HyBIS: Windows Guest Protection through Advanced Memory Introspection

Effectively protecting the Windows OS is a challenging task, since most implementation details are not publicly known. Windows has always been the main target of malwares that have exploited numerous bugs and vulnerabilities. Recent trusted boot and additional integrity checks have rendered the Windows OS less vulnerable to kernel-level rootkits. Nevertheless, guest Windows Virtual Machines are becoming an increasingly interesting attack target. In this work we introduce and analyze a novel Hypervisor-Based Introspection System (HyBIS) we developed for protecting Windows OSes from malware and rootkits. The HyBIS architecture is motivated and detailed, while targeted experimental results show its effectiveness. Comparison with related work highlights main HyBIS advantages such as: effective semantic introspection, support for 64-bit architectures and for latest Windows (8.x and 10), advanced malware disabling capabilities. We believe the research effort reported here will pave the way to further advances in the security of Windows OSes

Rpair: Rescaling RePair with Rsync

Data compression is a powerful tool for managing massive but repetitive datasets, especially schemes such as grammar-based compression that support computation over the data without decompressing it. In the best case such a scheme takes a dataset so big that it must be stored on disk and shrinks it enough that it can be stored and processed in internal memory. Even then, however, the scheme is essentially useless unless it can be built on the original dataset reasonably quickly while keeping the dataset on disk. In this paper we show how we can preprocess such datasets with context-triggered piecewise hashing such that afterwards we can apply RePair and other grammar-based compressors more easily. We first give our algorithm, then show how a variant of it can be used to approximate the LZ77 parse, then leverage that to prove theoretical bounds on compression, and finally give experimental evidence that our approach is competitive in practice

Assessing stimulus–stimulus (semantic) conflict in the Stroop task using saccadic two-to-one color response mapping and preresponse pupillary measures

© 2015, The Psychonomic Society, Inc. Conflict in the Stroop task is thought to come from various stages of processing, including semantics. Two-to-one response mappings, in which two response-set colors share a common response location, have been used to isolate stimulus–stimulus (semantic) from stimulus–response conflict in the Stroop task. However, the use of congruent trials as a baseline means that the measured effects could be exaggerated by facilitation, and recent research using neutral, non-color-word trials as a baseline has supported this notion. In the present study, we sought to provide evidence for stimulus–stimulus conflict using an oculomotor Stroop task and an early, preresponse pupillometric measure of effort. The results provided strong (Bayesian) evidence for no statistical difference between two-to-one response-mapping trials and neutral trials in both saccadic response latencies and preresponse pupillometric measures, supporting the notion that the difference between same-response and congruent trials indexes facilitation in congruent trials, and not stimulus–stimulus conflict, thus providing evidence against the presence of semantic conflict in the Stroop task. We also demonstrated the utility of preresponse pupillometry in measuring Stroop interference, supporting the idea that pupillary effects are not simply a residue of making a response

Neural Circuitry of Emotional and Cognitive Conflict Revealed through Facial Expressions

Neural systems underlying conflict processing have been well studied in the cognitive realm, but the extent to which these overlap with those underlying emotional conflict processing remains unclear. A novel adaptation of the AX Continuous Performance Task (AX-CPT), a stimulus-response incompatibility paradigm, was examined that permits close comparison of emotional and cognitive conflict conditions, through the use of affectively-valenced facial expressions as the response modality.Brain activity was monitored with functional magnetic resonance imaging (fMRI) during performance of the emotional AX-CPT. Emotional conflict was manipulated on a trial-by-trial basis, by requiring contextually pre-cued facial expressions to emotional probe stimuli (IAPS images) that were either affectively compatible (low-conflict) or incompatible (high-conflict). The emotion condition was contrasted against a matched cognitive condition that was identical in all respects, except that probe stimuli were emotionally neutral. Components of the brain cognitive control network, including dorsal anterior cingulate cortex (ACC) and lateral prefrontal cortex (PFC), showed conflict-related activation increases in both conditions, but with higher activity during emotion conditions. In contrast, emotion conflict effects were not found in regions associated with affective processing, such as rostral ACC.These activation patterns provide evidence for a domain-general neural system that is active for both emotional and cognitive conflict processing. In line with previous behavioural evidence, greatest activity in these brain regions occurred when both emotional and cognitive influences additively combined to produce increased interference

Molecular, clinical, and muscle studies in myotonic dystrophy type 1 (DM1) associated with novel variant CCG expansions

We assessed clinical, molecular and muscle histopathological features in five unrelated Italian DM1 patients carrying novel variant pathological expansions containing CCG interruptions within the 3'-end of the CTG array at the DMPK locus, detected by bidirectional triplet primed PCR (TP-PCR) and sequencing. Three patients had a negative DM1 testing by routine long-range PCR; the other two patients were identified among 100 unrelated DM1 cases and re-evaluated to estimate the prevalence of variant expansions. The overall prevalence was 4.8 % in our study cohort. There were no major clinical differences between variant and non-variant DM1 patients, except for cognitive involvement. Muscle RNA-FISH, immunofluorescence for MBNL1 and RT-PCR analysis documented the presence of ribonuclear inclusions, their co-localization with MBNL1, and an aberrant splicing pattern involved in DM1 pathogenesis, without any obvious differences between variant and non-variant DM1 patients. Therefore, this study shows that the CCG interruptions at the 3'-end of expanded DMPK alleles do not produce qualitative effects on the RNA-mediated toxic gain-of-function in DM1 muscle tissues. Finally, our results support the conclusion that different patterns of CCG interruptions within the CTG array could modulate the DM1 clinical phenotype, variably affecting the mutational dynamics of the variant repeat

