High accuracy android malware detection using ensemble learning

With over 50 billion downloads and more than 1.3 million apps in Google’s official market, Android has continued to gain popularity amongst smartphone users worldwide. At the same time there has been a rise in malware targeting the platform, with more recent strains employing highly sophisticated detection avoidance techniques. As traditional signature based methods become less potent in detecting unknown malware, alternatives are needed for timely zero-day discovery. Thus this paper proposes an approach that utilizes ensemble learning for Android malware detection. It combines advantages of static analysis with the efficiency and performance of ensemble machine learning to improve Android malware detection accuracy. The machine learning models are built using a large repository of malware samples and benign apps from a leading antivirus vendor. Experimental results and analysis presented shows that the proposed method which uses a large feature space to leverage the power of ensemble learning is capable of 97.3 % to 99% detection accuracy with very low false positive rates.

Android Malware Detection: an Eigenspace Analysis Approach

The battle to mitigate Android malware has become more critical with the emergence of new strains incorporating increasingly sophisticated evasion techniques, in turn necessitating more advanced detection capabilities. Hence, in this paper we propose and evaluate a machine learning based approach based on eigenspace analysis for Android malware detection using features derived from static analysis characterization of Android applications. Empirical evaluation with a dataset of real malware and benign samples show that detection rate of over 96% with a very low false positive rate is achievable using the proposed method.

The use of erythropoiesis-stimulating agents with ruxolitinib in patients with myelofibrosis in COMFORT-II: an open-label, phase 3 study assessing efficacy and safety of ruxolitinib versus best available therapy in the treatment of myelofibrosis

BACKGROUND: Anemia is considered a negative prognostic risk factor for survival in patients with myelofibrosis. Most patients with myelofibrosis are anemic, and 35-54 % present with anemia at diagnosis. Ruxolitinib, a potent inhibitor of Janus kinase (JAK) 1 and JAK2, was associated with an overall survival benefit and improvements in splenomegaly and patient-reported outcomes in patients with myelofibrosis in the two phase 3 COMFORT studies. Consistent with the ruxolitinib mechanism of action, anemia was a frequently reported adverse event. In clinical practice, anemia is sometimes managed with erythropoiesis-stimulating agents (ESAs). This post hoc analysis evaluated the safety and efficacy of concomitant ruxolitinib and ESA administration in patients enrolled in COMFORT-II, an open-label, phase 3 study comparing the efficacy and safety of ruxolitinib with best available therapy for treatment of myelofibrosis. Patients were randomized (2:1) to receive ruxolitinib 15 or 20 mg twice daily or best available therapy. Spleen volume was assessed by magnetic resonance imaging or computed tomography scan.

RESULTS: Thirteen of 146 ruxolitinib-treated patients had concomitant ESA administration (+ESA). The median exposure to ruxolitinib was 114 weeks in the +ESA group and 111 weeks in the overall ruxolitinib arm; the median ruxolitinib dose intensity was 33 mg/day for each group. Six weeks before the first ESA administration, 10 of the 13 patients had grade 3/4 hemoglobin abnormalities. These had improved to grade 2 in 7 of the 13 patients by 6 weeks after the first ESA administration. The rate of packed red blood cell transfusions per month within 12 weeks before and after first ESA administration remained the same in 1 patient, decreased in 2 patients, and increased in 3 patients; 7 patients remained transfusion independent. Reductions in splenomegaly were observed in 69 % of evaluable patients (9/13) following first ESA administration.

CONCLUSIONS: Concomitant use of an ESA with ruxolitinib was well tolerated and did not affect the efficacy of ruxolitinib. Further investigations evaluating the effects of ESAs to alleviate anemia in ruxolitinib-treated patients are warranted (ClinicalTrials.gov identifier, NCT00934544; July 6, 2009).

Detecting Packed Executables using Steganalysis

This paper proposes a novel method of detecting packed executable files using steganalysis, primarily targeting the detection of obfuscated malware through packing. Considering that over 80% of malware in the wild is packed, detection accuracy and low false negative rates are important properties of malware detection methods. Experimental results outlined in this paper reveal that the proposed approach achieving an overall detection accuracy of greater than 99%, a false negative rate of 1% and a false positive rate of 0%.

