Creating Network Attack Priority Lists by Analyzing Email Traffic Using Predefined Profiles

Networks can be vast and complicated entities consisting of both servers and workstations that contain information sought by attackers. Searching for specific data in a large network can be a time consuming process. Vast amounts of data either passes through or is stored by various servers on the network. However, intermediate work products are often kept solely on workstations. Potential high value targets can be passively identified by comparing user email traffic against predefined profiles. This method provides a potentially smaller footprint on target systems, less human interaction, and increased efficiency of attackers. Collecting user email traffic and comparing each word in an email to a predefined profile, or a list of key words of interest to the attacker, can provide a prioritized list of systems containing the most relevant information. This research uses two experiments. The functionality experiment uses randomly generated emails and profiles, demonstrating MAPS (Merritt\u27s Adaptive Profiling System)ability to accurately identify matches. The utility experiment uses an email corpus and meaningful profiles, further demonstrating MAPS ability to accurately identify matches with non-random input. A meaningful profile is a list of words bearing a semantic relationship to a topic of interest to the attacker. Results for the functionality experiment show MAPS can parse randomly generated emails and identify matches with an accuracy of 99 percent or above. The utility experiment using an email corpus with meaningful profiles, shows slightly lower accuracies of 95 percent or above. Based upon the match results, network attack priority lists are generated. A network attack priority list is an ordered list of systems, where the potentially highest value systems exhibit the greatest fit to the profile. An attacker then uses the list when searching for target information on the network to prioritize the systems most likely to contain useful data

Combined searches for the production of supersymmetric top quark partners in proton-proton collisions at root s=13 TeV

A combination of searches for top squark pair production using proton-proton collision data at a center-of-mass energy of 13 TeV at the CERN LHC, corresponding to an integrated luminosity of 137 fb(-1) collected by the CMS experiment, is presented. Signatures with at least 2 jets and large missing transverse momentum are categorized into events with 0, 1, or 2 leptons. New results for regions of parameter space where the kinematical properties of top squark pair production and top quark pair production are very similar are presented. Depending on themodel, the combined result excludes a top squarkmass up to 1325 GeV for amassless neutralino, and a neutralinomass up to 700 GeV for a top squarkmass of 1150 GeV. Top squarks with masses from 145 to 295 GeV, for neutralino masses from 0 to 100 GeV, with a mass difference between the top squark and the neutralino in a window of 30 GeV around the mass of the top quark, are excluded for the first time with CMS data. The results of theses searches are also interpreted in an alternative signal model of dark matter production via a spin-0 mediator in association with a top quark pair. Upper limits are set on the cross section for mediator particle masses of up to 420 GeV

Search for new particles in events with energetic jets and large missing transverse momentum in proton-proton collisions at root s=13 TeV

A search is presented for new particles produced at the LHC in proton-proton collisions at root s = 13 TeV, using events with energetic jets and large missing transverse momentum. The analysis is based on a data sample corresponding to an integrated luminosity of 101 fb(-1), collected in 2017-2018 with the CMS detector. Machine learning techniques are used to define separate categories for events with narrow jets from initial-state radiation and events with large-radius jets consistent with a hadronic decay of a W or Z boson. A statistical combination is made with an earlier search based on a data sample of 36 fb(-1), collected in 2016. No significant excess of events is observed with respect to the standard model background expectation determined from control samples in data. The results are interpreted in terms of limits on the branching fraction of an invisible decay of the Higgs boson, as well as constraints on simplified models of dark matter, on first-generation scalar leptoquarks decaying to quarks and neutrinos, and on models with large extra dimensions. Several of the new limits, specifically for spin-1 dark matter mediators, pseudoscalar mediators, colored mediators, and leptoquarks, are the most restrictive to date.Peer reviewe

Search for lepton-flavor violating decays of the Higgs boson in the mu tau and e tau final states in proton-proton collisions at root s=13 TeV

A search is presented for lepton-flavor violating decays of the Higgs boson to mu t and et. The dataset corresponds to an integrated luminosity of 137 fb(-1) collected at the LHC in proton-proton collisions at a center-of-mass energy of 13 TeV. No significant excess has been found, and the results are interpreted in terms of upper limits on lepton-flavor violating branching fractions of the Higgs boson. The observed (expected) upper limits on the branching fractions are, respectively, B(H -> mu t) e tau) < 0.22(0.16)% at 95% confidence level.Peer reviewe

Probing effective field theory operators in the associated production of top quarks with a Z boson in multilepton final states at root s=13 TeV

Peer reviewe

Measurements of the Electroweak Diboson Production Cross Sections in Proton-Proton Collisions at root s=5.02 TeV Using Leptonic Decays

