570 resultados para Worms
Resumo:
Monitoring Internet traffic is critical in order to acquire a good understanding of threats to computer and network security and in designing efficient computer security systems. Researchers and network administrators have applied several approaches to monitoring traffic for malicious content. These techniques include monitoring network components, aggregating IDS alerts, and monitoring unused IP address spaces. Another method for monitoring and analyzing malicious traffic, which has been widely tried and accepted, is the use of honeypots. Honeypots are very valuable security resources for gathering artefacts associated with a variety of Internet attack activities. As honeypots run no production services, any contact with them is considered potentially malicious or suspicious by definition. This unique characteristic of the honeypot reduces the amount of collected traffic and makes it a more valuable source of information than other existing techniques. Currently, there is insufficient research in the honeypot data analysis field. To date, most of the work on honeypots has been devoted to the design of new honeypots or optimizing the current ones. Approaches for analyzing data collected from honeypots, especially low-interaction honeypots, are presently immature, while analysis techniques are manual and focus mainly on identifying existing attacks. This research addresses the need for developing more advanced techniques for analyzing Internet traffic data collected from low-interaction honeypots. We believe that characterizing honeypot traffic will improve the security of networks and, if the honeypot data is handled in time, give early signs of new vulnerabilities or breakouts of new automated malicious codes, such as worms. The outcomes of this research include: • Identification of repeated use of attack tools and attack processes through grouping activities that exhibit similar packet inter-arrival time distributions using the cliquing algorithm; • Application of principal component analysis to detect the structure of attackers’ activities present in low-interaction honeypots and to visualize attackers’ behaviors; • Detection of new attacks in low-interaction honeypot traffic through the use of the principal component’s residual space and the square prediction error statistic; • Real-time detection of new attacks using recursive principal component analysis; • A proof of concept implementation for honeypot traffic analysis and real time monitoring.
Resumo:
Today’s evolving networks are experiencing a large number of different attacks ranging from system break-ins, infection from automatic attack tools such as worms, viruses, trojan horses and denial of service (DoS). One important aspect of such attacks is that they are often indiscriminate and target Internet addresses without regard to whether they are bona fide allocated or not. Due to the absence of any advertised host services the traffic observed on unused IP addresses is by definition unsolicited and likely to be either opportunistic or malicious. The analysis of large repositories of such traffic can be used to extract useful information about both ongoing and new attack patterns and unearth unusual attack behaviors. However, such an analysis is difficult due to the size and nature of the collected traffic on unused address spaces. In this dissertation, we present a network traffic analysis technique which uses traffic collected from unused address spaces and relies on the statistical properties of the collected traffic, in order to accurately and quickly detect new and ongoing network anomalies. Detection of network anomalies is based on the concept that an anomalous activity usually transforms the network parameters in such a way that their statistical properties no longer remain constant, resulting in abrupt changes. In this dissertation, we use sequential analysis techniques to identify changes in the behavior of network traffic targeting unused address spaces to unveil both ongoing and new attack patterns. Specifically, we have developed a dynamic sliding window based non-parametric cumulative sum change detection techniques for identification of changes in network traffic. Furthermore we have introduced dynamic thresholds to detect changes in network traffic behavior and also detect when a particular change has ended. Experimental results are presented that demonstrate the operational effectiveness and efficiency of the proposed approach, using both synthetically generated datasets and real network traces collected from a dedicated block of unused IP addresses.
Resumo:
We present a novel approach for developing summary statistics for use in approximate Bayesian computation (ABC) algorithms by using indirect inference. ABC methods are useful for posterior inference in the presence of an intractable likelihood function. In the indirect inference approach to ABC the parameters of an auxiliary model fitted to the data become the summary statistics. Although applicable to any ABC technique, we embed this approach within a sequential Monte Carlo algorithm that is completely adaptive and requires very little tuning. This methodological development was motivated by an application involving data on macroparasite population evolution modelled by a trivariate stochastic process for which there is no tractable likelihood function. The auxiliary model here is based on a beta–binomial distribution. The main objective of the analysis is to determine which parameters of the stochastic model are estimable from the observed data on mature parasite worms.
Resumo:
The present study used ERPs to compare processing of fear-relevant (FR) animals (snakes and spiders) and non-fear-relevant (NFR) animals similar in appearance (worms and beetles). EEG was recorded from 18 undergraduate participants (10 females) as they completed two animal-viewing tasks that required simple categorization decisions. Participants were divided on a post hoc basis into low snake/spider fear and high snake/spider fear groups. Overall, FR animals were rated higher on fear and elicited a larger LPC. However, individual differences qualified these effects. Participants in the low fear group showed clear differentiation between FR and NFR animals on subjective ratings of fear and LPC modulation. In contrast, participants in the high fear group did not show such differentiation between FR and NFR animals. These findings suggest that the salience of feared-FR animals may generalize on both a behavioural and electro-cortical level to other animals of similar appearance but of a non-harmful nature.