Dark room provocative test and extent of angle closure: an anterior segment OCT study.

PURPOSE: To clarify the risk parameters measured by anterior segment optical coherence tomography (AS-OCT) for elevated intraocular pressures (IOP) provoked by the darkroom test and to provide recommendations for its clinical usage. METHODS: Subjects aged >40 years and whose peripheral anterior chambers were ≤1/4 corneal thickness were recruited. The anterior segment of the eye was imaged in sitting position and under both light and dark conditions and biometry was performed using anterior segment optical coherence tomography. The analyzed parameters were: (1) central anterior chamber depth (ACD); (2) anterior chamber width; (3) pupil diameter; (4) iris curvature; (5) lens thickness; and (6) number of meridians with closed angles (NCA). Then the darkroom test was performed and a positive provocative test result was defined as a rise in IOP ≥8 mm Hg after the test. Statistical analyses included: (1) the difference in parameters between positive and negative eyes; (2) the association between posttest IOP and the parameters; and (3) the difference in parameters between the 2 eyes in subjects with the asymmetric results. RESULTS: A total of 70 subjects were recruited. ACD (P=0.022), NCA in light (P<0.001), and NCA in dark (P<0.001) were different significantly between eyes with positive and negative results. There was a strong association between NCA in dark (r=0.755, P<0.001) and the posttest IOP. Among subjects with asymmetric results between the 2 eyes, the ACD was shallower and the lens thickness was larger in the positive eye. CONCLUSIONS: The posttest IOP is determined by the extent of functionally closed angles in the dark. The test may be useful in the early diagnosis of primary angle closure. At the same time, angle configuration should be evaluated to remove false positive result.

The comparative utility of fluorescence in situ hybridization and reverse transcription-polymerase chain reaction in the diagnosis of alveolar rhabdomyosarcoma.

Fluorescence in situ hybridization (FISH) for FOXO1 gene rearrangement and reverse transcription-polymerase chain reaction (PCR) for PAX3/7-FOXO1 fusion transcripts have become routine ancillary tools for the diagnosis of alveolar rhabdomyosarcomas (ARMS). Here we summarize our experience of these adjunct diagnostic modalities at a tertiary center, presenting the largest comparative series of FISH and PCR for suspected or possible ARMS to date. All suspected or possible ARMS tested by FISH or PCR for FOXO1 rearrangement or PAX3/7-FOXO1 fusion transcripts over a 7-year period were included. FISH and PCR results were correlated with clinical and histologic findings. One hundred samples from 95 patients had FISH and/or PCR performed. FISH had higher rates of technical success (96.8 %) compared with PCR (88 %). Where both tests were utilized successfully, there was high concordance rate between them (94.9 %). In 24 histologic ARMS tested for FISH or PCR, 83.3 % were translocation-positive (all for PAX3-FOXO1 by PCR) and included 3 histologic solid variants. In 76 cases where ARMS was excluded, there were 3 potential false-positive cases with FISH but none with PCR. PCR had similar sensitivity (85.7 %) and better specificity (100 %) in aiding the diagnosis of ARMS, compared with FISH (85 and 95.8 %, respectively). All solid variant ARMS harbored FOXO1 gene rearrangements and PAX3-FOXO1 ARMS were detected to the exclusion of PAX7-FOXO1. In comparative analysis, both FISH and PCR are useful in aiding the diagnosis of ARMS and excluding its sarcomatous mimics. FISH is more reliable technically but has less specificity than PCR. In cases where ARMS is in the differential diagnosis, it is optimal to perform both PCR and FISH: both have similar sensitivities for detecting ARMS, but FISH may confirm or exclude cases that are technically unsuccessful with PCR, while PCR can detect specific fusion transcripts that may be useful prognostically.

A quality control program for mutation detection in KIT and PDGFRA in gastrointestinal stromal tumours.

