Deployable filtering architectures against large denial-of-service attacks

Denial-of-Service attacks continue to grow in size and frequency despite serious underreporting. While several research solutions have been proposed over the years, they have had important deployment hurdles that have prevented them from seeing any significant level of deployment on the Internet. Commercial solutions exist, but they are costly and generally are not meant to scale to Internet-wide levels. In this thesis we present three filtering architectures against large Denial-of-Service attacks. Their emphasis is in providing an effective solution against such attacks while using simple mechanisms in order to overcome the deployment hurdles faced by other solutions. While these are well-suited to being implemented in fast routing hardware, in the early stages of deployment this is unlikely to be the case. Because of this, we implemented them on low-cost off-the-shelf hardware and evaluated their performance on a network testbed. The results are very encouraging: this setup allows us to forward traffic on a single PC at rates of millions of packets per second even for minimum-sized packets, while at the same time processing as many as one million filters; this gives us confidence that the architecture as a whole could combat even the large botnets currently being reported. Better yet, we show that this single-PC performance scales well with the number of CPU cores and network interfaces, which is promising for our solutions if we consider the current trend in processor design. In addition to using simple mechanisms, we discuss how the architectures provide clear incentives for ISPs that adopt them early, both at the destination as well as at the sources of attacks. The hope is that these will be sufficient to achieve some level of initial deployment. The larger goal is to have an architectural solution against large DoS deployed in place before even more harmful attacks take place; this thesis is hopefully a step in that direction

Building a decentralized, cooperative, and privacy-preserving monitoring system for trustworthiness: The approach of the EU FP7 DEMONS project

n/

DNA bending facilitates the error-free DNA damage tolerance pathway and upholds genome integrity

Abstract DNA replication is sensitive to damage in the template. To bypass lesions and complete replication, cells activate recombination-mediated (error-free) and translesion synthesis-mediated (error-prone) DNA damage tolerance pathways. Crucial for error-free DNA damage tolerance is template switching, which depends on the formation and resolution of damage-bypass intermediates consisting of sister chromatid junctions. Here we show that a chromatin architectural pathway involving the high mobility group box protein Hmo1 channels replication-associated lesions into the error-free DNA damage tolerance pathway mediated by Rad5 and PCNA polyubiquitylation, while preventing mutagenic bypass and toxic recombination. In the process of template switching, Hmo1 also promotes sister chromatid junction formation predominantly during replication. Its C-terminal tail, implicated in chromatin bending, facilitates the formation of catenations/hemicatenations and mediates the roles of Hmo1 in DNA damage tolerance pathway choice and sister chromatid junction formation. Together, the results suggest that replication-associated topological changes involving the molecular DNA bender, Hmo1, set the stage for dedicated repair reactions that limit errors during replication and impact on genome stability

Occupational pesticide intoxications among farmers in Bolivia: a cross-sectional study

BACKGROUND: Pesticide use and its consequences are of concern in Bolivia due to an intensive and increasing use. METHODS: To assess the magnitude and reasons for occupational pesticide intoxication, a cross-sectional study with interviews and blood-tests was performed among 201 volunteer farmers from 48 villages in the temperate and subtropical valleys in the eastern part of the Andes Mountains in Bolivia. Of these 171 male farmers using pesticides in their agricultural production were used in the statistical analysis, including linear- and logistic regression analysis. RESULTS: This study documented a frequent use of the most toxic pesticides among farmers who have had almost no instructions in how to use pesticides and protect themselves against the dangers of intoxication, reflected in the hazardous practices used when handling pesticides. Symptoms of intoxications were common in connection with spraying operations. The risk of experiencing symptoms and the serum cholinesterase activity were influenced by whether or not organophosphates were used and the number of times sprayed. The experience of symptoms was moreover influenced by the hygienic and personal protective measures taken during spraying operations while this had no influence on the serum cholinesterase level. CONCLUSION: The study showed that occupational pesticide intoxications were common among farmers and did depend on multiple factors. Pesticide use is probably one of the largest toxicological problems in Bolivia, and a coordinated action by authorities, society and international bodies is needed to limit the number of intoxications and the environmental pollution

