Efficient Non-Linear Covert Channel Detection in TCP Data Streams

Cyber-attacks are causing losses amounted to billions of dollars every year due to data breaches and vulnerabilities. The existing tools for data leakage prevention and detection are often bypassed by using various different types of sophisticated techniques such as network steganography for stealing the data. This is due to several weaknesses which can be exploited by a threat actor in existing detection systems. The weaknesses are high time and memory training complexities as well as large training datasets. These challenges become worse when the amount of generated data increases in every second in many realms. In addition, the number of false positives is high which makes them inaccurate. Finally, there is a lack of a framework catering for the needs such as raising alerts as well as data monitoring and updating/adapting of a threshold value used for checking the data packets for covert data. In order to overcome these weaknesses, this paper proposes a novel framework that includes elements such as continuous data monitoring, threshold maintenance, and alert notification. This paper also proposes a model based on statistical measures to detect covert data leakages, especially for non-linear chaotic data. The main advantage of the proposed model is its capability to provide results with tolerance/threshold values much more efficiently. Our experiments indicate that the proposed framework has low false positives and outperforms various existing techniques in terms of accuracy and efficiency

Genome-Wide Studies of Histone Demethylation Catalysed by the Fission Yeast Homologues of Mammalian LSD1

In order to gain a more global view of the activity of histone demethylases, we report here genome-wide studies of the fission yeast SWIRM and polyamine oxidase (PAO) domain homologues of mammalian LSD1. Consistent with previous work we find that the two S. pombe proteins, which we name Swm1 and Swm2 (after SWIRM1 and SWIRM2), associate together in a complex. However, we find that this complex specifically demethylates lysine 9 in histone H3 (H3K9) and both up- and down-regulates expression of different groups of genes. Using chromatin-immunoprecipitation, to isolate fragments of chromatin containing either H3K4me2 or H3K9me2, and DNA microarray analysis (ChIP-chip), we have studied genome-wide changes in patterns of histone methylation, and their correlation with gene expression, upon deletion of the swm1+ gene. Using hyper-geometric probability comparisons we uncover genetic links between lysine-specific demethylases, the histone deacetylase Clr6, and the chromatin remodeller Hrp1. The data presented here demonstrate that in fission yeast the SWIRM/PAO domain proteins Swm1 and Swm2 are associated in complexes that can remove methyl groups from lysine 9 methylated histone H3. In vitro, we show that bacterially expressed Swm1 also possesses lysine 9 demethylase activity. In vivo, loss of Swm1 increases the global levels of both H3K9me2 and H3K4me2. A significant accumulation of H3K4me2 is observed at genes that are up-regulated in a swm1 deletion strain. In addition, H3K9me2 accumulates at some genes known to be direct Swm1/2 targets that are down-regulated in the swm1¿ strain. The in vivo data indicate that Swm1 acts in concert with the HDAC Clr6 and the chromatin remodeller Hrp1 to repress gene expression. In addition, our in vitro analyses suggest that the H3K9 demethylase activity requires an unidentified post-translational modification to allow it to act. Thus, our results highlight complex interactions between histone demethylase, deacetylase and chromatin remodelling activities in the regulation of gene expression

Parameter Reduction in Log-normal Chain-ladder Models

Multiplicative chain-ladder (CL) models are characterized by CL factors that explain the development of claims from one period to the next. In classical CL models every development period has its own CL factor. In the present paper we give a method describing how some of these CL factors can be modeled by a joint functional dependence. This joint functional form reduces the number of model parameters needed

Redox linked flavin sites in extracellular decaheme proteins involved in microbe-mineral electron transfer

Extracellular microbe-mineral electron transfer is a major driving force for the oxidation of organic carbon in many subsurface environments. Extracellular multi-heme cytochromes of the Shewenella genus play a major role in this process but the mechanism of electron exchange at the interface between cytochrome and acceptor is widely debated. The 1.8 Å x-ray crystal structure of the decaheme MtrC revealed a highly conserved CX8C disulfide that, when substituted for AX8A, severely compromised the ability of S. oneidensis to grow under aerobic conditions. Reductive cleavage of the disulfide in the presence of flavin mononucleotide (FMN) resulted in the reversible formation of a stable flavocytochrome. Similar results were also observed with other decaheme cytochromes, OmcA, MtrF and UndA. The data suggest that these decaheme cytochromes can transition between highly reactive flavocytochromes or less reactive cytochromes, and that this transition is controlled by a redox active disulfide that responds to the presence of oxygen

