Malware variant detection using similarity search over sets of control flow graphs

Static detection of polymorphic malware variants plays an important role to improve system security. Control flow has shown to be an effective characteristic that represents polymorphic malware instances. In our research, we propose a similarity search of malware using novel distance metrics of malware signatures. We describe a malware signature by the set of control flow graphs the malware contains. We propose two approaches and use the first to perform pre-filtering. Firstly, we use a distance metric based on the distance between feature vectors. The feature vector is a decomposition of the set of graphs into either fixed size k-sub graphs, or q-gram strings of the high-level source after decompilation. We also propose a more effective but less computationally efficient distance metric based on the minimum matching distance. The minimum matching distance uses the string edit distances between programs' decompiled flow graphs, and the linear sum assignment problem to construct a minimum sum weight matching between two sets of graphs. We implement the distance metrics in a complete malware variant detection system. The evaluation shows that our approach is highly effective in terms of a limited false positive rate and our system detects more malware variants when compared to the detection rates of other algorithms.

Making visible the invisible act of doping

This paper describes the construction of the visual space of surveillance by the global anti-doping apparatus, it is a space inhabited daily by professional cyclists. Two principal mechanisms of this apparatus will be discussed—the Whereabouts System and the Biological Passport; in order to illustrate how this space is constructed and how it visualises the invisible act of doping. These mechanisms act to supervise and govern the professional cyclist and work to classify them as either clean or dirty in terms of the use of prohibited doping substances or methods. Contrary to the analysis of liberal anti-doping scholars such as Hanstad, Loland and Møller this paper argues that Foucault’s Panopticon paradigm is a useful tool for the analysis of this apparatus. The Whereabouts System and Biological Passport are the instruments by which the anti-doping apparatus intensifies the construction of the space of surveillance in professional sport. This space of surveillance not only locates and makes visible the physical location of each individual cyclist, but it also makes visible their internal bodily functions, in this case the composition and the fluctuations of the composition of their blood. In making the cyclist visible the instruments do not allow the cause of doping, or the event of doping to be known or observed. Rather what they do is cast the body in terms of abnormalities of time, place or blood. In the case of an abnormality of the cyclist’s blood, the cause itself cannot be identified with any certainty, all that is made visible is a suggestion, or a probability, that doping may have occurred. The ultimate effects are twofold—an internalisation and continual monitoring of one’s self as well as by the authorities, and a radical change in the nature and the definition of the offence of doping. No longer is it positive evidence of doping that is punishable, but what becomes punishable is an abnormality, in the cyclist’s location, or their body, which suggests a probability that the invisible act of doping may have occurred. In the course of this process accepted manners of proving an offence by the use of scientific evidence and expert commentary are transformed. The Whereabouts System and the Biological Passport open up a new manner in which the invisible can be visualised. Through the discourse and the attendant commentary of the expert a new alliance between doping and the law is constructed. The result is a redistribution of the way in which the law visualises and treats the symptoms (the signifier) and the signified act of doping. The Whereabouts System and Biological Passport are the instruments by which the anti-doping apparatus intensifies the construction of the space of surveillance in professional sport. This space of surveillance not only locates and makes visible the physical location of each individual cyclist, but it also makes visible their internal bodily functions, in this case the composition and the fluctuations of the composition of their blood. In making the cyclist visible the instruments do not allow the cause of doping, or the event of doping to be known or observed. Rather what they do is cast the body in terms of abnormalities of time, place or blood. In the case of an abnormality of the cyclists’s blood, the cause itself cannot be identified with any certainty, all that is made visible is a suggestion, or a probability, that doping may have occurred. The ultimate effects are twofold—an internalisation and continual monitoring of one’s self as well as by the authorities, and a radical change in the nature and the definition of the offence of doping. No longer is it positive evidence of doping that is punishable, but what becomes punishable is an abnormality, in the cyclist’s location, or their body, which suggests a probability that the invisible act of doping may have occurred. In the course of this process accepted manners of proving an offence by the use of scientific evidence and expert commentary are transformed. The Whereabouts System and the Biological Passport open up a new manner in which the invisible can be visualised. Through the discourse and the attendant commentary of the expert a new alliance between doping and the law is constructed. The result is a redistribution of the way in which the law visualises and treats the symptoms (the signifier) and the signified act of doping.

