties. For spies and terrorist cells, this quality can be the difference between life and death. However, even the detection of communications in a botnet could be troublesome for its creators. To evade detection and prevent insights into the size and members of a botnet, covert channels can be used. A botnet should rely on covert channels built on ubiquitous protocols to blend in with legitimate traffic. In this paper, we propose a covert channel built on the BitTorrent peer-to-peer protocol. In a simple application, this covert channel can be used to discretely and covertly send messages between two parties. However, this covert channel can also be used to stealthily distribute commands or the location of a command and control server for use in a botnet

Chinmoku MQP

This report details the developmental process of Chinmoku (“silence”), an educational game developed to fulfill the Major Qualifying Project requirement for Worcester Polytechnic Institute’s Interactive Media and Game Development (IMGD) and Computer Science majors. This project was developed over a three month period at Ritsumeikan University’s Biwako-Kusatsu Campus in Shiga Prefecture, Japan. The game seeks to teach Hiragana, one of the Japanese writing systems, to a target audience of young adults familiar with gaming. This report covers all aspects of the team’s development process, research, playtesting, and the possibilities of future work on this project

Speciation in the baboon and its relation to gamma-chain heterogeneity and to the response to induction of HbF by 5-azacytidine

In the baboon (Papio species), the two nonallelic gamma-genes produce gamma-chains that differ at a minimum at residue 75, where isoleucine (I gamma-chain) or valine (V gamma) may be present. This situation obtains in baboons that are sometimes designated as Papio anubis, Papio hamadryas, and Papio papio. However, in Papio cynocephalus, although the I gamma-chains are identical with those in the above mentioned types, the V gamma-chains have the substitutions ala----gly at residue 9 and ala----val at residue 23. The V gamma-chains of P. cynocephalus are called V gamma C to distinguish them from the V gamma A-chains of P. anubis, etc. A single cynocephalus animal has been found to have only normal I gamma-chains and I gamma C-chains (that is, glycine in residue 9, valine in 23, and isoleucine in 75). When HbF is produced in response to stress with 5-azacytidine, P. anubis baboons respond with greater production than do P. cynocephalus, and hybrids fall between. Minimal data on P. hamadryas and P. papio suggest an even lower response than P. cynocephalus. As HbF increases under stress, the ratio of I gamma to V gamma-chains changes from the value in the adult or juvenile baboon toward the ratio in the newborn baboon. However, it does not attain the newborn value. The V gamma A and V gamma C-genes respond differently to stress. In hybrids, the production of V gamma A- chains exceeds that of V gamma C-chains. A controlling factor in cis apparently is present and may be responsible for the species-related extent of total HbF production. It may be concluded that the more primitive the cell in the erythroid maturation series that has been subjected to 5-azacytidine, the more active is the I gamma-gene

Project Overworld: Campus GPS App

Project Overworld is an interactive GPS enabled map of the Worcester Polytechnic Institute campus, which is accessible through mobile devices. The project aims to act as a guidance system for freshmen and to provide connectivity between WPI students. The application features a avatar creation and customization system, similar to fantasy role-playing type games. By exploring various locations of campus and answering trivia questions, players can level up and further customize their avatar. This paper documents the design process behind the application

Shear thickening in densely packed suspensions of spheres and rods confined to few layers

We investigate confined shear thickening suspensions for which the sample thickness is comparable to the particle dimensions. Rheometry measurements are presented for densely packed suspensions of spheres and rods with aspect ratios 6 and 9. By varying the suspension thickness in the direction of the shear gradient at constant shear rate, we find pronounced oscillations in the stress. These oscillations become stronger as the gap size is decreased, and the stress is minimized when the sample thickness becomes commensurate with an integer number of particle layers. Despite this confinement-induced effect, viscosity curves show shear thickening that retains bulk behavior down to samples as thin as two particle diameters for spheres, below which the suspension is jammed. Rods exhibit similar behavior commensurate with the particle width, but they show additional effects when the thickness is reduced below about a particle length as they are forced to align; the stress increases for decreasing gap size at fixed shear rate while the shear thickening regime gradually transitions to a Newtonian scaling regime. This weakening of shear thickening as an ordered configuration is approached contrasts with the strengthening of shear thickening when the packing fraction is increased in the disordered bulk limit, despite the fact that both types of confinement eventually lead to jamming.Comment: 21 pages, 14 figures. submitted to the Journal of Rheolog

Lead-associated endocarditis: the important role of methicillin-resistant Staphylococcus aureus.

BACKGROUND: Infection is a potentially life-threatening complication of cardiac device implantation. Lead-associated endocarditis (LAE) may be the most serious complication since it is associated with a high mortality. METHODS: The medical records of patients referred to our institution for the treatment of LAE between 1999 and 2007 were reviewed. RESULTS: A total of 51 of 107 patients referred for device-related infections met the criteria for LAE. Of these, 19 occurred within 6 months of their most recent procedure (early), while the remaining 32 occurred more than 6 months later (mean = 31.9 months post procedure). Devices included pacemakers in 33 patients and ICDs in 18 patients. The most common organism responsible for infection was Staphylococcus aureus (S. aureus) followed by coagulase-negative staphylocci (22%) and streptococci (12%). Methicillin-resistant S. aureus (MRSA) accounted for 67% of the S. aureus infections. Coagulase-negative staphylococci were responsible for only 26% of early and 19% of late cases. A distant site of infection was common (26/51 = 51%), particularly in patients with MRSA LAE. The device and leads were removed percutaneously in all patients. Only one patient failed to respond to intravenous antibiotics. CONCLUSIONS: Our data suggest that methicillin-resistant S. aureus is an important pathogen in LAE. Since many infections occur months after the last device procedure, hematogenous spread of organisms from a distant site may be an important contributing factor. These data suggest that strategies to prevent hematogenous infection, particularly with S. aureus, are critical in patients with implantable cardiac devices

Developments in CO2 research

CO2 can be a good solvent for many compounds when used in its compressed liq- uid or supercritical fluid state. Above its critical temperature and critical pressure (Tc = 31 °C, Pc = 73.8 bar), CO2 has liquid-like densities and gas-like viscosities, which allows for safe commercial and laboratory operating conditions. Many small molecules are readily soluble in CO2, whereas most macromolecules are not. This has prompted development of several classes of small molecule and polymeric surfactants that enable emulsion and dispersion polymerizations as well as other technological processes