Hidden credential retrieval from a reusable password

We revisit the venerable question of access credentials management, which concerns the techniques that we, humans with limited memory, must employ to safeguard our various access keys and tokens in a connected world. Although many existing solutions can be employed to protect a long secret using a short password, those solutions typically require certain assumptions on the distribution of the secret and/or the password, and are helpful against only a subset of the possible attackers. After briefly reviewing a variety of approaches, we propose a user-centric comprehensive model to capture the possible threats posed by online and offline attackers, from the outside and the inside, against the security of both the plaintext and the password. We then propose a few very simple protocols, adapted from the Ford-Kaliski server-assisted password generator and the Boldyreva unique blind signature in particular, that provide the best protection against all kinds of threats, for all distributions of secrets. We also quantify the concrete security of our approach in terms of online and offline password guesses made by outsiders and insiders, in the random-oracle model. The main contribution of this paper lies not in the technical novelty of the proposed solution, but in the identification of the problem and its model. Our results have an immediate and practical application for the real world: they show how to implement single-sign-on stateless roaming authentication for the internet, in a ad-hoc user-driven fashion that requires no change to protocols or infrastructure.

Survival models of community tenure and length of hospital stay for the seriously mentally ill : a 10-year perspective

Objective: To examine the effects of personal and community characteristics, specifically race and rurality, on lengths of state psychiatric hospital and community stays using maximum likelihood survival analysis with a special emphasis on change over a ten year period of time. Data Sources: We used the administrative data of the Virginia Department of Mental Health, Mental Retardation, and Substance Abuse Services (DMHMRSAS) from 1982-1991 and the Area Resources File (ARF). Given these two sources, we constructed a history file for each individual who entered the state psychiatric system over the ten year period. Histories included demographic, treatment, and community characteristics. Study Design: We used a longitudinal, population-based design with maximum likelihood estimation of survival models. We presented a random effects model with unobserved heterogeneity that was independent of observed covariates. The key dependent variables were lengths of inpatient stay and subsequent length of community stay. Explanatory variables measured personal, diagnostic, and community characteristics, as well as controls for calendar time. Data Collection: This study used secondary, administrative, and health planning data. Principal Findings: African-American clients leave the community more quickly than whites. After controlling for other characteristics, however, race does not affect hospital length of stay. Rurality does not affect length of community stays once other personal and community characteristics are controlled for. However, people from rural areas have longer hospital stays even after controlling for personal and community characteristics. The effects of time are significantly smaller than expected. Diagnostic composition effects and a decrease in the rate of first inpatient admissions explain part of this reduced impact of time. We also find strong evidence for the existence of unobserved heterogeneity in both types of stays and adjust for this in our final models. Conclusions: Our results show that information on client characteristics available from inpatient stay records is useful in predicting not only the length of inpatient stay but also the length of the subsequent community stay. This information can be used to target increased discharge planning for those at risk of more rapid readmission to inpatient care. Correlation across observed and unobserved factors affecting length of stay has significant effects on the measurement of relationships between individual factors and lengths of stay. Thus, it is important to control for both observed and unobserved factors in estimation.

Efficient extension of standard Schnorr/RSA signatures into Universal Designated-Verifier Signatures

Universal Designated-Verifier Signature (UDVS) schemes are digital signature schemes with additional functionality which allows any holder of a signature to designate the signature to any desired designated-verifier such that the designated-verifier can verify that the message was signed by the signer, but is unable to convince anyone else of this fact. Since UDVS schemes reduce to standard signatures when no verifier designation is performed, it is natural to ask how to extend the classical Schnorr or RSA signature schemes into UDVS schemes, so that the existing key generation and signing implementation infrastructure for these schemes can be used without modification. We show how this can be efficiently achieved, and provide proofs of security for our schemes in the random oracle model.

