Evaluation of the open source HELK SIEM through a series of simulated attacks

Η αναζήτηση απειλών είναι μια αναδυόμενη τάση στον τομέα της ασφάλειας στον κυβερνοχώρο, αποτελώντας έναν πρόσθετο ενισχυτικό παράγοντα αναφορικά με την αποτελεσματική αντιμετώπιση περιστατικών ασφάλειας.. Ένα από τα εργαλεία που χρησιμοποιούνται στο κυνήγι απειλών είναι τα SIEM. Σε αυτή τη διατριβή, αξιολογούμε τις δυνατότητες ανίχνευσης του λογισμικού SIEM ανοιχτού κώδικα HELK. Επιπλέον, ελέγχουμε εάν το HELK βοηθά έναν κυνηγό απειλών. Το HELK έχει δοκιμαστεί στον αποτελεσματικό εντοπισμό διαφόρων επιθέσεων και διαφορετικών κακόβουλων λογισμικών σε υπολογιστές-θύματα.. Η μεθοδολογία επίθεσης που χρησιμοποιείται βασίζεται σε επίσημες οδηγίες για έλεγχο παρεισφρήσεων (penetration testing). Η παρούσα μελέτη καταδεικνύει ότι το HELK εντοπίζει τις περισσότερες από τις επιθέσεις του αντιπάλου. Αν και η χρήση αυτού του προγράμματος εμφανίζει πολλά πλεονεκτήματα, υπάρχει μεγάλος αριθμός μειονεκτημάτων σε σύγκριση με αντίστοιχες λύσεις που διατίθενται επί πληρωμή. Το κύριο συμπέρασμα αυτής της διατριβής είναι ότι αυτό το εργαλείο είναι εξαιρετικό για ερευνητικούς σκοπούς και ως αφετηρία για την εξερεύνηση των SIEM αλλά ενδεχομένως να μην συνιστάται για χρήση του σε παραγωγικά περιβάλλοντα.Threat hunting is an emerging trend in the cyber security domain, being a proactive additional supplement to enhance incident response methods. One of the tools used in threat hunting is SIEM. In this thesis, we evaluate the detection capabilities of the open source HELK SIEM. Furthermore, we check if HELK assists a threat hunter. HELK is tested in effectively detecting various attacks and different malware injections against victim PCs. The attack methodology used is based on official penetration testing guidelines. Our study indicates that HELK detects most of the adversary’s attacks. Although the use of this software displays many benefits, there is a great number of disadvantages in comparison to paid solutions. The main conclusion of this thesis is that this tool is great for research purposes and as a starting point in exploring SIEMs but it seems that, it might not be the optimum solution for production environments

Childhood chronic cough made easy: a simplified approach for the primary care setting

Cough is a defense mechanism, but when it becomes persistent and troublesome, it must be carefully assessed. Chronic cough, that is, cough persisting for more than 4 weeks, has a proven negative impact on a child's quality of life; it interferes with daily activities, sleep, and schooling and may involve frequent health care visits and long-lasting treatments. Currently, there is a plethora of algorithms in the literature aiming to assist in the assessment of chronic cough in children; however, referring to complex flowcharts may be impractical for the usually busy primary care physician. Herein, we provide a simplified tool for the assessment of children with chronic cough in the primary care setting, presenting a basic approach to the most common causes along with hints to avoid common pitfalls in everyday practice. Finally, the most common clinical scenarios are analyzed, aiming to assist primary care physicians in providing the appropriate care to these patients

Sigh-induced changes of breathing pattern in preterm infants

Sighs are thought to play an important role in control of breathing. It is unclear how sighs are triggered, and whether preterm birth and lung disease influence breathing pattern prior to and after a sigh in infants. To assess whether frequency, morphology, size, and short-term variability in tidal volume (VT) before, during, and after a sigh are influenced by gestational age at birth and lung disease (bronchopulmonary dysplasia, BPD) in former preterm infants and healthy term controls measured at equivalent postconceptional age (PCA). We performed tidal breathing measurements in 143 infants during quiet natural sleep at a mean (SD) PCA of 44.8 (1.3) weeks. A total of 233 sighs were analyzed using multilevel, multivariable regression. Sigh frequency in preterm infants increased with the degree of prematurity and severity of BPD, but was not different from that of term controls when normalized to respiratory rate. After a sigh, VT decreased remarkably in all infants (paired t-test: P < 0.001). There was no major effect of prematurity or BPD on various indices of sigh morphology and changes in VT prior to or after a sigh. Short-term variability in VT modestly increased with maturity at birth and infants with BPD showed an earlier return to baseline variability in VT following a sigh. In early infancy, sigh-induced changes in breathing pattern are moderately influenced by prematurity and BPD in preterm infants. The major determinants of sigh-related breathing pattern in these infants remain to be investigated, ideally using a longitudinal study design