Creatine Fails to Augment the Benefits from Resistance Training in Patients with HIV Infection: A Randomized, Double-Blind, Placebo-Controlled Study

Progressive resistance exercise training (PRT) improves physical functioning in patients with HIV infection. Creatine supplementation can augment the benefits derived from training in athletes and improve muscle function in patients with muscle wasting. The objective of this study was to determine whether creatine supplementation augments the effects of PRT on muscle strength, energetics, and body composition in HIV-infected patients.This is a randomized, double blind, placebo-controlled, clinical research center-based, outpatient study in San Francisco. 40 HIV-positive men (20 creatine, 20 placebo) enrolled in a 14-week study. Subjects were randomly assigned to receive creatine monohydrate or placebo for 14 weeks. Treatment began with a loading dose of 20 g/day or an equivalent number of placebo capsules for 5 days, followed by maintenance dosing of 4.8 g/day or placebo. Beginning at week 2 and continuing to week 14, all subjects underwent thrice-weekly supervised resistance exercise while continuing on the assigned study medication (with repeated 6-week cycles of loading and maintenance). The main outcome measurements included muscle strength (one repetition maximum), energetics ((31)P magnetic resonance spectroscopy), composition and size (magnetic resonance imaging), as well as total body composition (dual-energy X-ray absorptiometry). Thirty-three subjects completed the study (17 creatine, 16 placebo). Strength increased in all 8 muscle groups studied following PRT, but this increase was not augmented by creatine supplementation (average increase 44 vs. 42%, difference 2%, 95% CI -9.5% to 13.9%) in creatine and placebo, respectively). There were no differences between groups in changes in muscle energetics. Thigh muscle cross-sectional area increased following resistance exercise, with no additive effect of creatine. Lean body mass (LBM) increased to a significantly greater extent with creatine. CONCLUSIONS / SIGNIFICANCE: Resistance exercise improved muscle size, strength and function in HIV-infected men. While creatine supplementation produced a greater increase in LBM, it did not augment the robust increase in strength derived from PRT.ClinicalTrials.gov NCT00484627

The contribution of RCTs to quality management and their feasibility in practice

The randomized controlled trial (RCT) is generally accepted as the most reliable method of conducting clinical research. To obtain an unbiased evaluation of the effectiveness of spine surgery, patients should be randomly assigned to either new or standard treatment. The aim of the present article is to provide a short overview of the advantages and challenges of RCTs and to present a summary of the conclusions of the Cochrane Reviews in spine surgery and later published trials in order to evaluate their contribution to quality management and feasibility in practice. From the searches, 130 RCTs were included, 95 from Cochrane Reviews and systematic reviews, and 35 from additional search. No study comparing surgery with sham surgery was identified. The first RCT in spine surgery was published in 1974 and compared debridement and ambulatory treatment in tuberculosis of the spine. The contribution of RCTs in spinal surgery has markedly increased over the last 10 years, which indicates that RCTs are feasible in this field. The results demonstrate missing quality specifications. Despite the number of published trials there is conflicting or limited evidence to support various techniques of instrumentation. The only intervention that receives strong evidence is discectomy for faster relief in carefully selected patients due to lumbar disc prolapse with sciatica. For future trials, authors, referees, and editors are recommended to follow the CONSORT statement. RCTs provide evidence to support clinical opinions before implementation of new techniques, but the individual clinical experience is still important for the doctor who has to face the patient

Differential Cerebral Cortex Transcriptomes of Baboon Neonates Consuming Moderate and High Docosahexaenoic Acid Formulas

BACKGROUND: Docosahexaenoic acid (DHA, 22:6n-3) and arachidonic acid (ARA, 20:4n-6) are the major long chain polyunsaturated fatty acids (LCPUFA) of the central nervous system (CNS). These nutrients are present in most infant formulas at modest levels, intended to support visual and neural development. There are no investigations in primates of the biological consequences of dietary DHA at levels above those present in formulas but within normal breastmilk levels. METHODS AND FINDINGS: Twelve baboons were divided into three formula groups: Control, with no DHA-ARA; “L”, LCPUFA, with 0.33%DHA-0.67%ARA; “L3”, LCPUFA, with 1.00%DHA-0.67%ARA. All the samples are from the precentral gyrus of cerebral cortex brain regions. At 12 weeks of age, changes in gene expression were detected in 1,108 of 54,000 probe sets (2.05%), with most showing <2-fold change. Gene ontology analysis assigns them to diverse biological functions, notably lipid metabolism and transport, G-protein and signal transduction, development, visual perception, cytoskeleton, peptidases, stress response, transcription regulation, and 400 transcripts having no defined function. PLA2G6, a phospholipase recently associated with infantile neuroaxonal dystrophy, was downregulated in both LCPUFA groups. ELOVL5, a PUFA elongase, was the only LCPUFA biosynthetic enzyme that was differentially expressed. Mitochondrial fatty acid carrier, CPT2, was among several genes associated with mitochondrial fatty acid oxidation to be downregulated by high DHA, while the mitochondrial proton carrier, UCP2, was upregulated. TIMM8A, also known as deafness/dystonia peptide 1, was among several differentially expressed neural development genes. LUM and TIMP3, associated with corneal structure and age-related macular degeneration, respectively, were among visual perception genes influenced by LCPUFA. TIA1, a silencer of COX2 gene translation, is upregulated by high DHA. Ingenuity pathway analysis identified a highly significant nervous system network, with epidermal growth factor receptor (EGFR) as the outstanding interaction partner. CONCLUSIONS: These data indicate that LCPUFA concentrations within the normal range of human breastmilk induce global changes in gene expression across a wide array of processes, in addition to changes in visual and neural function normally associated with formula LCPUFA