Parallel authentication and public-key encryption

A parallel authentication and public-key encryption is introduced and exemplified on joint encryption and signing which compares favorably with sequential Encrypt-then-Sign (ɛtS) or Sign-then-Encrypt (Stɛ) schemes as far as both efficiency and security are concerned. A security model for signcryption, and thus joint encryption and signing, has been recently defined which considers possible attacks and security goals. Such a scheme is considered secure if the encryption part guarantees indistinguishability and the signature part prevents existential forgeries, for outsider but also insider adversaries. We propose two schemes of parallel signcryption, which are efficient alternative to Commit-then-Sign-and- Encrypt (Ct&G3&S). They are both provably secure in the random oracle model. The first one, called generic parallel encrypt and sign, is secure if the encryption scheme is semantically secure against chosen-ciphertext attacks and the signature scheme prevents existential forgeries against random-message attacks. The second scheme, called optimal parallel encrypt. and sign, applies random oracles similar to the OAEP technique in order to achieve security using encryption and signature components with very weak security requirements — encryption is expected to be one-way under chosen-plaintext attacks while signature needs to be secure against universal forgeries under random-plaintext attack, that is actually the case for both the plain-RSA encryption and signature under the usual RSA assumption. Both proposals are generic in the sense that any suitable encryption and signature schemes (i.e. which simply achieve required security) can be used. Furthermore they allow both parallel encryption and signing, as well as parallel decryption and verification. Properties of parallel encrypt and sign schemes are considered and a new security standard for parallel signcryption is proposed.

Universal designated-verifier signatures

Motivated by privacy issues associated with dissemination of signed digital certificates, we define a new type of signature scheme called a ‘Universal Designated-Verifier Signature’ (UDVS). A UDVS scheme can function as a standard publicly-verifiable digital signature but has additional functionality which allows any holder of a signature (not necessarily the signer) to designate the signature to any desired designated-verifier (using the verifier’s public key). Given the designated-signature, the designated-verifier can verify that the message was signed by the signer, but is unable to convince anyone else of this fact. We propose an efficient deterministic UDVS scheme constructed using any bilinear group-pair. Our UDVS scheme functions as a standard Boneh-Lynn-Shacham (BLS) signature when no verifier-designation is performed, and is therefore compatible with the key-generation, signing and verifying algorithms of the BLS scheme. We prove that our UDVS scheme is secure in the sense of our unforgeability and privacy notions for UDVS schemes, under the Bilinear Diffie-Hellman (BDH) assumption for the underlying group-pair, in the random-oracle model. We also demonstrate a general constructive equivalence between a class of unforgeable and unconditionally-private UDVS schemes having unique signatures (which includes the deterministic UDVS schemes) and a class of ID-Based Encryption (IBE) schemes which contains the Boneh-Franklin IBE scheme but not the Cocks IBE scheme.

Bayesian hierarchical models for analysing spatial point-based data at a grid level: A comparison of approaches

Spatial data are now prevalent in a wide range of fields including environmental and health science. This has led to the development of a range of approaches for analysing patterns in these data. In this paper, we compare several Bayesian hierarchical models for analysing point-based data based on the discretization of the study region, resulting in grid-based spatial data. The approaches considered include two parametric models and a semiparametric model. We highlight the methodology and computation for each approach. Two simulation studies are undertaken to compare the performance of these models for various structures of simulated point-based data which resemble environmental data. A case study of a real dataset is also conducted to demonstrate a practical application of the modelling approaches. Goodness-of-fit statistics are computed to compare estimates of the intensity functions. The deviance information criterion is also considered as an alternative model evaluation criterion. The results suggest that the adaptive Gaussian Markov random field model performs well for highly sparse point-based data where there are large variations or clustering across the space; whereas the discretized log Gaussian Cox process produces good fit in dense and clustered point-based data. One should generally consider the nature and structure of the point-based data in order to choose the appropriate method in modelling a discretized spatial point-based data.

Characterization of 67 mitochondrial tRNA gene rearrangements in the Hymenoptera suggests that mitochondrial tRNA gene position is selectively neutral

We present entire sequences of two hymenopteran mitochondrial genomes and the major portion of three others. We combined these data with nine previously sequenced hymenopteran mitochondrial genomes. This allowed us to infer and analyze the evolution of the 67 mitochondrial gene rearrangements so far found in this order. All of these involve tRNA genes, whereas four also involve larger (protein-coding or ribosomal RNA) genes. We find that the vast majority of mitochondrial gene rearrangements are independently derived. A maximum of four of these rearrangements represent shared, derived organizations, whereas three are convergently derived. The remaining mitochondrial gene rearrangements represent new mitochondrial genome organizations. These data are consistent with the proposal that there are an enormous number of alternative mitochondrial genome organizations possible and that mitochondrial genome organization is, for the most part, selectively neutral. Nevertheless, some mitochondrial genes appear less mobile than others. Genes close to the noncoding region are generally more mobile but only marginally so. Some mitochondrial genes rearrange in a pattern consistent with the duplication/random loss model, but more mitochondrial genes move in a pattern inconsistent with this model. An increased rate of mitochondrial gene rearrangement is not tightly associated with the evolution of parasitism. Although parasitic lineages tend to have more mitochondrial gene rearrangements than nonparasitic lineages, there are exceptions (e.g., Orussus and Schlettererius). It is likely that only a small proportion of the total number of mitochondrial gene rearrangements that have occurred during the evolution of the Hymenoptera have been sampled in the present study.