Resumo:
Computer worms represent a serious threat for modern communication infrastructures. These epidemics can cause great damage such as financial losses or interruption of critical services which support lives of citizens. These worms can spread with a speed which prevents instant human intervention. Therefore automatic detection and mitigation techniques need to be developed. However, if these techniques are not designed and intensively tested in realistic environments, they may cause even more harm as they heavily interfere with high volume communication flows. We present a simulation model which allows studies of worm spread and counter measures in large scale multi-AS topologies with millions of IP addresses.
Resumo:
Schistosomes express a family of integral membrane proteins, called tetraspanins (TSPs), in the outer surface membranes of the tegument. Two of these tetraspanins, Sm-TSP-1 and Sm-TSP-2, confer protection as vaccines in mice, and individuals who are naturally resistant to S. mansoni infection mount a strong IgG response to Sm-TSP-2. To determine their functions in the tegument of S. mansoni we used RNA interference to silence expression of Sm-tsp-1 and Sm-tsp-2 mRNAs. Soaking of parasites in Sm-tsp dsRNAs resulted in 61% (p = 0.009) and 74% (p = 0.009) reductions in Sm-tsp-1 and Sm-tsp-2 transcription levels, respectively, in adult worms, and 67%–75% (p = 0.011) and 69%–89% (p = 0.004) reductions in Sm-tsp-1 and Sm-tsp-2 transcription levels, respectively, in schistosomula compared to worms treated with irrelevant control (luciferase) dsRNA. Ultrastructural morphology of adult worms treated in vitro with Sm-tsp-2 dsRNA displayed a distinctly vacuolated and thinner tegument compared with controls. Schistosomula exposed in vitro to Sm-tsp-2 dsRNA had a significantly thinner and more vacuolated tegument, and morphology consistent with a failure of tegumentary invaginations to close. Injection of mice with schistosomula that had been electroporated with Sm-tsp-1 and Sm-tsp-2 dsRNAs resulted in 61% (p = 0.005) and 83% (p = 0.002) reductions in the numbers of parasites recovered from the mesenteries four weeks later when compared to dsRNA-treated controls. These results imply that tetraspanins play important structural roles impacting tegument development, maturation or stability.
Resumo:
Objective: To identify nematodes seen in histological sections of brains of flying foxes (fruit bats) and describe the associated clinical disease and pathology. Proceedures: Gross and histological examination of brains from 86 free-living flying foxes with neurological disease was done as part of an ongoing surveillance program for Australian bat lyssavirus. Worms were recovered, or if seen in histological sections, extracted by maceration of half the brain and identified by microscopic examination. Histological archives were also reviewed. Results: There was histological evidence of angiostrongylosis in 16 of 86 recently submitted flying foxes with neurological disease and in one archival case from 1992. In 10 flying foxes, worms were definitively identified as Angiostrongylus cantonensis fifth-stage larvae. A worm fragment and third stage larvae were identified as Angiostrongylus sp, presumably A cantonensis, in a further three cases. The clinical picture was dominated by paresis, particularly of the hindlimbs, and depression, with flying foxes surviving up to 22 days in the care of wildlife volunteers. Brains containing fifthstage larvae showed a moderate to severe eosinophilic and granulomatous meningoencephalitis (n = 14), whereas there was virtually no inflammation of the brains of bats which died when infected with only smaller, third-stage larvae (n = 3). There was no histological evidence of pulmonary involvement. Conclusion: This is the first report of the recovery and identification of A cantonensis from free-living Australian wildlife. While angiostrongylosis is a common cause of paresis in flying foxes, the initial clinical course cannot be differentiated from Australian bat lyssavirus infection, and wildlife carers should be urged not to attempt to rehabilitate flying foxes with neurological disease.