SQL Injection Attack Classification through the Feature Extraction of SQL Query strings using a Gap-Weighted String Subsequence Kernel

SQL Injection Attacks are one of the most common methods behind data security breaches. Previous research has attempted to produce viable detection solutions in order to filter SQL Injection Attacks from regular queries. Unfortunately it has proven to be a challenging problem with many solutions suffering from disadvantages such as being unable to process in real time as a preventative solution, a lack of adaptability to differing types of attack and the requirement for access to difficult-to-obtain information about the source application. This paper presents a novel solution of classifying SQL queries purely on the features of the initial query string. A Gap-Weighted String Subsequence Kernel algorithm is implemented to identify subsequences of shared characters between query strings for the output of a similarity metric. Finally a Support Vector Machine is trained on the similarity metrics between known query strings which are then used to classify unknown test queries. By gathering all feature data from the query strings, additional information from the source application is not required. The probabilistic nature of the learned models allows the solution to adapt to new threats whilst in operation. The proposed solution is evaluated using a number of test datasets derived from the Amnesia testbed datasets. The demonstration software achieved 97.07% accuracy for Select type queries and 92.48% accuracy for Insert type queries. This limited success rate is due to unsanitised quotation marks within legitimate inputs confusing the feature extraction. Using a test dataset that denies legitimate queries the use of unsanitised quotation marks, the Select and Insert query accuracy rose

Ancestral morphology of Ecdysozoa constrained by an early Cambrian stem group ecdysozoan

This is the final version. Available on open access from BMC via the DOI in this recordAvailability of data and materials: The datasets used and/or analysed during the current study are available from the corresponding author on reasonable request. The phylogenetic data matrix is included as a downloadable NEXUS file (Additional File 7).Background: Ecdysozoa are the moulting protostomes, including arthropods, tardigrades, and nematodes. Both the molecular and fossil records indicate that Ecdysozoa is an ancient group originating in the terminal Proterozoic, and exceptional fossil biotas show their dominance and diversity at the beginning of the Phanerozoic. However, the nature of the ecdysozoan common ancestor has been difficult to ascertain due to the extreme morphological diversity of extant Ecdysozoa, and the lack of early diverging taxa in ancient fossil biotas. Results: Here we re-describe Acosmia maotiania from the early Cambrian Chengjiang Biota of Yunnan Province, China and assign it to stem group Ecdysozoa. Acosmia features a two-part body, with an anterior proboscis bearing a terminal mouth and muscular pharynx, and a posterior annulated trunk with a through gut. Morphological phylogenetic analyses of the protostomes using parsimony, maximum likelihood and Bayesian inference, with coding informed by published experimental decay studies, each placed Acosmia as sister taxon to Cycloneuralia + Panarthropoda—i.e. stem group Ecdysozoa. Ancestral state probabilities were calculated for key ecdysozoan nodes, in order to test characters inferred from fossils to be ancestral for Ecdysozoa. Results support an ancestor of crown group ecdysozoans sharing an annulated vermiform body with a terminal mouth like Acosmia, but also possessing the pharyngeal armature and circumoral structures characteristic of Cambrian cycloneuralians and lobopodians. Conclusions: Acosmia is the first taxon placed in the ecdysozoan stem group and provides a constraint to test hypotheses on the early evolution of Ecdysozoa. Our study suggests acquisition of pharyngeal armature, and therefore a change in feeding strategy (e.g. predation), may have characterised the origin and radiation of crown group ecdysozoans from Acosmia-like ancestors.Yunnan provincial research grantNatural Environment Research Council (NERC

Pharmacology of airways and vessels in lung slices in situ: role of endogenous dilator hormones

Small airway and vessels play a critical role in chronic airway and pulmonary vascular diseases, but their pharmacology has not been well characterised. We have studied airway and vascular responses in rat lung slices and separately in vitro using myography. In lung slices, under basal conditions, acetylcholine contracted airways, but had no vascular effect. The thromboxane mimetic, U46619 contracted both vessels and airways. In the presence of U46619, acetylcholine dilated vessels, but further contracted airways, an effect that was blocked by the nitric oxide synthase inhibitor L-N(G)-nitro-L-arginine or apamin plus charybdotoxin, which inhibit endothelial-derived hyperpolarising factor. Airway responses in lung slices were unaffected by L-N(G)nitro-L-arginine methyl ester, indomethacin or apamin plus charybdotoxin. By contrast, apamin plus charybdotoxin contracted bronchi studied in isolation. Our observations are the first to identify mechanisms of endothelium dependent dilations in precision cut lung slices and the potential for transverse hormonal communication between airways and vessels