A New Metric for Prioritising Intrusion Alerts Using Correlation and Outlier Analysis

In a medium sized network, an Intrusion Detection System (IDS) could produce thousands of alerts a day many of which may be false positives. In the vast number of triggered intrusion alerts, identifying those to prioritise is highly challenging. Alert Correlation and prioritisation are both viable analytical methods which are commonly used to understand and prioritise alerts. However, to the author’s knowledge, very few dynamic prioritisation metrics exist. In this paper, a new prioritisation metric - OutMet, which is based on measuring the degree to which an alert belongs to anomalous behaviour is proposed. OutMet combines alert correlation and prioritisation analysis and in given attack scenarios, is capable of reducing false positives by upto 100%. The metric is tested and evaluated using the recently developed cyber-range dataset provided by Northrop Grumman

Intrusion alert prioritisation and attack detection using post-correlation analysis

Event Correlation used to be a widely used technique for interpreting alert logs and discovering network attacks. However, due to the scale and complexity of today's networks and attacks, alert logs produced by these modern networks are much larger in volume and difficult to analyse. In this research we show that adding post-correlation methods can be used alongside correlation to significantly improve the analysis of alert logs. We proposed a new framework titled A Comprehensive System for Analysing Intrusion Alerts (ACSAnIA). The post-correlation methods include a new prioritisation metric based on anomaly detection and a novel approach to clustering events using correlation knowledge. One of the key benefits of the framework is that it significantly reduces false-positive alerts and it adds contextual information to true-positive alerts. We evaluated the post-correlation methods of ACSAnIA using data from a 2012 cyber range experiment carried out by industrial partners of the British Telecom Security Practice Team. In one scenario, our results show that false-positives were successfully reduced by 97% and in another scenario, 16%. It also showed that clustering correlated alerts aided in attack detection. The proposed framework is also being developed and integrated into a pre-existing Visual Analytic tool developed by the British Telecom SATURN Research Team for the analysis of cyber security data

Keeping food safer the Healing way

Promotional booklet for the Healing Refrigerator

A DNA repair-independent role for alkyladenine DNA glycosylase in alkylation-induced unfolded protein response.

Alkylating agents damage DNA and proteins and are widely used in cancer chemotherapy. While cellular responses to alkylation-induced DNA damage have been explored, knowledge of how alkylation affects global cellular stress responses is sparse. Here, we examined the effects of the alkylating agent methylmethane sulfonate (MMS) on gene expression in mouse liver, using mice deficient in alkyladenine DNA glycosylase (Aag), the enzyme that initiates the repair of alkylated DNA bases. MMS induced a robust transcriptional response in wild-type liver that included markers of the endoplasmic reticulum (ER) stress/unfolded protein response (UPR) known to be controlled by XBP1, a key UPR effector. Importantly, this response is significantly reduced in the Aag knockout. To investigate how AAG affects alkylation-induced UPR, the expression of UPR markers after MMS treatment was interrogated in human glioblastoma cells expressing different AAG levels. Alkylation induced the UPR in cells expressing AAG; conversely, AAG knockdown compromised UPR induction and led to a defect in XBP1 activation. To verify the requirements for the DNA repair activity of AAG in this response, AAG knockdown cells were complemented with wild-type Aag or with an Aag variant producing a glycosylase-deficient AAG protein. As expected, the glycosylase-defective Aag does not fully protect AAG knockdown cells against MMS-induced cytotoxicity. Remarkably, however, alkylation-induced XBP1 activation is fully complemented by the catalytically inactive AAG enzyme. This work establishes that, besides its enzymatic activity, AAG has noncanonical functions in alkylation-induced UPR that contribute to cellular responses to alkylation

Impact of community-based interventions on condom use in the Tłįchǫ region of Northwest Territories, Canada

