Fine-Grained Access Control for Microservices

Microservices-based applications are considered to be a promising paradigm for building large-scale digital systems due to its flexibility, scalability, and agility of development. To achieve the adoption of digital services, applica-tions holding personal data must be secure while giving end-users as much control as possible. On the other hand, for software developers, adoption of a security solution for microservices requires it to be easily adaptable to the application context and requirements while fully exploiting reusability of se-curity components. This paper proposes a solution that targets key security challenges of microservice-based applications. Our approach relies on a co-ordination of security components, and offers a fine-grained access control in order to minimise the risks of token theft, session manipulation, and a ma-licious insider; it also renders the system resilient against confused deputy at-tacks. This solution is based on a combination of OAuth 2 and XACML open standards, and achieved through reusable security components integrat-ed with microservices

Towards an Integrated In-Vehicle Isolation and Resilience Framework for Connected Autonomous Vehicles

Connected Autonomous Vehicles (CAV) have attracted significant attention, specifically due to successful deployment of ultra-reliable low-latency communications with Fifth Generation (5G) wireless networks. Due to the safety-critical nature of CAV, reliability is one of the well-investigated areas of research. Security of in-vehicle communications is mandatory to achieve this goal. Unfortunately, existing research so far focused on in-vehicle isolation or resilience independently. This short paper presents the elements of an integrated in-vehicle isolation and resilience framework to attain a higher degree of reliability for CAV systems. The proposed framework architecture leverages benefits of Trusted Execution Environments to mitigate several classes of threats. The framework implementation is also mapped to the AUTOSAR open automotive standard

Securing Microservices

Microservices has drawn significant interest in recent years and is now successfully finding its way into different areas, from Enterprise IT to Internet-of-Things to even Critical Applications. This article discusses how Microservices can be secured at different levels and stages considering a common software development lifecycle

Permission and Privacy Challenges in Alternate-Tenant Smart Spaces

We explore a ‘Smart-BnB scenario’ whereby someone (an Owner) advertises a smart property on a web platform. Renters use the platform for short periods, and may fully enjoy the property, including its smart features such as sensors. This scenario should further ensure the Renter’s privacy, so we use consent receipts and selective sharing. This paper describes a demonstrator of how smart environments can operate in a privacy-respecting manner

AudiWFlow: Confidential, Collusion-resistant Auditing of Distributed Workflows

We discuss the problem of accountability when multiple parties cooperate towards an end result such as multiple companies in a supply chain or departments of a government service under different authorities. In cases where a full trusted central point does not exist, it is difficult to obtain a trusted audit trail of a workflow when each individual participant is unaccountable to all others. We propose AudiWFlow, an auditing architecture which makes participants accountable for its contributions in a distributed workflow. Our scheme provides confidentiality in most cases, collusion detection and availability of evidence after the workflow terminates. AudiWFlow is based on verifiable secret sharing and real-time peer-to-peer verification of records; it further supports multiple levels of assurance to meet a desired trade-off between the availability of evidence and the overhead resulting from the auditing approach. We propose and evaluate two implementation approaches for AudiWFlow. The first one is fully distributed except for a central auxiliary point that, nevertheless, needs only a low level of trust. The second one is based on smart-contracts running on a public blockchain which is able to remove the need of any central point but requires the integration with a blockchain

Escucha México: estrategias gráficas y cultura auditiva

Durante el periodo de Primavera 2021, el PAP Escucha México tiene como objetivo desarrollar vinculaciones con instituciones, organizaciones e iniciativas ciudadanas que se dedican al tema de la cultura auditiva y el ruido en la Zona Metropolitana de Guadalajara. Mediante la sensibilización de la comunidad ante la problemática de la contaminación sonora, la discapacidad auditiva y de lenguaje, se busca generar entornos incluyentes. A lo largo del semestre se intervino Cruzada Contra el Ruido, Clinica Mariana Anaya Doll y Escucha México Redes Sociales, en las cuales se trabajó con la rehabilitación de sus redes sociales y productos comunicativos buscando generar un impacto en su audiencia.ITESO, A.C

Tumor targeted 4-1BB agonist antibody-albumin fusions with high affinity to FcRn induce anti-tumor immunity without toxicity

