Effectiveness of Similarity Digest Algorithms for Binary Code Similarity in Memory Forensic Analysis

Hoy en dı́a, cualquier organización que esté conectada a Internet es susceptible de sufrir incidentes de ciberseguridad y por tanto, debe contar con un plan de respuesta a incidentes. Este plan ayuda a prevenir, detectar, priorizar y gestionar los incidentes de ciberseguridad. Uno de los pasos para gestionar estos incidentes es la fase de eliminación, que se encarga de neutralizar la persistencia de los ataques, evaluar el alcance de los mismos e identificar el grado de compromiso. Uno de los puntos clave de esta fase es la identicación mediante triaje de la información que es relevante en el incidente. Esto suele hacerse comparando los elementos disponibles con información conocida, centrándose ası́ en aquellos elementos que tienen relevancia para la investigación (llamados evidencias).Este objetivo puede alcanzarse estudiando dos fuentes de información. Por un lado, mediante el análisis de los datos persistentes, como los datos de los discos duros o los dispositivos USB. Por otro lado, mediante el análisis de los datos volátiles, como los datos de la memoria RAM. A diferencia del análisis de datos persistentes, el análisis de datos volátiles permite determinar el alcance de algunos tipos de ataque que no guardan su código en dispositivos de persistencia o cuando los archivos ejecutables almacenados en el disco están cifrados; cuyo código sólo se muestra cuando está en la memoria y se está ejecutado.Existe una limitación en el uso de hashes criptográficos, comúnmente utilizados en el caso de identificación de evidencias en datos persistentes, para identificar evidencias de memoria. Esta limitación se debe a que las evidencias nunca serán idénticas porque la ejecución modifica el contenido de la memoria constantemente. Además, es imposible adquirir la memoria más de una vez con todos los programas en el mismo punto de ejecución. Por lo tanto, los hashes son un método de identificación inválido para el triaje de memoria. Como solución a este problema, en esta tesis se propone el uso de algoritmos de similitud de digest, que miden la similitud entre dos entradas de manera aproximada.Las principales aportaciones de esta tesis son tres. En primer lugar, se realiza un estudio del dominio del problema en el que se evalúa la gestión de la memoria y la modificación de la misma en ejecución. A continuación, se estudian los algoritmos de similitud de digest, desarrollando una clasificación de sus fases y de los ataques contra estos algoritmos, correlacionando las caracterı́sticas de la primera clasificación con los ataques identificados. Por último, se proponen dos métodos de preprocesamiento del contenido de volcados de memoria para mejorar la identificación de los elementos de interés para el análisis.Como conclusión, en esta tesis se muestra que la modificación de bytes dispersos afecta negativamente a los cálculos de similitud entre evidencias de memoria. Esta modificación se produce principalmente por el gestor de memoria del sistema operativo. Además, se muestra que las técnicas propuestas para preprocesar el contenido de volcados de memoria permiten mejorar el proceso de identificación de evidencias en memoria.<br /

Supporting the link between firm and research in the Degree in Business and Management Studies

El objetivo principal de este artículo es presentar el proyecto de innovación docente llevado a cabo durante el curso 2017/2018 entre el alumnado del Grado en Administración y Dirección de Empresas de la Universidad de Córdoba y, en concreto, en asignaturas relacionadas con las finanzas y la contabilidad. En este proyecto se ha implementado una nueva metodología docente al objeto de mejorar la adquisición y el desarrollo de competencias por parte del alumnado en un contexto de íntima conexión entre empresa e investigación, al objeto de simular el contexto real en el cual le serán demandadas las competencias a los graduados en el momento en que se enfrenten a su entrada en el mercado de trabajo. La metodología y las actividades que se han desarrollado para conseguir este objetivo principal incluyen: i) un seminario impartido por un profesional financiero de una empresa real; ii) el método de aprendizaje basado en problemas reales y soluciones científicas; iii) trabajo cooperativo en clase; y iv) un seminario impartido por un investigador en finanzas. Los resultados sugieren que esta metodología promueve de manera eficaz la adquisición de competencias entre el alumnado, especialmente aquellas relativas a interpretar la información financiera y resolver problemas financieros corporativos.The main objective of this paper is to present a teaching innovation project that has been implemented during the 2017/2018 academic year among students enrolled in the Degree in Business and Management at the University of Cordoba and, specifically, in subjects related to finance and accounting. In this innovation project a new teaching methodology has been implemented in order to improve the acquisition and development of competences by the students in a context of close connection between companies and research, to simulate the real context in which competences will be demanded to graduates when they face their entry into the labour market. The methodology and activities that have been developed to achieve this main objective include: i) a seminar by a financial professional of a real company; ii) a learning method based on real problems and scientific solutions; iii) cooperative work; and iv) a seminar by a researcher in finance. The results of this study allow to confirm that this methodology promotes in an effective way the acquisition of competences among students, especially those related to interpreting financial information and solving corporations’ financial problems

Columna falsa de baldosas piezoeléctricas: energía libre para estudiantes de la Universidad Nacional Tecnológica de Lima Sur