The first measurements of diboson production cross sections in proton-proton interactions at a center-of-mass energy of 5.02 TeV are reported. They are based on data collected with the CMS detector at the LHC, corresponding to an integrated luminosity of 302 pb(-1). Events with two, three, or four charged light leptons (electrons or muons) in the final state are analyzed. The WW, WZ, and ZZ total cross sections are measured as sigma(WW) = 37:0(-5.2)(+5.5) (stat)(-2.6)(+2.7) (syst) pb, sigma(WZ) = 6.4(-2.1)(+2.5) (stat)(-0.3)(+0.5)(syst) pb, and sigma(ZZ) = 5.3(-2.1)(+2.5)(stat)(-0.4)(+0.5) (syst) pb. All measurements are in good agreement with theoretical calculations at combined next-to-next-to-leading order quantum chromodynamics and next-to-leading order electroweak accuracy

Search for a heavy Higgs boson decaying into two lighter Higgs bosons in the tau tau bb final state at 13 TeV

A search for a heavy Higgs boson H decaying into the observed Higgs boson h with a mass of 125 GeV and another Higgs boson h(S) is presented. The h and h(S) bosons are required to decay into a pair of tau leptons and a pair of b quarks, respectively. The search uses a sample of proton-proton collisions collected with the CMS detector at a center-of-mass energy of 13TeV, corresponding to an integrated luminosity of 137 fb(-1). Mass ranges of 240-3000 GeV for m(H) and 60-2800 GeV for m(hS) are explored in the search. No signal has been observed. Model independent 95% confidence level upper limits on the product of the production cross section and the branching fractions of the signal process are set with a sensitivity ranging from 125 fb (for m(H) = 240 GeV) to 2.7 fb (for m(H) = 1000 GeV). These limits are compared to maximally allowed products of the production cross section and the branching fractions of the signal process in the next-to-minimal supersymmetric extension of the standard model.Peer reviewe

Measurement of the top quark mass using events with a single reconstructed top quark in pp collisions at root s=13 TeV

Abstract:A measurement of the top quark mass is performed using a data sample en-riched with single top quark events produced in thetchannel. The study is based on proton-proton collision data, corresponding to an integrated luminosity of 35.9 fb−1, recorded at√s= 13TeV by the CMS experiment at the LHC in 2016. Candidate events are selectedby requiring an isolated high-momentum lepton (muon or electron) and exactly two jets,of which one is identified as originating from a bottom quark. Multivariate discriminantsare designed to separate the signal from the background. Optimized thresholds are placedon the discriminant outputs to obtain an event sample with high signal purity. The topquark mass is found to be172.13+0.76−0.77GeV, where the uncertainty includes both the sta-tistical and systematic components, reaching sub-GeV precision for the first time in thisevent topology. The masses of the top quark and antiquark are also determined separatelyusing the lepton charge in the final state, from which the mass ratio and difference aredetermined to be0.9952+0.0079−0.0104and0.83+1.79−1.35GeV, respectively. The results are consistentwithCPTinvariance

Adsorption of 2,2′-bipyridyl onto sepiolite, attapulgite and smectite group clay minerals from anatolia: The FT-IR and FT-Raman spectra of surface and intercalated species.

The adsorption of 2,2-bipyridyl by natural sepiolite, attapulgite, hectorite, saponite and natural and ion exchanged (Mn, Fe, Co, Ni, Cu, Zn or Sn) bentonites has been investigated by FT-IR and FT-Raman spectroscopy. Spectroscopic results indicate that most of the adsorbed molecules are coordinated to either exchangeable cations (in the case of smectite group clays) or Lewis acidic centres (in the case of sepiolite and attapulgite) as bidentate ligands. The formation of monoanionic surface species has also been detected, to a relatively small extent. No physisorbed surface species has been observed. XRD patterns and UV-visible spectra of the samples are also recorded for additional information

Search for charged Higgs bosons produced in vector boson fusion processes and decaying into vector boson pairs in proton-proton collisions at root s=13 TeV

A search for charged Higgs bosons produced in vector boson fusion processes and decaying into vector bosons, using proton-proton collisions at root s = 13 TeV at the LHC, is reported. The data sample corresponds to an integrated luminosity of 137 fb(-1) collected with the CMS detector. Events are selected by requiring two or three electrons or muons, moderate missing transverse momentum, and two jets with a large rapidity separation and a large dijet mass. No excess of events with respect to the standard model background predictions is observed. Model independent upper limits at 95% confidence level are reported on the product of the cross section and branching fraction for vector boson fusion production of charged Higgs bosons as a function of mass, from 200 to 3000 GeV. The results are interpreted in the context of the Georgi-Machacek model.Peer reviewe