17 p.-4 fig.-1 tab.-1 grph. abst.Costimulation of tumor-infiltrating T lymphocytes by anti-4-1BB monoclonal antibodies (mAbs) has shown anti-tumor activity in human trials, but can be associated with significant off-tumor toxicities involving FcγR interactions. Here, we introduce albumin-fused mouse and human bispecific antibodies with clinically favorable pharmacokinetics designed to confine 4-1BB costimulation to the tumor microenvironment. These Fc-free 4-1BB agonists consist of an EGFR-specific VHH antibody, a 4-1BB-specific scFv, and a human albumin sequence engineered for high FcRn binding connected in tandem (LiTCo-Albu). We demonstrate in vitro cognate target engagement, EGFR-specific costimulatory activity, and FcRn-driven cellular recycling similar to non-fused FcRn high-binding albumin. The mouse LiTCo-Albu exhibited a prolonged circulatory half-life and in vivo tumor inhibition, with no indication of 4-1BB mAb-associated toxicity. Furthermore, we show a greater therapeutic effect when used in combination with PD-1-blocking mAbs. These findings demonstrate the feasibility of tumor-specific LiTCo-Albu antibodies for safe and effective costimulatory strategies in cancer immunotherapy.Financial support for this work was obtained from the MCIN/AEI/10.13039/501100011033 (SAF2017-89437-P and PDC2021-121711-100 to LA-V, PID2019-104544GB-I00 to CA, and PID2020-113225GB-I00 to FJB), partially supported by the European Regional Development Fund (ERDF); the Carlos III Health Institute (ISCIII) (PI19/00132 to LS; PI20/01030 to BB), partially supported by the ERDF; the ISCIII-RICORS within the Next Generation EU program (plan de Recuperación, Transformación y Resilencia); the Spanish Association Against Cancer (AECC 19084 to LA-V); the CRIS Cancer Foundation (FCRIS-2018-0042 and FCRIS-2021-0090 to LA-V), the BBVA Foundation (Ayudas Fundación BBVA a Equipos de Investigación Científica SARS-CoV-2 years COVID-19 to LA-V); and the Fundació “La Caixa” (HR21-00761 project IL7R_LungCan to LA-V). AD, OAM, and KAH were funded by the Novo Nordisk Foundation, Grant; CEMBID (Center for Multifunctional Biomolecular Drug Design, Grant Number: NNF17OC0028070). OH was supported by an industrial PhD fellowship from the Comunidad de Madrid (IND2020/BMD-17668). AE-L was supported industrial PhD fellowship from the Carlos III Health Institute (IFI18/00045). CD-A was supported by a predoctoral fellowship from the Spanish Ministry of Science Innovation and Universities (PRE2018-083445). LR-P was supported by a predoctoral fellowship from the Immunology Chair, Universidad Francisco de Vitoria/Merck. LD-A was supported by a Rio Hortega fellowship from the Carlos III Health Institute (CM20/00004).Peer reviewe

Running title: Non-toxic broad anti-tumor activity of an EGFR×4-1BB bispecific trimerbod

32 p.-4 fig.Purpose: The induction of 4-1BB signaling by agonistic antibodies can drive the activation and proliferation of effector T cells and thereby enhance a T-cell–mediated antitumor response. Systemic administration of anti-4-1BB–agonistic IgGs, although effective preclinically, has not advanced in clinical development due to their severe hepatotoxicity.Experimental Design: Here, we generated a humanized EGFR-specific 4-1BB-agonistic trimerbody, which replaces the IgG Fc region with a human collagen homotrimerization domain. It was characterized by structural analysis and in vitro functional studies. We also assessed pharmacokinetics, antitumor efficacy, and toxicity in vivo.Results: In the presence of a T-cell receptor signal, the trimerbody provided potent T-cell costimulation that was strictly dependent on 4-1BB hyperclustering at the point of contact with a tumor antigen-displaying cell surface. It exhibits significant antitumor activity in vivo, without hepatotoxicity, in a wide range of human tumors including colorectal and breast cancer cell-derived xenografts, and non–small cell lung cancer patient-derived xenografts associated with increased tumor-infiltrating CD8+ T cells. The combination of the trimerbody with a PD-L1 blocker led to increased IFNγ secretion in vitro and resulted in tumor regression in humanized mice bearing aggressive triple-negative breast cancer.Conclusions: These results demonstrate the nontoxic broad antitumor activity of humanized Fc-free tumor-specific 4-1BB-agonistic trimerbodies and their synergy with checkpoint blockers, which may provide a way to elicit responses in most patients with cancer while avoiding Fc-mediated adverse reactions.This work was supported by grants from the European Union [IACT Project (602262), H2020-iNEXT (1676)]; the Spanish Ministry of Science, Innovation and Universities and the Spanish Ministry of Economy and Competitiveness (SAF2017-89437-P, CTQ2017-83810-R, RTC-2016-5118-1, RTC-2017-5944-1), partially supported by the European Regional Development Fund; the Carlos III Health Institute (PI16/00357), co-founded by the Plan Nacional de Investigación and the European Union; the CRIS Cancer Foundation (FCRIS-IFI-2018); and the Spanish Association Against Cancer (AECC, 19084). C. Domínguez-Alonso was supported by a predoctoral fellowship from the Spanish Ministry of Science, Innovation and Universities (PRE2018-083445). M. Zonca was supported by the Torres Quevedo Program from the Spanish Ministry of Economy and Competitiveness, co-founded by the European Social Fund (PTQ-16-08340).Peer reviewe

