Directed Security Policies: A Stateful Network Implementation

Large systems are commonly internetworked. A security policy describes the communication relationship between the networked entities. The security policy defines rules, for example that A can connect to B, which results in a directed graph. However, this policy is often implemented in the network, for example by firewalls, such that A can establish a connection to B and all packets belonging to established connections are allowed. This stateful implementation is usually required for the network's functionality, but it introduces the backflow from B to A, which might contradict the security policy. We derive compliance criteria for a policy and its stateful implementation. In particular, we provide a criterion to verify the lack of side effects in linear time. Algorithms to automatically construct a stateful implementation of security policy rules are presented, which narrows the gap between formalization and real-world implementation. The solution scales to large networks, which is confirmed by a large real-world case study. Its correctness is guaranteed by the Isabelle/HOL theorem prover.Comment: In Proceedings ESSS 2014, arXiv:1405.055

diekmann/cctrack: The code as presented in the ifip networking 2013 paper

Adaptive Low-Level Packet Sampling for High-Speed Network

Monitoring of Anti-Hepatitis E Virus Antibody Seroconversion in Asymptomatically Infected Blood Donors: Systematic Comparison of Nine Commercial Anti-HEV IgM and IgG Assays

Diagnosis of hepatitis E virus (HEV) is usually determined serologically by detection of the presence of immunoglobulin (Ig)M antibodies or rising anti-HEV IgG titers. However, serological assays have demonstrated a significant variation in their sensitivities and specificities. In this study, we present the systematic comparison of different immunological anti-HEV assays using complete seroconversion panels of 10 virologically confirmed HEV genotype 3 infected individuals. Assay sensitivities were further evaluated by testing serially diluted World Health Organization (WHO) reference reagent for hepatitis E virus antibody and one patient sample infected with HEV genotype 3. Anti-HEV IgM and IgG antibody presence was determined using the immunological assays Wantai HEV IgM/IgG enzyme-linked immunosorbent assay (ELISA) (Sanbio, Uden, The Netherlands), recomWell HEV IgM/IgG (Mikrogen, Neuried, Germany), HEV IgM ELISA 3.0, HEV ELISA, HEV ELISA 4.0, Assure HEV IgM Rapid Test (all MP Biomedicals Europe, Illkirch Cedex, France) and Anti-HEV ELISA (IgM/IgG, Euroimmun, Lübeck, Germany). The assays showed differences regarding their analytical and diagnostic sensitivities, with anti-HEV IgM assays (n = 5) being more divergent compared to anti-HEV IgG (n = 4) assays in this study. Considerable variations were observed particularly for the detection period of IgM antibodies. This is the first study systematically characterizing serologic assays on the basis of seroconversion panels, providing sample conformity for a conclusive comparison. Future studies should include the assay comparison covering the four different genotypes

Monitoring of anti-Hepatitis E virus antibody seroconversion in asymptomatically infected blood donors

Diagnosis of hepatitis E virus (HEV) is usually determined serologically by detection of the presence of immunoglobulin (Ig)M antibodies or rising anti-HEV IgG titers. However, serological assays have demonstrated a significant variation in their sensitivities and specificities. In this study, we present the systematic comparison of different immunological anti-HEV assays using complete seroconversion panels of 10 virologically confirmed HEV genotype 3 infected individuals. Assay sensitivities were further evaluated by testing serially diluted World Health Organization (WHO) reference reagent for hepatitis E virus antibody and one patient sample infected with HEV genotype 3. Anti-HEV IgM and IgG antibody presence was determined using the immunological assays Wantai HEV IgM/IgG enzyme-linked immunosorbent assay (ELISA) (Sanbio, Uden, The Netherlands), recomWell HEV IgM/IgG (Mikrogen, Neuried, Germany), HEV IgM ELISA 3.0, HEV ELISA, HEV ELISA 4.0, Assure HEV IgM Rapid Test (all MP Biomedicals Europe, Illkirch Cedex, France) and Anti-HEV ELISA (IgM/IgG, Euroimmun, Lübeck, Germany). The assays showed differences regarding their analytical and diagnostic sensitivities, with anti-HEV IgM assays ($\it n$ = 5) being more divergent compared to anti-HEV IgG ($\it n$ = 4) assays in this study. Considerable variations were observed particularly for the detection period of IgM antibodies. This is the first study systematically characterizing serologic assays on the basis of seroconversion panels, providing sample conformity for a conclusive comparison. Future studies should include the assay comparison covering the four different genotypes

Serological evidence of increased susceptibility to varicella-zoster virus reactivation or reinfection in natalizumab-treated patients with multiple sclerosis

Background: Serious adverse drug reactions of disease-modifying drugs in multiple sclerosis (MS) therapy may include enhanced susceptibility to reactivation of neurotropic herpes viruses like varicella-zoster virus (VZV) and the John Cunningham (JC) polyomavirus. Objective: Because symptomatic reactivation of these viruses are rare events, we determined the incidence of rises in anti-VZV IgG antibody levels as a potential marker for enhanced susceptibility to subclinical and symptomatic reactivation of neurotropic viruses. Methods: Anti-VZV IgG levels were measured in paired serum samples taken 6–8 months apart from natalizumab-treated MS patients, healthy blood donors and human immunodeficiency virus (HIV) infected patients. Results: The incidence of significant rises in anti-VZV IgG levels in natalizumab-treated MS patients was 4.26 per 100 person-years, which was significantly higher than in healthy blood donors. Retrospective evaluation of the available medical records of patients with rises of anti-VZV IgG levels did not reveal herpes zoster (i.e. shingles) manifestations. Conclusions: The increased incidence of significant rises of anti-VZV IgG levels in natalizumab-treated MS patients might indicate an association of natalizumab treatment of MS with an elevated risk of a subclinical VZV reactivation and/or reinfection events. Whether this is predictive of an increased risk of herpes zoster or even symptomatic reactivation of other neurotropic viruses remains to be determined in larger prospective studies