Las personas generan energía de muchas formas en cada una de sus actividades; la energía no solo se produce por el uso de la fuerza bruta, sino también en las actividades más simples y cotidianas, por ejemplo, caminar (Concha & Zamalloa, 2017); la fuerza que realizan las pisadas emplea gran cantidad de energía almacenada que se pierde en la superficie que se pisa. En la actualidad existen diferentes medios para poder aprovechar esta energía mecánica que se genera casi involuntariamente; la piezoelectricidad genera energía por pisadas y es proporcional al accionamiento del piezoeléctrico (Burbano, 2021). (apartes del texto

Evidence of association of the NLRP1 gene with giant cell arteritis

Recent studies have focused attention on the involvement of NLRP1 to confer susceptibility for extended autoimmune/inflammatory disorders, being considered a common risk factor in autoimmunity. NLRP1 provides a scaffold for the assembly of the inflammasome that activates caspases 1 and 5, required for processing and activation of the proinflammatory cytokines interleukin 1β (IL-1β), IL-18 and IL-33 and promoting inflammation

El sector fitness al interior de México para 2022: análisis desde sus distintas regiones

The objective of the study is to analyze, compare and reflect on the fitness sector in the interior of Mexico, from different locations located in four of its regions. The study replicates in the Mexican context the methodology of Fitness Trends From Around the Globe and was developed in five stages, adapting the methodology to Spanish and local culture, selection of the participating states and the association with university professionals in the area, analysis of the fitness trends of the national and participating states, analysis of the local contexts, and integration of the final document. In 11 trends, the five main fitness trends in the states, exercise and weight loss programs, functional training, multidisciplinary teams are incorporated together, adaptation of post-pandemic services, personal training, outdoor fitness activities, bodyweight training, online training, strength training, exercise apps and exercise programs to combat childhood obesity. It is expected to strengthen this collaboration to improve the design, expand the application and innovate in the analysis models, elements that would allow observing and responding to the changes in the fitness sector in Mexico and the particularities of its regions, and thereby provide competitive advantages to the sector.El objetivo del estudio es analizar, comparar y reflexionar sobre el sector fitness al interior de México, desde distintas localidades ubicadas en cuatro de sus regiones. El estudio replica en el contexto mexicano la metodología de Fitness Trends From Around the Globe y se desarrolló en cinco etapas, adaptación de la metodología al español y a la cultura local, selección de los estados participantes y la vinculación con profesionales universitarios del área, análisis de las tendencias fitness de lo nacional y de los estados participantes, análisis de los contextos locales, e integración del documento final. En 11 tendencias, se incorporan en su conjunto las cinco principales tendencias de fitness en los estados, programas de ejercicio y pérdida de peso, entrenamiento funcional, equipos multidisciplinares de trabajo, adaptación de servicios post pandemia, entrenamiento personal, actividades fitness al aire libre, entrenamiento con el peso corporal, entrenamiento en línea, entrenamiento de fuerza, apps de ejercicio y programas de ejercicio para combatir la obesidad infantil. Se espera fortalecer esta colaboración para mejorar en el diseño, ampliar la aplicación e innovar en los modelos de análisis, elementos que permitirían observar y responder a los cambios del sector fitness en México y a las particularidades de sus regiones, y con ello brindar ventajas competitivas al sector

Genetic diversity of HLA system in four populations from Baja California, Mexico: Mexicali, La Paz, Tijuana and rural Baja California

We studied HLA class I (HLA-A, -B) and class II (HLA-DRB1, -DQB1) alleles by PCR-SSP based typing in 250 Mexicans from the states of Baja California Norte and Baja California Sur living in Mexicali (N = 100), La Paz (N = 75), Tijuana (N = 25) and rural communities (N = 50) to obtain information regarding allelic and haplotypic frequencies. The most frequent haplotypes for the Baja California region include nine Native American and five European haplotypes. Admixture estimates revealed that the main genetic components are European (50.45 ± 1.84% by ML; 42.03% of European haplotypes) and Native American (43.72 ± 2.36% by ML; 40.24% of Native American haplotypes), while the African genetic component was less apparent (5.83 ± 0.98% by ML; 9.36% of African haplotypes)

Identification of the PTPN22 functional variant R620W as susceptibility genetic factor for giant cell arteritis

Objective: To analyse the role of the PTPN22 and CSK genes, previously associated with autoimmunity, in the predisposition and clinical phenotypes of giant cell arteritis (GCA). Methods: Our study population was composed of 911 patients diagnosed with biopsy-proven GCA and 8136 unaffected controls from a Spanish discovery cohort and three additional independent replication cohorts from Germany, Norway and the UK. Two functional PTPN22 polymorphisms (rs2476601/R620W and rs33996649/R263Q) and two variants of the CSK gene (rs1378942 and rs34933034) were genotyped using predesigned TaqMan assays. Results: The analysis of the discovery cohort provided evidence of association of PTPN22 rs2476601/R620W with GCA (PFDR=1.06E-04, OR=1.62, CI 95% 1.29 to 2.04). The association did not appear to follow a specific GCA subphenotype. No statistically significant differences between allele frequencies for the other PTPN22 and CSK genetic variants were evident either in the case/control or in stratified case analysis. To confirm the detected PTPN22 association, three replication cohorts were genotyped, and a consistent association between the PTPN22 rs2476601/R620W variant and GCA was evident in the overall meta-analysis (PMH=2.00E-06, OR=1.51, CI 95% 1.28 to 1.79). Conclusions: Our results suggest that the PTPN22 polymorphism rs2476601/R620W plays an important role in the genetic risk to GCA