Quantifying uncertainty in parameter estimates for stochastic models of collective cell spreading using approximate Bayesian computation

Wound healing and tumour growth involve collective cell spreading, which is driven by individual motility and proliferation events within a population of cells. Mathematical models are often used to interpret experimental data and to estimate the parameters so that predictions can be made. Existing methods for parameter estimation typically assume that these parameters are constants and often ignore any uncertainty in the estimated values. We use approximate Bayesian computation (ABC) to estimate the cell diffusivity, D, and the cell proliferation rate, λ, from a discrete model of collective cell spreading, and we quantify the uncertainty associated with these estimates using Bayesian inference. We use a detailed experimental data set describing the collective cell spreading of 3T3 fibroblast cells. The ABC analysis is conducted for different combinations of initial cell densities and experimental times in two separate scenarios: (i) where collective cell spreading is driven by cell motility alone, and (ii) where collective cell spreading is driven by combined cell motility and cell proliferation. We find that D can be estimated precisely, with a small coefficient of variation (CV) of 2–6%. Our results indicate that D appears to depend on the experimental time, which is a feature that has been previously overlooked. Assuming that the values of D are the same in both experimental scenarios, we use the information about D from the first experimental scenario to obtain reasonably precise estimates of λ, with a CV between 4 and 12%. Our estimates of D and λ are consistent with previously reported values; however, our method is based on a straightforward measurement of the position of the leading edge whereas previous approaches have involved expensive cell counting techniques. Additional insights gained using a fully Bayesian approach justify the computational cost, especially since it allows us to accommodate information from different experiments in a principled way.

Mathematical models for collective cell spreading

Collective cell spreading is frequently observed in development, tissue repair and disease progression. Mathematical modelling used in conjunction with experimental investigation can provide key insights into the mechanisms driving the spread of cell populations. In this study, we investigated how experimental and modelling frameworks can be used to identify several key features underlying collective cell spreading. In particular, we were able to independently quantify the roles of cell motility and cell proliferation in a spreading cell population, and investigate how these roles are influenced by factors such as the initial cell density, type of cell population and the assay geometry.

Whole-body cryotherapy (extreme cold air exposure) for preventing and treating muscle soreness after exercise in adults