Desire for control, sense of control and obsessive-compulsive symptoms

While control-related cognitions have often been implicated in discussions of Obsessive Compulsive Disorder (OCD), empirical investigations of the relationship between control-constructs and OCD symptoms have been relatively limited. In this article it was hypothesized that OCD symptoms may be linked with a higher desire to control (DC), but a lower sense of control (SC) over the self and environment, leading to motivation for compulsive symptoms. This hypothesis was investigated in an analogue population, using regression analyses controlling for depression and anxiety. Consistent with predictions, it was found that higher levels of DC and lower levels of SC were associated with higher levels of OCD-related beliefs and symptoms. While control cognitions were linked with the OCD-related beliefs of perfectionism and the over-estimation of threat, they did not relate to cognitions concerning the importance of/need to control thoughts. With respect to specific OCD-symptoms, control cognitions were most strongly related to contamination obsessions/washing compulsions. Implications for theory and treatment are discussed.

Provision of control measures for exposure of the hands to wet-working conditions in Australian workplaces

Objective: To analyze the occupational and demographic characteristics for workers participating in the Australian National Hazard Exposure Worker Surveillance (NHEWS) Survey, who reported the provision of various types of workplace control measures for exposure of the hands to wet-working conditions, and to identify the barriers for the provision of controls. Methods: Computer-assisted telephone interviews were conducted with 4500 workers in 2008. Workers were asked about the types of control measures provided to them in the workplace for exposure of the hands to liquids. Results: Workplace size was the strongest predictor for the provision of control measures. Compared to workplaces with fewer than five employees, workers in workplaces with 200 or more employees were more likely to report provision of gloves, barrier creams and moisturizers, labeling and warning, and ongoing training and education about skin care. Conclusion: Smaller workplaces have poorer access to control measures to mitigate exposure to wet work.

Self-reported racism and experience of toothache among pregnant Aboriginal Australians: the role of perceived stress, sense of control, and social support

Objectives We hypothesized that the psychosocial factors perceived stress and sense of personal control mediated the relationship between self-reported racism and experience of toothache. We hypothesized that social support moderated this relationship. Methods Data from 365 pregnant Aboriginal Australian women were used to evaluate experience of toothache, socio-demographic factors, psychosocial factors, general health, risk behaviors, and self-reported racism exposure. Hierarchical logistic regression models estimated odds ratios (ORs) and 95 percent confidence intervals (CIs) for experience of toothache. Perceived stress and sense of personal control were examined as mediators of the association between self-reported racism and experience of toothache. Social support was examined as a moderator. Results Self-reported racism persisted as a risk indicator for experience of toothache (OR 1.99, 95 percent CI 1.07-3.72) after controlling for age, level of education, and difficulty paying a $100 dental bill. The relationship between self-reported racism and experience of toothache was mediated by sense of control. The direct effect of self-reported racism on experience of toothache became only marginally significant, and the indirect effect was significant (β coefficient-=-0.04, bias-corrected 95 percent CI 0.004-0.105, 21.2 percent of effect mediated). Stress was insignificant as a mediator. Social support was insignificant as a moderator. Conclusions The findings indicate that high levels of self-reported racism were associated with experience of toothache and that sense of control, but not perceived stress, mediated the association between self-reported racism and experience of toothache among this sample of pregnant Aboriginal Australian women. Social support did not moderate the association between self-reported racism and experience of toothache.

Influence of health locus of control on recovery of function in recently hospitalized frail older adults

To investigate the influence of health locus of control on physical function, quality of life, depression and satisfaction with care transition in a sample of older adults after a hospital admission.

Peer effects on locus of control

Eu analiso o papel que a interação entre pares tem na determinação do Locus de Controle, uma medida de quão pessoalmente responsável as pessoas se sentem com relação a diferentes aspectos de suas vidas. Eu estabeleço identificação através de variação no tamanho do grupo e de variáveis instrumentais baseadas na estrutura de painel dos dados. Eu estudo a questão no contexto escolar, utilizando os dados de alunos no Ensino Fundamental de um município brasileiro, que inclui o questionário de Tel Aviv de Locus de Controle. Minhas estimativas não apresentam sinais de peer effects endógenos ou contextuais.

Optimised placement of control and protective devices in electric distribution systems through reactive tabu search algorithm

Optimised placement of control and protective devices in distribution networks allows for a better operation and improvement of the reliability indices of the system. Control devices (used to reconfigure the feeders) are placed in distribution networks to obtain an optimal operation strategy to facilitate power supply restoration in the case of a contingency. Protective devices (used to isolate faults) are placed in distribution systems to improve the reliability and continuity of the power supply, significantly reducing the impacts that a fault can have in terms of customer outages, and the time needed for fault location and system restoration. This paper presents a novel technique to optimally place both control and protective devices in the same optimisation process on radial distribution feeders. The problem is modelled through mixed integer non-linear programming (MINLP) with real and binary variables. The reactive tabu search algorithm (RTS) is proposed to solve this problem. Results and optimised strategies for placing control and protective devices considering a practical feeder are presented. (c) 2007 Elsevier B.V. All rights reserved.