Vasopressin but Not Oxytocin Responds to Birth Stress in Infants

Context: Birth triggers a large fetal neuroendocrine response, which is more pronounced in infants born vaginally than in those born by elective cesarean section (ECS). The two related peptides arginine vasopressin (AVP) and oxytocin (OT) play an essential role in peripheral and central stress adaptation and have a shared receptor mediating their function. Elevated cord blood levels of AVP and its surrogate marker copeptin, the C-terminal part of AVP prohormone, have been found after vaginal delivery (VD) as compared to ECS, while release of OT in response to birth is controversial. Moreover, AVP, copeptin and OT have not yet been measured simultaneously at birth. Objective: To test the hypothesis that AVP but not OT levels are increased in infants arterial umbilical cord blood in response to birth stress and to characterize AVP secretion in direct comparison with plasma copeptin. Methods: In a prospective single-center cross-sectional study, we recruited healthy women with a singleton pregnancy and more than 36 completed weeks of gestation delivering via VD or ECS (cesarean without prior uterine contractions or rupture of membranes). Arterial umbilical cord blood samples were collected directly after birth, centrifuged immediately and plasma samples were frozen. Concentrations of AVP and OT were determined by radioimmunoassay and that of copeptin by ultrasensitive immunofluorescence assay. Results: A total of 53 arterial umbilical cord blood samples were collected, n = 29 from VD and n = 24 from ECS. Ten venous blood samples from pregnant women without stress were collected as controls. AVP and copeptin concentrations were significantly higher in the VD group than in the ECS group (both p < 0.001), median (range) AVP 4.78 (2.38–8.66) vs. 2.38 (1.79–3.88) (pmol/L), copeptin 1692 (72.1–4094) vs. 5.78 (3.14–17.97), respectively, (pmol/L). In contrast, there was no difference in OT concentrations (pmol/L) between VD and ECS, 6.00 (2.71–7.69) vs. 6.14 (4.26–9.93), respectively. AVP and copeptin concentrations were closely related (Rs = 0.700, p < 0.001) while OT did not show any correlation to either AVP or copeptin. In linear regression models, vaginal delivery and biochemical stress indicators, base deficit and pH, were independent predictors for both AVP and copeptin. OT was not linked to base deficit or pH. Conclusion: Vaginal birth causes a profound secretion of AVP and copeptin in infants. Whereas AVP indicates acute stress events, copeptin provides information on cumulative stress events over a longer period. In contrast, fetal OT is unaffected by birth stress. Thus, AVP signaling but not OT mediates birth stress response in infants. This unique hormonal activation in early life may impact neurobehavioral development in whole life

Paediatrics: messages from Munich.

The aim of this article is to describe paediatric highlights from the 2014 European Respiratory Society (ERS) International Congress in Munich, Germany. Abstracts from the seven groups of the ERS Paediatric Assembly (Respiratory Physiology and Sleep, Asthma and Allergy, Cystic Fibrosis, Respiratory Infection and Immunology, Neonatology and Paediatric Intensive Care, Respiratory Epidemiology, and Bronchology) are presented in the context of the current literature

Variability in the use of pulse oximeters with children in Kenyan hospitals: A mixed-methods analysis.