BACKGROUND: Although most gastrointestinal stromal tumours (GIST) carry oncogenic mutations in KIT exons 9, 11, 13 and 17, or in platelet-derived growth factor receptor alpha (PDGFRA) exons 12, 14 and 18, around 10% of GIST are free of these mutations. Genotyping and accurate detection of KIT/PDGFRA mutations in GIST are becoming increasingly useful for clinicians in the management of the disease. METHOD: To evaluate and improve laboratory practice in GIST mutation detection, we developed a mutational screening quality control program. Eleven laboratories were enrolled in this program and 50 DNA samples were analysed, each of them by four different laboratories, giving 200 mutational reports. RESULTS: In total, eight mutations were not detected by at least one laboratory. One false positive result was reported in one sample. Thus, the mean global rate of error with clinical implication based on 200 reports was 4.5%. Concerning specific polymorphisms detection, the rate varied from 0 to 100%, depending on the laboratory. The way mutations were reported was very heterogeneous, and some errors were detected. CONCLUSION: This study demonstrated that such a program was necessary for laboratories to improve the quality of the analysis, because an error rate of 4.5% may have clinical consequences for the patient.

Heteroduplex analysis of VDJ amplified segments from rearranged IgH genes for clonality assessments in B-cell non-Hodgkin's lymphoma. A comparison between different strategies.

BACKGROUND AND OBJECTIVE: The main difficulty of PCR-based clonality studies for B-cell lymphoproliferative disorders (B-LPD) is discrimination between monoclonal and polyclonal PCR products, especially when there is a high background of polyclonal B cells in the tumor sample. Actually, PCR-based methods for clonality assessment require additional analysis of the PCR products in order to discern between monoclonal and polyclonal samples. Heteroduplex analysis represents an attractive approach since it is easy to perform and avoids the use of radioactive substrates or expensive equipment. DESIGN AND METHODS: We studied the sensitivity and specificity of heteroduplex PCR analysis for monoclonal detection in samples from 90 B-cell non Hodgkin's lymphoma (B-NHL) patients and in 28 individuals without neoplastic B-cell disorders (negative controls). Furthermore, in 42 B-NHL and in the same 28 negative controls, we compared heteroduplex analysis vs the classical PCR technique. We also compared ethidium bromide (EtBr) vs. silver nitrate (AgNO(3)) staining as well as agarose vs. polyacrylamide gel electrophoresis (PAGE). RESULTS: Using two pair consensus primers sited at VH (FR3 and FR2) and at JH, 91% of B-NHL samples displayed monoclonal products after heteroduplex PCR analysis using PAGE and AgNO(3) staining. Moreover, no polyclonal sample showed a monoclonal PCR product. By contrast, false positive results were obtained when using agarose (5/28) and PAGE without heteroduplex analysis: 2/28 and 8/28 with EtBr and AgNO(3) staining, respectively. In addition, false negative results only appeared with EtBr staining: 13/42 in agarose, 4/42 in PAGE without heteroduplex analysis and 7/42 in PAGE after heteroduplex analysis. INTERPRETATION AND CONCLUSIONS: We conclude that AgNO(3) stained PAGE after heteroduplex analysis is the most suitable strategy for detecting monoclonal rearrangements in B-NHL samples because it does not produce false-positive results and the risk of false-negative results is very low.

Heteroduplex PCR analysis of rearranged immunoglobulin genes for clonality assessment in multiple myeloma.

BACKGROUND AND OBJECTIVE: Molecular analysis by PCR of monoclonally rearranged immunoglobulin (Ig) genes can be used for diagnosis in B-cell lymphoproliferative disorders (LPD), as well as for monitoring minimal residual disease (MRD) after treatment. This technique has the risk of false-positive results due to the "background" amplification of similar rearrangements derived from polyclonal B-cells. This problem can be resolved in advance by additional analyses that discern between polyclonal and monoclonal PCR products, such as the heteroduplex analysis. A second problem is that PCR frequently fails to amplify the junction regions, mainly due to somatic mutations frequently present in mature (post-follicular) B-cell lymphoproliferations. The use of additional targets (e.g. Ig light chain genes) can avoid this problem. DESIGN AND METHODS: We studied the specificity of heteroduplex PCR analysis of several Ig junction regions to detect monoclonal products in samples from 84 MM patients and 24 patients with B cell polyclonal disorders. RESULTS: Using two distinct VH consensus primers (FR3 and FR2) in combination with one JH primer, 79% of the MM displayed monoclonal products. The percentage of positive cases was increased by amplification of the Vlamda-Jlamda junction regions or kappa(de) rearrangements, using two or five pairs of consensus primers, respectively. After including these targets in the heteroduplex PCR analysis, 93% of MM cases displayed monoclonal products. None of the polyclonal samples analyzed resulted in monoclonal products. Dilution experiments showed that monoclonal rearrangements could be detected with a sensitivity of at least 10(-2) in a background with >30% polyclonal B-cells, the sensitivity increasing up to 10(-3) when the polyclonal background was