Effectiveness of an intervention for improving drug prescription in primary care patients with multimorbidity and polypharmacy:Study protocol of a cluster randomized clinical trial (Multi-PAP project)

This study was funded by the Fondo de Investigaciones Sanitarias ISCIII (Grant Numbers PI15/00276, PI15/00572, PI15/00996), REDISSEC (Project Numbers RD12/0001/0012, RD16/0001/0005), and the European Regional Development Fund ("A way to build Europe").Background: Multimorbidity is associated with negative effects both on people's health and on healthcare systems. A key problem linked to multimorbidity is polypharmacy, which in turn is associated with increased risk of partly preventable adverse effects, including mortality. The Ariadne principles describe a model of care based on a thorough assessment of diseases, treatments (and potential interactions), clinical status, context and preferences of patients with multimorbidity, with the aim of prioritizing and sharing realistic treatment goals that guide an individualized management. The aim of this study is to evaluate the effectiveness of a complex intervention that implements the Ariadne principles in a population of young-old patients with multimorbidity and polypharmacy. The intervention seeks to improve the appropriateness of prescribing in primary care (PC), as measured by the medication appropriateness index (MAI) score at 6 and 12months, as compared with usual care. Methods/Design: Design:pragmatic cluster randomized clinical trial. Unit of randomization: family physician (FP). Unit of analysis: patient. Scope: PC health centres in three autonomous communities: Aragon, Madrid, and Andalusia (Spain). Population: patients aged 65-74years with multimorbidity (≥3 chronic diseases) and polypharmacy (≥5 drugs prescribed in ≥3months). Sample size: n=400 (200 per study arm). Intervention: complex intervention based on the implementation of the Ariadne principles with two components: (1) FP training and (2) FP-patient interview. Outcomes: MAI score, health services use, quality of life (Euroqol 5D-5L), pharmacotherapy and adherence to treatment (Morisky-Green, Haynes-Sackett), and clinical and socio-demographic variables. Statistical analysis: primary outcome is the difference in MAI score between T0 and T1 and corresponding 95% confidence interval. Adjustment for confounding factors will be performed by multilevel analysis. All analyses will be carried out in accordance with the intention-to-treat principle. Discussion: It is essential to provide evidence concerning interventions on PC patients with polypharmacy and multimorbidity, conducted in the context of routine clinical practice, and involving young-old patients with significant potential for preventing negative health outcomes. Trial registration: Clinicaltrials.gov, NCT02866799Publisher PDFPeer reviewe

Treatment with tocilizumab or corticosteroids for COVID-19 patients with hyperinflammatory state: a multicentre cohort study (SAM-COVID-19)

Objectives: The objective of this study was to estimate the association between tocilizumab or corticosteroids and the risk of intubation or death in patients with coronavirus disease 19 (COVID-19) with a hyperinflammatory state according to clinical and laboratory parameters. Methods: A cohort study was performed in 60 Spanish hospitals including 778 patients with COVID-19 and clinical and laboratory data indicative of a hyperinflammatory state. Treatment was mainly with tocilizumab, an intermediate-high dose of corticosteroids (IHDC), a pulse dose of corticosteroids (PDC), combination therapy, or no treatment. Primary outcome was intubation or death; follow-up was 21 days. Propensity score-adjusted estimations using Cox regression (logistic regression if needed) were calculated. Propensity scores were used as confounders, matching variables and for the inverse probability of treatment weights (IPTWs). Results: In all, 88, 117, 78 and 151 patients treated with tocilizumab, IHDC, PDC, and combination therapy, respectively, were compared with 344 untreated patients. The primary endpoint occurred in 10 (11.4%), 27 (23.1%), 12 (15.4%), 40 (25.6%) and 69 (21.1%), respectively. The IPTW-based hazard ratios (odds ratio for combination therapy) for the primary endpoint were 0.32 (95%CI 0.22-0.47; p < 0.001) for tocilizumab, 0.82 (0.71-1.30; p 0.82) for IHDC, 0.61 (0.43-0.86; p 0.006) for PDC, and 1.17 (0.86-1.58; p 0.30) for combination therapy. Other applications of the propensity score provided similar results, but were not significant for PDC. Tocilizumab was also associated with lower hazard of death alone in IPTW analysis (0.07; 0.02-0.17; p < 0.001). Conclusions: Tocilizumab might be useful in COVID-19 patients with a hyperinflammatory state and should be prioritized for randomized trials in this situatio