Integration of the archaeological Almohad remains in Granada metro station. The multidisciplinary research for the project and contemporary infrastructure development in the historic centres

La ejecución del tramo subterráneo del metropolitano de Granada ha permitido el hallazgo de los restos arqueológicos de la alberca del Alcázar Genil, residencia regia musulmana periurbana del siglo XIII. El Albercón, de 128 × 27 metros, fue devorado en sus extremos durante el crecimiento urbano del siglo XX, salvándose el tramo central pisado por el Camino de Ronda, vial bajo cuyo trazado discurre el metropolitano. El emplazamiento en Alcázar Genil de una estación subterránea posibilitará la integración de los restos arqueológicos de la alberca, recuperándolos, poniéndolos en valor y haciéndolos visitables.El proyecto de la estación Alcázar Genil aúna los esfuerzos conjuntos de diversas disciplinas que ponen al mismo nivel las ingenierías de los siglos XIII y XXI con una visión interdisciplinar básica para abarcar la complejidad de todo el proyecto con el objetivo de compatibilizar las infraestructuras contemporáneas con el pasado oculto bajo la piel de nuestros viejos centros históricos.The execution of the Granada Metropolitan’s underground line made possible the discovery of archeological remains of a water tank in Alcázar Genil, a royal muslim residence of the 13th century. The water tank, 419 × 88 ft, was destroyed at its ends due to the growth of the city of Granada during the 20th century and today remains only its center section, under Camino de Ronda, exactly where the future Metropolitan will take place. The location of an underground station will allow the recovery, the integration and the exhibition of the archaeological remains of this water tank. The Alcázar Genil station project brings together the work of several disciplines which put in the same level engineering of the 13th and of the 20th century. These different teams work in an interdisciplinary approach to respond to the complexity of the entire project. The aim is to make contemporary infrastructures compatible with the past that is hidden under the skin of our historic centres

Viral capsids: Mechanical characteristics, genome packaging and delivery mechanisms

The main functions of viral capsids are to protect, transport and deliver their genome. The mechanical properties of capsids are supposed to be adapted to these tasks. Bacteriophage capsids also need to withstand the high pressures the DNA is exerting onto it as a result of the DNA packaging and its consequent confinement within the capsid. It is proposed that this pressure helps driving the genome into the host, but other mechanisms also seem to play an important role in ejection. DNA packaging and ejection strategies are obviously dependent on the mechanical properties of the capsid. This review focuses on the mechanical properties of viral capsids in general and the elucidation of the biophysical aspects of genome packaging mechanisms and genome delivery processes of double-stranded DNA bacteriophages in particular

Deployable filtering architectures against large denial-of-service attacks.

Denial-of-Service attacks continue to grow in size and frequency despite serious underreporting. While several research solutions have been proposed over the years, they have had important deployment hurdles that have prevented them from seeing any significant level of deployment on the Internet. Commercial solutions exist, but they are costly and generally are not meant to scale to Internet-wide levels. In this thesis we present three filtering architectures against large Denial-of-Service attacks. Their emphasis is in providing an effective solution against such attacks while using simple mechanisms in order to overcome the deployment hurdles faced by other solutions. While these are well-suited to being implemented in fast routing hardware, in the early stages of deployment this is unlikely to be the case. Because of this, we implemented them on low-cost off-the-shelf hardware and evaluated their performance on a network testbed. The results are very encouraging: this setup allows us to forward traffic on a single PC at rates of millions of packets per second even for minimum-sized packets, while at the same time processing as many as one million filters; this gives us confidence that the architecture as a whole could combat even the large botnets currently being reported. Better yet, we show that this single-PC performance scales well with the number of CPU cores and network interfaces, which is promising for our solutions if we consider the current trend in processor design. In addition to using simple mechanisms, we discuss how the architectures provide clear incentives for ISPs that adopt them early, both at the destination as well as at the sources of attacks. The hope is that these will be sufficient to achieve some level of initial deployment. The larger goal is to have an architectural solution against large DoS deployed in place before even more harmful attacks take place; this thesis is hopefully a step in that direction.