BACKGROUND: Pulse oximetry, a relatively inexpensive technology, has the potential to improve health outcomes by reducing incorrect diagnoses and supporting appropriate treatment decisions. There is evidence that in low- and middle-income countries, even when available, widespread uptake of pulse oximeters has not occurred, and little research has examined why. We sought to determine when and with which children pulse oximeters are used in Kenyan hospitals, how pulse oximeter use impacts treatment provision, and the barriers to pulse oximeter use. METHODS AND FINDINGS: We analyzed admissions data recorded through Kenya's Clinical Information Network (CIN) between September 2013 and February 2016. We carried out multiple imputation and generated multivariable regression models in R. We also conducted interviews with 30 healthcare workers and staff from 14 Kenyan hospitals to examine pulse oximetry adoption. We adapted the Integrative Model of Behavioural Prediction to link the results from the multivariable regression analyses to the qualitative findings. We included 27,906 child admissions from 7 hospitals in the quantitative analyses. The median age of the children was 1 year, and 55% were male. Three-quarters had a fever, over half had a cough; other symptoms/signs were difficulty breathing (34%), difficulty feeding (34%), and indrawing (32%). The most common diagnoses were pneumonia, diarrhea, and malaria: 45%, 35%, and 28% of children, respectively, had these diagnoses. Half of the children obtained a pulse oximeter reading, and of these, 10% had an oxygen saturation level below 90%. Children were more likely to receive a pulse oximeter reading if they were not alert (odds ratio [OR]: 1.30, 95% confidence interval (CI): 1.09, 1.55, p = 0.003), had chest indrawing (OR: 1.28, 95% CI: 1.17, 1.40, p < 0.001), or a very high respiratory rate (OR: 1.27, 95% CI: 1.13, 1.43, p < 0.001), as were children admitted to certain hospitals, at later time periods, and when a Paediatric Admission Record (PAR) was used (OR PAR used compared with PAR not present: 2.41, 95% CI: 1.98, 2.94, p < 0.001). Children were more likely to be prescribed oxygen if a pulse oximeter reading was obtained (OR: 1.42, 95% CI:1.25, 1.62, p < 0.001) and if this reading was below 90% (OR: 3.29, 95% CI: 2.82, 3.84, p < 0.001). The interviews indicated that the main barriers to pulse oximeter use are inadequate supply, broken pulse oximeters, and insufficient training on how, when, and why to use pulse oximeters and interpret their results. According to the interviews, variation in pulse oximeter use between hospitals is because of differences in pulse oximeter availability and the leadership of senior doctors in advocating for pulse oximeter use, whereas variation within hospitals over time is due to repair delays. Pulse oximeter use increased over time, likely because of the CIN's feedback to hospitals. When pulse oximeters are used, they are sometimes used incorrectly and some healthcare workers lack confidence in readings that contradict clinical signs. The main limitations of the study are that children with high levels of missing data were not excluded, interview participants might not have been representative, and the interviews did not enable a detailed exploration of differences between counties or across senior management groups. CONCLUSIONS: There remain major challenges to implementing pulse oximetry-a cheap, decades old technology-into routine care in Kenya. Implementation requires efficient and transparent procurement and repair systems to ensure adequate availability. Periodic training, structured clinical records that include prompts, the promotion of pulse oximetry by senior doctors, and monitoring and feedback might also support pulse oximeter use. Our findings can inform strategies to support the use of pulse oximeters to guide prompt and effective treatment, in line with the Sustainable Development Goals. Without effective implementation, the potential benefits of pulse oximeters and possible hospital cost-savings by targeting oxygen therapy might not be realized

Achaiki Iatriki : official publication of the medical society of western Greece and Peloponnesus

In the current issue, the editorial by Cauchi et al. argues for eco-friendly measures in endoscopy and emphasies the role of healthcare providers in reducing waste. The editorial adeptly employs the three Rs (Reduce, Reuse, Recycle) framework to tackle waste management, offering practical solutions. The editorial by Milionis et al. focuses on the reverse cascade screening for paediatric familial hypercholesterolaemia (FH), which is an upcoming tool for public health. Advantages, practices, and challenges regarding FH are thoroughly discussed. Lastly, the editorial by Fousekis et al. presents the main aspects of a chronic immune-mediated cutaneous disease, dermatitis herpetiformis (DH), which constitutes an extraintestinal manifestation of celiac disease, including its diagnosis, pathogenesis, and management. Moreover, this issue includes three review articles. The review article by Krontira et al. discusses the evolving data on the epidemiology, diagnostic approach and appropriate management of foreign body and caustic substance ingestion, based on updated guidelines published by gastroenterological and endoscopic societies. The review by Halliasos et al. provides data on the clinical presentation, diagnosis, and management of metastatic acute spinal cord compression, focusing on the importance of a multidisciplinary team approach, including spine surgeons, radiation oncologists, medical oncologists, palliative care clinicians, physiotherapists, and psychologists. Lastly, the review by Schinas et al. outlines the potential of immune modulation in the treatment of infections and the need for individualised approaches in the modern world of personalised medicine by examining some of the key strategies and immune-based therapies being developed to combat infectious diseases.peer-reviewe