Auditory false perceptions are mediated by psychosis risk factors

Introduction. Auditory hallucinations exist in psychotic disorders as well as the general population. Proneness to hallucinations, as measured by positive schizotypy, predicts false perceptions during an auditory signal detection task (Barkus, Stirling, Hopkins, McKie, & Lewis, 2007). Our aim was to replicate this result and extend it by examining effects of age and sex, both important demographic predictors of psychosis.

Method. A sample of 76 healthy volunteers split into 15-17 years (n = 46) and 19 years plus (n = 30) underwent a signal detection task designed to detect propensity towards false perceptions under ambiguous auditory conditions. Scores on the Unusual Experiences subscale (UE) of the O-LIFE schizotypy scale, IQ, and a measure of working memory were also assessed.

Results. We replicated our initial finding (Barkus et al., 2007): High scores on positive schizotypy were associated with false perceptions. Younger participants who scored highly on positive schizotypy reported significantly more false perceptions compared to other groups (p = .04). Older participants who had had an imaginary friend reported more false perceptions during the signal detection task (p <. 01).

Conclusions. Younger participants seem most vulnerable to the effects of positive schizotypal traits in terms of a signal detection deficit that underlies auditory hallucinations. Schizotypy may have greatest impact closer to the risk period for development of psychotic disorders.

Preferences for a third-trimester ultrasound scan in a low-risk obstetric population: a discrete choice experiment

Objective: Establish maternal preferences for a third-trimester ultrasound scan in a healthy, low-risk pregnant population.

Design: Cross-sectional study incorporating a discrete choice experiment.

Setting: A large, urban maternity hospital in Northern Ireland.

Participants: One hundred and forty-six women in their second trimester of pregnancy.

Methods: A discrete choice experiment was designed to elicit preferences for four attributes of a third-trimester ultrasound scan: health-care professional conducting the scan, detection rate for abnormal foetal growth, provision of non-medical information, cost. Additional data collected included age, marital status, socio-economic status, obstetric history, pregnancy-specific stress levels, perceived health and whether pregnancy was planned. Analysis was undertaken using a mixed logit model with interaction effects.

Main outcome measures: Women's preferences for, and trade-offs between, the attributes of a hypothetical scan and indirect willingness-to-pay estimates.

Results: Women had significant positive preference for higher rate of detection, lower cost and provision of non-medical information, with no significant value placed on scan operator. Interaction effects revealed subgroups that valued the scan most: women experiencing their first pregnancy, women reporting higher levels of stress, an adverse obstetric history and older women.

Conclusions: Women were able to trade on aspects of care and place relative importance on clinical, non-clinical outcomes and processes of service delivery, thus highlighting the potential of using health utilities in the development of services from a clinical, economic and social perspective. Specifically, maternal preferences exhibited provide valuable information for designing a randomized trial of effectiveness and insight for clinical and policy decision makers to inform woman-centred care.

Investigating the Potential Impact of Four-dimensional Computed Tomography (4DCT) on Toxicity, Outcomes and Dose Escalation for Radical Lung Cancer Radiotherapy

AIMS: To investigate the potential dosimetric and clinical benefits predicted by using four-dimensional computed tomography (4DCT) compared with 3DCT in the planning of radical radiotherapy for non-small cell lung cancer.

MATERIALS AND METHODS:
Twenty patients were planned using free breathing 4DCT then retrospectively delineated on three-dimensional helical scan sets (3DCT). Beam arrangement and total dose (55 Gy in 20 fractions) were matched for 3D and 4D plans. Plans were compared for differences in planning target volume (PTV) geometrics and normal tissue complication probability (NTCP) for organs at risk using dose volume histograms. Tumour control probability and NTCP were modelled using the Lyman-Kutcher-Burman (LKB) model. This was compared with a predictive clinical algorithm (Maastro), which is based on patient characteristics, including: age, performance status, smoking history, lung function, tumour staging and concomitant chemotherapy, to predict survival and toxicity outcomes. Potential therapeutic gains were investigated by applying isotoxic dose escalation to both plans using constraints for mean lung dose (18 Gy), oesophageal maximum (70 Gy) and spinal cord maximum (48 Gy).