Background Recovery strategies are often usedwith the intention of preventing orminimisingmuscle soreness after exercise. Whole-body cryotherapy, which involves a single or repeated exposure(s) to extremely cold dry air (below -100 °C) in a specialised chamber or cabin for two to four minutes per exposure, is currently being advocated as an effective intervention to reduce muscle soreness after exercise. Objectives To assess the effects (benefits and harms) of whole-body cryotherapy (extreme cold air exposure) for preventing and treating muscle soreness after exercise in adults. Search methods We searched the Cochrane Bone, Joint and Muscle Trauma Group Specialised Register, the Cochrane Central Register of Controlled Trials, MEDLINE, EMBASE, CINAHL, the British Nursing Index and the Physiotherapy Evidence Database. We also searched the reference lists of articles, trial registers and conference proceedings, handsearched journals and contacted experts. The searches were run in August 2015. Selection criteria We aimed to include randomised and quasi-randomised trials that compared the use of whole-body cryotherapy (WBC) versus a passive or control intervention (rest, no treatment or placebo treatment) or active interventions including cold or contrast water immersion, active recovery and infrared therapy for preventing or treating muscle soreness after exercise in adults. We also aimed to include randomised trials that compared different durations or dosages of WBC. Our prespecified primary outcomes were muscle soreness, subjective recovery (e.g. tiredness, well-being) and adverse effects. Data collection and analysis Two review authors independently screened search results, selected studies, assessed risk of bias and extracted and cross-checked data. Where appropriate, we pooled results of comparable trials. The random-effects model was used for pooling where there was substantial heterogeneity.We assessed the quality of the evidence using GRADE. Main results Four laboratory-based randomised controlled trials were included. These reported results for 64 physically active predominantly young adults (mean age 23 years). All but four participants were male. Two trials were parallel group trials (44 participants) and two were cross-over trials (20 participants). The trials were heterogeneous, including the type, temperature, duration and frequency of WBC, and the type of preceding exercise. None of the trials reported active surveillance of predefined adverse events. All four trials had design features that carried a high risk of bias, potentially limiting the reliability of their findings. The evidence for all outcomes was classified as ’very low’ quality based on the GRADE criteria. Two comparisons were tested: WBC versus control (rest or no WBC), tested in four studies; and WBC versus far-infrared therapy, also tested in one study. No studies compared WBC with other active interventions, such as cold water immersion, or different types and applications of WBC. All four trials compared WBC with rest or no WBC. There was very low quality evidence for lower self-reported muscle soreness (pain at rest) scores after WBC at 1 hour (standardised mean difference (SMD) -0.77, 95% confidence interval (CI) -1.42 to -0.12; 20 participants, 2 cross-over trials); 24 hours (SMD -0.57, 95%CI -1.48 to 0.33) and 48 hours (SMD -0.58, 95% CI -1.37 to 0.21), both with 38 participants, 2 cross-over studies, 1 parallel group study; and 72 hours (SMD -0.65, 95% CI -2.54 to 1.24; 29 participants, 1 cross-over study, 1 parallel group study). Of note is that the 95% CIs also included either no between-group differences or a benefit in favour of the control group. One small cross-over trial (9 participants) found no difference in tiredness but better well-being after WBC at 24 hours post exercise. There was no report of adverse events. One small cross-over trial involving nine well-trained runners provided very low quality evidence of lower levels of muscle soreness after WBC, when compared with infrared therapy, at 1 hour follow-up, but not at 24 or 48 hours. The same trial found no difference in well-being but less tiredness after WBC at 24 hours post exercise. There was no report of adverse events. Authors’ conclusions There is insufficient evidence to determine whether whole-body cryotherapy (WBC) reduces self-reportedmuscle soreness, or improves subjective recovery, after exercise compared with passive rest or no WBC in physically active young adult males. There is no evidence on the use of this intervention in females or elite athletes. The lack of evidence on adverse events is important given that the exposure to extreme temperature presents a potential hazard. Further high-quality, well-reported research in this area is required and must provide detailed reporting of adverse events.

Systematic review and meta-analysis of the effects of exercise for those with cancer-related lymphedema

Objective: To evaluate the effects of exercise on cancer-related lymphedema and related symptoms, and to determine the need for those with lymphedema to wear compression during exercise. Data Sources: CINAHL, Cochrane, Ebscohost, MEDLINE, Pubmed, ProQuest Health and Medical Complete, ProQuest Nursing and Allied Health Source, Science Direct and SPORTDiscus databases were searched for trials published prior to 1 January, 2015. Study Selection: Randomised and non-randomised, controlled trials, and single group pre-post studies published in English-language were included. Twenty-one (exercise) and four (compression and exercise) studies met inclusion criteria. Data Extraction: Data was extracted into tabular format using predefined data fields by one reviewer and assessed for accuracy by a second reviewer. Study quality was evaluated using the Effective Public Health Practice Project assessment tool. Data Synthesis: Data was pooled using a random effects model to assess the effects of acute and long-term exercise on lymphedema and lymphedema-associated symptoms, with subgroup analyses for exercise mode and intervention length. There was no effect of exercise (acute or intervention) on lymphedema or associated symptoms with standardised mean differences from all analyses ranging between −0.2 and 0.1 (p-values ≥0.22). Findings from subgroup analyses for exercise mode (aerobic, resistance, mixed, other) and intervention duration (>12 weeks or ≤12 weeks) were consistent with these findings; that is, no effect on lymphedema or associated symptoms. There were too few studies evaluating the effect of compression during regular exercise to conduct a meta-analysis. Conclusions: Individuals with secondary lymphedema can safely participate in progressive, regular exercise without experiencing a worsening of lymphedema or related-symptoms. However, the results also do not suggest any improvements will occur in lymphedema. At present, there is insufficient evidence to support or refute the current clinical recommendation to wear compression garments during regular exercise.