An improved silver staining procedure for schizodeme analysis in polyacrylamide gradient gels

Submitted by sandra infurna ([email protected]) on 2016-06-29T13:46:47Z No. of bitstreams: 1 carlos13_morel_etal_IOC_1990.pdf: 224198 bytes, checksum: 8904d03bdc1774f03253273b913cf438 (MD5)Approved for entry into archive by sandra infurna ([email protected]) on 2016-06-29T13:57:33Z (GMT) No. of bitstreams: 1 carlos13_morel_etal_IOC_1990.pdf: 224198 bytes, checksum: 8904d03bdc1774f03253273b913cf438 (MD5)Made available in DSpace on 2016-06-29T13:57:33Z (GMT). No. of bitstreams: 1 carlos13_morel_etal_IOC_1990.pdf: 224198 bytes, checksum: 8904d03bdc1774f03253273b913cf438 (MD5) Previous issue date: 1990Submitted by Angelo Silva ([email protected]) on 2016-07-07T11:16:52Z No. of bitstreams: 3 carlos13_morel_etal_IOC_1990.pdf.txt: 6 bytes, checksum: 6d93d3216dc4a7f5df47d4876fbec4d3 (MD5) carlos13_morel_etal_IOC_1990.pdf: 224198 bytes, checksum: 8904d03bdc1774f03253273b913cf438 (MD5) license.txt: 2991 bytes, checksum: 5a560609d32a3863062d77ff32785d58 (MD5)Approved for entry into archive by sandra infurna ([email protected]) on 2016-07-07T11:43:05Z (GMT) No. of bitstreams: 3 license.txt: 2991 bytes, checksum: 5a560609d32a3863062d77ff32785d58 (MD5) carlos13_morel_etal_IOC_1990.pdf: 224198 bytes, checksum: 8904d03bdc1774f03253273b913cf438 (MD5) carlos13_morel_etal_IOC_1990.pdf.txt: 6 bytes, checksum: 6d93d3216dc4a7f5df47d4876fbec4d3 (MD5)Made available in DSpace on 2016-07-07T11:43:05Z (GMT). No. of bitstreams: 3 license.txt: 2991 bytes, checksum: 5a560609d32a3863062d77ff32785d58 (MD5) carlos13_morel_etal_IOC_1990.pdf: 224198 bytes, checksum: 8904d03bdc1774f03253273b913cf438 (MD5) carlos13_morel_etal_IOC_1990.pdf.txt: 6 bytes, checksum: 6d93d3216dc4a7f5df47d4876fbec4d3 (MD5) Previous issue date: 1990Fundação Oswaldo Cruz. Instituto Oswaldo Cruz. Departamento de Bioquímica e Biologia Molecular. Rio de Janeiro, RJ, Brasil.Fundação Oswaldo Cruz. Instituto Oswaldo Cruz. Departamento de Bioquímica e Biologia Molecular. Rio de Janeiro, RJ, Brasil.Fundação Oswaldo Cruz. Instituto Oswaldo Cruz. Departamento de Bioquímica e Biologia Molecular. Rio de Janeiro, RJ, Brasil.A simple protocol is described for the silver staining of polyacrylamide gradient gels used for the separation of restriction fragments of kinetoplast DNA [schizodeme analysis of trypanosomatids (Morel et al., 1980)]. The method overcomes the problems of non-uniform staining and strong background color which are frequently encountered when conventional protocols for silver staining of linear gels. The method described has proven to be of general applicability for DNA, RNA and protein separations in gradient gels