Fool me if you can: mimicking attacks and anti-attacks in cyberspace

Botnets have become major engines for malicious activities in cyberspace nowadays. To sustain their botnets and disguise their malicious actions, botnet owners are mimicking legitimate cyber behavior to fly under the radar. This poses a critical challenge in anomaly detection. In this paper, we use web browsing on popular web sites as an example to tackle this problem. First of all, we establish a semi-Markov model for browsing behavior. Based on this model, we find that it is impossible to detect mimicking attacks based on statistics if the number of active bots of the attacking botnet is sufficiently large (no less than the number of active legitimate users). However, we also find it is hard for botnet owners to satisfy the condition to carry out a mimicking attack most of the time. With this new finding, we conclude that mimicking attacks can be discriminated from genuine flash crowds using second order statistical metrics. We define a new fine correntropy metrics and show its effectiveness compared to others. Our real world data set experiments and simulations confirm our theoretical claims. Furthermore, the findings can be widely applied to similar situations in other research fields.

Defence against code injection attacks

Code injection attacks are considered serious threats to the Internet users. In this type of attack the attacker injects malicious codes in the user programs to change or divert the execution flows. In this paper we explore the contemporary defence strategies against code injection attacks (CIAs) and underline their limitations. To overcome these limitations, we suggest a number of countermeasure mechanisms for protecting from CIAs. Our key idea relies on the multiplexing technique to preserve the exact return code to ensure the integrity of program execution trace of shell code. This technique also maintains a FIFO (first in first out) queue to defeat the conflict state when multiple caller method makes a call simultaneously. Finally, our technique can provide better performance, in terms of protection and speed, in some point compared to the CFI (control flow integrity) as well as CPM (code pointer masking) techniques.

Speculative attacks on debts and optimum currency area: a welfare analysis

Traditionally the issue of an optimum currency area is based on the theoretical underpinnings developed in the 1960s by McKinnon [13], Kenen [12] and mainly Mundell [14], who is concerned with the benefits of lowering transaction costs vis-à- vis adjustments to asymmetrical shocks. Recently, this theme has been reappraised with new aspects included in the analysis, such as: incomplete markets, credibility of monetary policy and seigniorage, among others. For instance, Neumeyer [15] develops a general equilibrium model with incomplete asset markets and shows that a monetary union is desirable when the welfare gains of eliminating the exchange rate volatility are greater than the cost of reducing the number of currencies to hedge against risks. In this paper, we also resort to a general equilibrium model to evaluate financial aspects of an optimum currency area. Our focus is to appraise the welfare of a country heavily dependent on foreign capital that may suffer a speculative attack on its public debt. The welfare analysis uses as reference the self-fulfilling debt crisis model of Cole and Kehoe ([6], [7] and [8]), which is employed here to represent dollarization. Under this regime, the national government has no control over its monetary policy, the total public debt is denominated in dollars and it is in the hands of international bankers. To describe a country that is a member of a currency union, we modify the original Cole-Kehoe model by including public debt denominated in common currency, only purchased by national consumers. According to this rule, the member countries regain some influence over the monetary policy decision, which is, however, dependent on majority voting. We show that for specific levels of dollar debt, to create inflation tax on common-currency debt in order to avoid an external default is more desirable than to suspend its payment, which is the only choice available for a dollarized economy when foreign creditors decide not to renew their loans.

Speculative attacks, openness and crises

In this paper we propose a dynamic stochastic general equilibrium model to evaluate financial adjustments that some emerging market economies went through to overcome external crises during the latest decades, such as default and local currency devaluation. We assume that real devaluation can be used to avoid external debt default, to improve trade balance and to reduce the real public debt level denominated in local currency. Such effects increase the government ability to deal with external crisis, but also have costs in terms of welfare, related to expected inflation, reductions in private investments and higher interest to be paid over the public debt. We conclude that openness improves expected welfare as it allows for a better devaluation-response technology against crises. We also present results for 32 middle-income countries, verifying that the proposed model can indicate, in a stylized way, the preferences for default-devaluation options and the magnitude of the currency depreciation required to overcome 48 external crises occurred as from 1971. Finally, as we construct our model based on the Cole-Kehoe self-fulfilling debt crisis model ([7]), adding local debt and trade, it is important to say that their policy alternatives to leave the crisis zone remains in our extended model, namely, to reduce the external debt level and to lengthen its maturity.