Genome-wide association study for radiographic vertebral fractures: A potential role for the 16q24 BMD locus

Vertebral fracture risk is a heritable complex trait. The aim of this study was to identify genetic susceptibility factors for osteoporotic vertebral fractures applying a genome-wide association study (GWAS) approach. The GWAS discovery was based on the Rotterdam Study, a population-based study of elderly Dutch individuals aged >55years; and comprising 329 cases and 2666 controls with radiographic scoring (McCloskey-Kanis) and genetic data. Replication of one top-associated SNP was pursued by de-novo genotyping of 15 independent studies across Europe, the United States, and Australia and one Asian study. Radiographic vertebral fracture assessment was performed using McCloskey-Kanis or Genant semi-quantitative definitions. SNPs were analyzed in relation to vertebral fracture using logistic regression models corrected for age and sex. Fixed effects inverse variance and Han-Eskin alternative random effects meta-analyses were applied. Genome-wide significance was set at p<5×10-8. In the discovery, a SNP (rs11645938) on chromosome 16q24 was associated with the risk for vertebral fractures at p=4.6×10-8. However, the association was not significant across 5720 cases and 21,791 controls from 14 studies. Fixed-effects meta-analysis summary estimate was 1.06 (95% CI: 0.98-1.14; p=0.17), displaying high degree of heterogeneity (I2=57%; Qhet p=0.0006). Under Han-Eskin alternative random effects model the summary effect was significant (p=0.0005). The SNP maps to a region previously found associated with lumbar spine bone mineral density (LS-BMD) in two large meta-analyses from the GEFOS consortium. A false positive association in the GWAS discovery cannot be excluded, yet, the low-powered setting of the discovery and replication settings (appropriate to identify risk effect size >1.25) may still be consistent with an effect size <1.10, more of the type expected in complex traits. Larger effort in studies with standardized phenotype definitions is needed to confirm or reject the involvement of this locus on the risk for vertebral fractures.

Systematic analysis of changes in cannabis use among participants in control conditions of randomised controlled trials

Introduction Cannabis remains the most used illegal substance across the globe, and negative outcomes and disorders are common. A spotlight therefore falls on reductions in cannabis use in people with cannabis use disorder. Current estimates of unassisted cessation or reduction in cannabis use rely on community surveys, and few studies focus on individuals with disorder. A key interest of services and researchers is to estimate effect size of reductions in consumption among treatment seekers who do not obtain treatment. Effects within waiting list or information-only control conditions of randomised controlled trials offer an opportunity to study this question. Method This paper examines the extent of reductions in days of cannabis use in the control groups of randomised controlled trials on treatment of cannabis use disorders. A systematic literature search was performed to identify trials that reported days of cannabis use in the previous 30 (or equivalent). Results Since all but one of the eight identified studies had delayed treatment controls, results could only be summarised across 2–4 months. Average weighted days of use in the previous 30 days fell from 24.5 to 19.9, and a meta-analysis using a random effects model showed an average reduction of 0.442 SD. However, every study had at least one significant methodological issue. Conclusions While further high-quality data is needed to confirm the observed effects, these results provide a baseline from which researchers and practitioners can estimate the extent of change required to detect effects of cannabis treatments in services or treatment trials.

An improved method to detect damage using modal strain energy based damage index

This paper presents two novel concepts to enhance the accuracy of damage detection using the Modal Strain Energy based Damage Index (MSEDI) with the presence of noise in the mode shape data. Firstly, the paper presents a sequential curve fitting technique that reduces the effect of noise on the calculation process of the MSEDI, more effectively than the two commonly used curve fitting techniques; namely, polynomial and Fourier’s series. Secondly, a probability based Generalized Damage Localization Index (GDLI) is proposed as a viable improvement to the damage detection process. The study uses a validated ABAQUS finite-element model of a reinforced concrete beam to obtain mode shape data in the undamaged and damaged states. Noise is simulated by adding three levels of random noise (1%, 3%, and 5%) to the mode shape data. Results show that damage detection is enhanced with increased number of modes and samples used with the GDLI.

Spatially averaged model of complex-plasma discharge with self-consistent electron energy distribution

A global, or averaged, model for complex low-pressure argon discharge plasmas containing dust grains is presented. The model consists of particle and power balance equations taking into account power loss on the dust grains and the discharge wall. The electron energy distribution is determined by a Boltzmann equation. The effects of the dust and the external conditions, such as the input power and neutral gas pressure, on the electron energy distribution, the electron temperature, the electron and ion number densities, and the dust charge are investigated. It is found that the dust subsystem can strongly affect the stationary state of the discharge by dynamically modifying the electron energy distribution, the electron temperature, the creation and loss of the plasma particles, as well as the power deposition. In particular, the power loss to the dust grains can take up a significant portion of the input power, often even exceeding the loss to the wall.