RESULTS:
4DCT based plans had lower PTV volumes, a lower dose to organs at risk and lower predicted NTCP rates on LKB modelling (P < 0.006). The clinical algorithm showed no difference for predicted 2-year survival and dyspnoea rates between the groups, but did predict for lower oesophageal toxicity with 4DCT plans (P = 0.001). There was no correlation between LKB modelling and the clinical algorithm for lung toxicity or survival. Dose escalation was possible in 15/20 cases, with a mean increase in dose by a factor of 1.19 (10.45 Gy) using 4DCT compared with 3DCT plans.

CONCLUSIONS:
4DCT can theoretically improve therapeutic ratio and dose escalation based on dosimetric parameters and mathematical modelling. However, when individual characteristics are incorporated, this gain may be less evident in terms of survival and dyspnoea rates. 4DCT allows potential for isotoxic dose escalation, which may lead to improved local control and better overall survival.

The mediastinal staging accuracy of 18F-Fluorodeoxyglycose Positron Emission Tomography/Computed Tomography in non-small cell lung cancer with variable time intervals to surgery.

BACKGROUND: PET/CT scanning can determine suitability for curative therapy and inform decision making when considering radical therapy in patients with non-small cell lung cancer (NSCLC). Metastases to central mediastinal lymph nodes (N2) may alter such management decisions. We report a 2 year retrospective series assessing N2 lymph node staging accuracy with PET/CT compared to pathological analysis at surgery.

METHODS: Patients with NSCLC attending our centre (excluding those who had induction chemotherapy) who had staging PET/CT scans and pathological nodal sampling between June 2006 and June 2008 were analysed. For each lymph node assessed pathologically, the corresponding PET/CT status was determined. 64 patients with 200 N2 lymph nodes were analysed.

RESULTS: Sensitivity of PET/CT scans for indentifying involved N2 lymph nodes was
39%, specificity 96% and overall accuracy 90%. For individual lymph node analysis, logistic regression demonstrated a significant linear association between PET/CT sensitivity and time from scanning to surgery (p=0.031) but not for specificity and accuracy. Those scanned <9 weeks before pathological sampling were significantly more sensitive (64% >9 weeks, 0% ≥ 9 weeks, p=0.013) and more accurate (94% <9 weeks, 81% ≥ 9 weeks, p=0.007). Differences in specificity were not seen (97% <9 weeks, 91% ≥ 9 weeks, p=0.228). No significant difference in specificity was found at any time point.

CONCLUSIONS: We recommend that if a PET/CT scan is older than 9 weeks, and management would be altered by the presence of N2 nodes, re-staging of the
mediastinum should be undertaken.

Depression and mortality: Artifact of measurement and analysis?

Background: Previous research demonstrates various associations between depression, cardiovascular disease (CVD) incidence and mortality, possibly as a result of the different methodologies used to measure depression and analyse relationships. This analysis investigated the association between depression, CVD incidence (CVDI) and mortality from CVD (MCVD), smoking related conditions (MSRC), and all causes (MALL), in a sample data set, where depression was measured using items from a validated questionnaire and using items derived from the factor analysis of a larger questionnaire, and analyses were conducted based on continuous data and grouped data.

Methods: Data from the PRIME Study (N=9798 men) on depression and 10-year CVD incidence and mortality were analysed using Cox proportional hazards models.

Results: Using continuous data, both measures of depression resulted in the emergence of positive associations between depression and mortality (MCVD, MSRC, MALL). Using grouped data, however, associations between a validated measure of depression and MCVD, and between a measure of depression derived from factor analysis and all measures of mortality were lost.

Limitations: Low levels of depression, low numbers of individuals with high depression and low numbers of outcome events may limit these analyses, but levels are usual for the population studied.

Conclusions: These data demonstrate a possible association between depression and mortality but detecting this association is dependent on the measurement used and method of analysis. Different findings based on methodology present clear problems for the elucidation and determination of relationships. The differences here argue for the use of validated scales where possible and suggest against over-reduction via factor analysis and grouping.