Speculative attacks on debts, dollarization and optimum currency areas

The purpose of this article is to contribute to the discussion of the financial aspects of dollarization and optimum currency areas. Based on the model of self-fulfilling debt crisis developed by Cole and Kehoe [4], it is possible to evaluate the comparative welfare of economies, which either keep their local currency and an independent monetary policy, join a monetary union or adopt dollarization. In the two former monetary regimes, governments can issue debt denominated, respectively, in local and common currencies, which is completely purchased by national consumers. Given this ability, governments may decide to impose an inflation tax on these assets and use the revenues so collected to avoid an external debt crises. While the country that issues its own currency takes this decision independently, a country belonging to a monetary union depends on the joint decision of all member countries about the common monetary policy. In this way, an external debt crises may be avoided under the local and common currency regimes, if, respectively, the national and the union central banks have the ability to do monetary policy, represented by the reduction in the real return on the bonds denominated in these currencies. This resource is not available under dollarization. In a dollarized economy, the loss of control over national monetary policy does not allow adjustments for exogenous shocks that asymmetrically affect the client and the anchor countries, but credibility is strengthened. On the other hand, given the ability to inflate the local currency, the central bank may be subject to the political influence of a government not so strongly concerned with fiscal discipline, which reduces the welfare of the economy. In a similar fashion, under a common currency regime, the union central bank may also be under the influence of a group of countries to inflate the common currency, even though they do not face external restrictions. Therefore, the local and common currencies could be viewed as a way to provide welfare enhancing bankruptcy, if it is not abused. With these peculiarities of monetary regimes in mind, we simulate the levels of economic welfare for each, employing recent data for the Brazilian economy.

Hypercapnic ventilatory response of anesthetized female rats subjected to neonatal maternal separation: Insight into the origins of panic attacks?

Neonatal maternal separation (NMS) is a form of stress that interferes with the regulation of the stress response, an effect that predisposes to the emergence of panic and anxiety related disorders. We previously showed that at adulthood, awake female (but not male) rats subjected to NMS show a hypercapnic ventilatory response (HCVR; 5% CO(2)) that is 63% greater than controls (Genest et al., 2007). To understand the mechanisms underlying the sex-specific effects of NMS on the ventilatory response to CO(2), we used two different anesthetized female rat preparations to assess central CO(2) chemosensitivity and contribution of sensory afferents (stretch receptors and peripheral chemoreceptors) that influence the HCVR. Data show that anesthesia eliminated the respiratory phenotype observed previously in awake females and CO(2) chemosensitivity did not differ between groups. Finally, the assessment of the ovarian hormone levels across the oestrus cycle failed to reveal significant differences between groups. Since anesthesia did not affect the manifestation of NMS-related respiratory dysfunction in males (including the hypercapnic ventilatory response) (Kinkead et al., 2005; Dumont and Kinkead, 2010), we propose that the panic or anxiety induced by CO(2) during wakefulness is responsible for enhancement of the HCVR in NMS females. (C) 2011 Elsevier B.V. All rights reserved.

Coati (Nasua nasua) Attacks on Humans: Case Report

Coatis [including Nasua nasua, the ring-tailed coati], are medium-sized mammals widely distributed in the Americas. They are social animals, whose normal diet includes insects, fruits, and small vertebrates, and rarely prey on larger sized animals. There are, to our knowledge, no reports in the medical literature of attacks on humans. This report describes a coati attack on 2 children in their home. The children sustained deep scratches and bites. The animal may have injured the humans in a defensive strike, but motivation for attack was uncertain. Coati attacks may occur in places where there is interaction between these mammals and humans.

Unsuccessful attacks dominate a drone-preying wasp's hunting performance near stingless bee nests

Bee males (drones) of stingless bees tend to congregate near entrances of conspecific nests, where they wait for virgin queens that initiate their nuptial flight. We observed that the Neotropical solitary wasp Trachypus boharti (Hymenoptera, Cabronidae) specifically preys on males of the stingless bee Scaptotrigona postica (Hymenoptera, Apidae); these wasps captured up to 50 males per day near the entrance of a single hive. Over 90% of the wasp attacks were unsuccessful; such erroneous attacks often involved conspecific wasps and worker bees. After the capture of non-male prey, wasps almost immediately released these individuals unharmed and continued hunting. A simple behavioral experiment showed that at short distances wasps were not specifically attracted to S. postica males nor were they repelled by workers of the same species. Likely, short-range prey detection near the bees' nest is achieved mainly by vision whereas close-range prey recognition is based principally on chemical and/or mechanical cues. We argue that the dependence on the wasp's visual perception during attack and the crowded and dynamic hunting conditions caused wasps to make many preying attempts that failed. Two wasp-density-related factors, wasp-prey distance and wasp-wasp encounters, may account for the fact that the highest male capture and unsuccessful wasp bee encounter rates occurred at intermediate wasp numbers.