Resumo:
Summary Prototype sand-worm filtration beds were constructed at two prawn farms and one fish farm to assess and demonstrate their polychaete (marine worm) production and wastewater remediation capacities at semi-commercial scale. Wastewater treatment properties were monitored and worms produced were assessed and either sold for bait or used by the farms’ hatcheries as broodstock (prawn or fish breeder) feed. More than 34 megalitres of prawn- and fish-pond water was beneficially treated in the 116-319-d trial. The design of the polychaete-assisted sand filters (PASFs) constructed at each farm affected their water handling rates, which on average ranged from 315 to 1000 L m-2 d-1 at the three farms. A low profile design incorporating shallow bunded ponds made from polyethylene liner and timber stakes provided the easiest method of construction. This simple design applied at broad scale facilitated the highest quantities of treated water and the greatest worm production. Designs with higher sides increased the head pressure above the sand bed surface, thus increasing the amount of water that could be treated each day. Most water qualities were affected in a similar way to that demonstrated in the previous tank trials: dissolved oxygen, pH, total suspended solids and chlorophyll a levels were all consistently significantly lowered as pond water percolated through the sand bed, and dissolved forms of nitrogen and phosphorus were marginally increased on several occasions. However, unlike the previous smaller-scale tank trials, total nitrogen (TN) and total phosphorus (TP) levels were both significantly lowered by these larger-scale PASFs. The reasons for this are still unclear and require further research. Maximum TN and TP removals detected in the trial were 48.8% and 67.5%, respectively, and average removals (in unfed beds) at the three farms ranged from 20.0 to 27.7% for TN and from 22.8 to 40.8% for TP. Collectively, these results demonstrate the best suspended solids, chlorophyll and macronutrient removal capacities so far reported for any mariculture wastewater treatment methodology to date. Supplemental feeding of PASFs with fish meal was also investigated at one farm as a potential means of increasing their polychaete biomass production. Whilst fed beds produced higher biomass (152 ± 35 g m-2) compared with unfed beds (89 ± 17 g m-2) after 3.7 months of operation, the low number of replicates (2) prevented statistically significant differences from being demonstrated for either growth or survival. At harvest several months later, worm biomass production was estimated to be similar to, or in slight excess of, previously reported production levels (300-400 g m-2). Several qualities of filtered water appear to have been affected by supplemental feeding: it appeared to marginally lower dissolved oxygen and pH levels, and increased the TN and TP levels though not so much to eliminate significant beneficial water treatment effects. Periodic sampling during an artificial-tide demonstrated the tendency for treated-water quality changes during the first hour of filtration. Total nitrogen and ammonia peaked early in the tidal flow and then fell to more stable levels for the remainder of the filtration period. Other dissolved nutrients also showed signs of this sand-bed-flushing pattern, and dissolved oxygen tended to climb during the first hour and become more stable thereafter. These patterns suggest that the routine sampling of treated water undertaken at mid-inflow during the majority of the wider study would likely have overestimated the levels of TN and dissolved nutrients discharged from the beds, and hence underestimated the PASFs treatment efficacies in this regard. Analyses of polychaete biomass collected from each bed in the study revealed that the worms were free from contamination with the main prawn viruses that would create concerns for their feeding to commercial prawn broodstock in Australia. Their documented proximal and nutritional contents also provide a guide for hatchery operators when using live or frozen stock. Their dry matter content ranged from 18.3 to 22.3%, ash ranged from 10.2 to 14.0%, gross energy from 20.2 to 21.5 MJ kg-1, and fat from 5.0 to 9.2%. Their cholesterol levels ranged from 0.86 to 1.03% of dry matter, whilst total phospholipids range from 0.41 to 0.72%. Thirty-one different fatty acids were present at detectable (≥0.005% of dry matter) levels in the sampled worm biomass. Palmitic acid was by far the most prevalent fatty acid detected (1.21 ± 0.18%), followed by eicosapentaenoic (EPA) (0.48 ± 0.03%), stearic (0.46 ± 0.04%), vaccenic (0.38 ± 0.05%), adrenic (0.35 ± 0.02%), docosadienoic (0.28 ± 0.02%), arachidonic (AA) (0.22 ± 0.01%), palmitoleic (0.20 ± 0.04%) and 23 other fatty acids with average contents of less than 0.2% of dry matter. Supplemental feeding with fish meal at one farm appeared to increase the docosahexaenoic acid (DHA) content of the worms considerably, and modify the average AA : EPA : DHA from 1.0 : 2.7 : 0.3 to 1.0 : 2.0 : 1.1. Consistent with previous results, the three most heavily represented amino acids in the dry matter of sampled worms were glutamic acid (8.5 ± 0.2%), aspartic acid (5.5 ± 0.1%) and glycine (4.9 ± 0.5%). These biomass content results suggest that worms produced in PASF systems are well suited to feeding to prawn and fish broodstock, and provide further strong evidence of the potential to modify their contents for specific nutritional uses. The falling wild-fishery production of marine bloodworms in Queensland is typical of diminishing polychaete resources world-wide and demonstrates the need to develop sustainable production methods here and overseas. PASF systems offer the dual benefits of wastewater treatment for environmental management and increased productivity through a valuable secondary crop grown exclusively on waste nutrients.