<p>Abstract</p> <p>Background</p> <p>Since 2005, the Tłįchǫ Community Services Agency (TCSA) in Canada's Northwest Territories (NT) has addressed rising rates of sexually transmitted infections (STI). In 2009, STI rates in the NT were ten times higher than the national rate and Tłįchǫ regional rates were nearly four times that of the NT – 91 cases per 1000 people. We describe a social audit process that assessed the impact of an evidence-based community-led intervention.</p> <p>Methods</p> <p>A baseline survey of sexual health knowledge, attitudes and behaviours in 2006/07 provided evidence for a Community Action Research Team (CART) to develop and to put in place culturally appropriate interventions in the Tłįchǫ region. A follow-up study in 2010 sought to assess the impact of CART activities on condom use and underlying conscious knowledge, attitudes, subjective norms, intention to change, sense of agency and discussions related to condom use and STI risks. We report the contrasts using Odds Ratios (OR) and 95% confidence intervals (CI).</p> <p>Results</p> <p>One in every three follow-up respondents (315/808) participated in at least one CART activity. Participation in highly ranked interventions was associated with increased condom use during the last sexual encounter (OR 1.45, 95%CI 1.07-1.98). Those exposed to three or more activities were more likely to talk openly about condoms (OR 2.08, 95%CI 1.41-3.28), but were also less likely to be monogamous (OR 0.49, 95%CI 0.29-0.90).</p> <p>Conclusions</p> <p>The measurable impact on condom use indicates a strong beginning for the Tłįchǫ community intervention programmes. The interventions also seem to generate increased discussion, often a precursor to action. The Tłįchǫ can use the evidence to improve and refocus their programming, increase knowledge and continue to improve safe condom use practices.</p

From benzos to berries: treatment offered at an Aboriginal youth solvent abuse treatment centre relays the importance of culture.

First Nations and Inuit youth who abuse solvents are one of the most highly stigmatized substance-abusing groups in Canada. Drawing on a residential treatment response that is grounded in a culture-based model of resiliency, this article discusses the cultural implications for psychiatry's individualized approach to treating mental disorders. A systematic review of articles published in The Canadian Journal of Psychiatry during the past decade, augmented with a review of Canadian and international literature, revealed a gap in understanding and practice between Western psychiatric disorder-based and Aboriginal culture-based approaches to treatment and healing from substance abuse and mental disorders. Differing conceptualizations of mental health and substance abuse are discussed from Western psychiatric and Aboriginal worldviews, with a focus on connection to self, community, and political context. Applying an Aboriginal method of knowledge translation-storytelling-experiences from front-line workers in a youth solvent abuse treatment centre relay the difficulties with applying Western responses to Aboriginal healing. This lends to a discussion of how psychiatry can capitalize on the growing debate regarding the role of culture in the treatment of Aboriginal youth who abuse solvents. There is significant need for culturally competent psychiatric research specific to diagnosing and treating First Nations and Inuit youth who abuse substances, including solvents. Such understanding for front-line psychiatrists is necessary to improve practice. A health promotion perspective may be a valuable beginning point for attaining this understanding, as it situates psychiatry's approach to treating mental disorders within the etiology for Aboriginal Peoples

National review of maternity services 2008: women influencing change

<p>Abstract</p> <p>Background</p> <p>In 2009 the Australian government announced a major program of reform with the move to primary maternity care. The reform agenda represents a dramatic change to maternity care provision in a society that has embraced technology across all aspects of life including childbirth.</p> <p>Methods</p> <p>A critical discourse analysis of selected submissions in the consultation process to the national review of maternity services 2008 was undertaken to identify the contributions of individual women, consumer groups and organisations representing the interests of women.</p> <p>Results</p> <p>Findings from this critical discourse analysis revealed extensive similarities between the discourses identified in the submissions with the direction of the 2009 proposed primary maternity care reform agenda. The rise of consumer influence in maternity care policy reflects a changing of the guard as doctors' traditional authority is questioned by strong consumer organisations and informed consumers.</p> <p>Conclusions</p> <p>Unified consumer influence advocating a move away from obstetric -led maternity care for all pregnant women appears to be synergistic with the ethos of corporate governance and a neoliberal approach to maternity service policy. The silent voice of one consumer group (women happy with their obstetric-led care) in the consultation process has inadvertently contributed to a consensus of opinion in support of the reforms in the absence of the counter viewpoint.</p