Nest defense behavior against ant attacks in post-emergent colonies of wasp Mischocyttarus cerberus (Hymenoptera, Vespidae)

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Common vampire bat attacks on humans in a village of the Amazon region of Brazil

Agressões de morcegos a pessoas vêm sendo notificadas em várias comunidades amazônicas nesta última década. Isto constitui um risco potencial para a raiva humana transmitida por morcegos. O objetivo deste estudo foi de analisar fatores associados a estas agressões em uma destas comunidades. Foi realizado um estudo transversal em um povoado de garimpeiros na Região Amazônica brasileira (160 habitantes). Foi realizada a captura de morcegos junto às casas e foram enviadas amostras para o laboratório. Das 129 pessoas entrevistas, 41% foram agredidas por morcegos pelo menos uma vez, com 92% das mordidas localizadas nos dedos dos pés. Por meio de regressão logística, encontrou-se que adultos eram agredidos ao redor de quatro vezes mais do que crianças (OR = 3,75, IC: 1,46-9,62, p = 0,036). Homens foram agredidos com maior freqüência do que mulheres (OR = 2,08, IC: 0,90-4,76, p = 0,067). Nove Desmodus rotundus e três morcegos frugívoros foram capturados e resultaram negativos para a raiva. O estudo sugere que, em áreas de garimpo, adultos do sexo masculino têm maior probabilidade de serem agredidos por morcegos. As ações de controle para a raiva humana a serem desenvolvidas nestes lugares devem dar ênfase especial a adultos homens. Recomendam-se mais investigações sobre o modo como o garimpo na Região Amazônica está colocando em risco as pessoas e o ambiente.

SOLENOPSIS (HYMENOPTERA, FORMICIDAE) FIRE ANT REACTIONS TO ATTACKS OF PSEUDACTERON FLIES (DIPTERA, PHORIDAE) IN SOUTHEASTERN BRAZIL

We studied the responses of Solenopsis fire ants to Pseudacteon phorid fly attacks in southeastern Brazil. The presence of these phorid parasites triggered a suite of phorid-specific defense responses including reduced foraging, bait guarding, a curled defensive posture, and general colony immobility. The existence of these phorid-specific defenses indicates that Pseudacteon phorids exert substantial evolutionary pressure on South American fire ant populations.

The correlation between subordinate fish eye colour and received attacks: a negative social feedback mechanism for the reduction of aggression during the formation of dominance hierarchies

Conselho Nacional de Desenvolvimento Científico e Tecnológico (CNPq)

Male behavior of Mischocyttarus cerberus (Hymenoptera, Vespidae) during attacks on the nest by ants

The objectives of the present study were to verify if the males of the wasp Mischocyttarus cerberus participate in defense of the nest as they react to attack by ants, and to observe if they use chemical defense. First, wasps were stimulated with an empty pair of tweezers and a second stimulation was done with a pair of tweezers containing an ant, Camponotus crassus. The behaviors of the wasps were recorded and analyzed. The males can participate in defense of the nest, presenting some aggressive behaviors, even so, most of the time they ignore the stimulation, hide behind the nest and stay immobile.

Attacks by jaguars (Panthera onca) on humans in central Brazil: Report of three cases, with observation of a death

Conflicts between humans and big cats have been known for centuries throughout the world, but have intensified in recent decades. Recently, attacks by Panthera onca on humans in Brazil have been brought to the forefront through exposure in the press and because of the severity of the attacks. We report 3 cases of patients attacked by jaguars in provoked and predatory situations. Two patients survived the attacks and one died. Attack mechanisms and lesions in victims are discussed. The attacks demonstrate a real risk of accidents from jaguars in certain regions, such as the Pantanal and the Amazon. © 2011 Wilderness Medical Society.