Polymorphic malware detection using Hierarchical Hidden Markov Model

Binary signatures have been widely used to detect malicious software on the current Internet. However, this approach is unable to achieve the accurate identification of polymorphic malware variants, which can be easily generated by the malware authors using code generation engines. Code generation engines randomly produce varying code sequences but perform the same desired malicious functions. Previous research used flow graph and signature tree to identify polymorphic malware families. The key difficulty of previous research is the generation of precisely defined state machine models from polymorphic variants. This paper proposes a novel approach, using Hierarchical Hidden Markov Model (HHMM), to provide accurate inductive inference of the malware family. This model can capture the features of self-similar and hierarchical structure of polymorphic malware family signature sequences. To demonstrate the effectiveness and efficiency of this approach, we evaluate it with real malware samples. Using more than 15,000 real malware, we find our approach can achieve high true positives, low false positives, and low computational cost.

An assessment of riparian restoration outcomes in two rural catchments in south-western Victoria: Focusing on tree and shrub species richness, structure and recruitment characteristics

Riparian ecosystems are among the most degraded systems in the landscape,and there has been substantial investment in their restoration. Consequently, monitoring restoration interventions offers opportunities to further develop the science of riparian restoration, particularly how to move from small-scale implementation to a broader landscape scale. Here, we report on a broad range of riparian revegetation projects in two regions of south-western Victoria, the Corangamite and Glenelg-Hopkins Catchment Management Areas. The objectives of restoration interventions in these regions have been stated quite broadly, for example, to reinstate terrestrial habitat and biodiversity, control erosion and improve water quality. This study reports on tree and shrub composition, structure and recruitment after restoration works compared with remnant vegetation found regionally. Within each catchment, a total of 57 sites from six subcatchments were identified, representing three age-classes: <4, 4–8 and >8–12 years after treatment, as well as untreated (control) sites. Treatments comprised fencing to exclude stock, spraying or slashing to reduce weed cover, followed by planting with tube stock. Across the six subcatchments, 12 reference (remnant) sites were used to provide a benchmark for species richness, structural and recruitment characteristics and to aid interpretation of the effects of the restoration intervention. Vegetation structure was well developed in the treated sites by 4–8 years after treatment. However, structural complexity was higher at remnant sites than at treated or untreated sites due to a higher richness of small shrubs. Tree and shrub recruitment occurred in all remnant sites and at 64% of sites treated >4 years ago. Most seedling recruitment at treatment sites was by Acacia spp. This assessment provides data on species richness, structure and recruitment characteristics following restoration interventions. Data from this study will contribute to longitudinal studies of vegetation processes in riparian landscapes of south-western Victoria.

Hierarchical dirichlet process for tracking complex topical structure evolution and its application to autism research literature

In this paper we describe a novel framework for the discovery of the topical content of a data corpus, and the tracking of its complex structural changes across the temporal dimension. In contrast to previous work our model does not impose a prior on the rate at which documents are added to the corpus nor does it adopt the Markovian assumption which overly restricts the type of changes that the model can capture. Our key technical contribution is a framework based on (i) discretization of time into epochs, (ii) epoch-wise topic discovery using a hierarchical Dirichlet process-based model, and (iii) a temporal similarity graph which allows for the modelling of complex topic changes: emergence and disappearance, evolution, splitting and merging. The power of the proposed framework is demonstrated on the medical literature corpus concerned with the autism spectrum disorder (ASD) - an increasingly important research subject of significant social and healthcare importance. In addition to the collected ASD literature corpus which we made freely available, our contributions also include two free online tools we built as aids to ASD researchers. These can be used for semantically meaningful navigation and searching, as well as knowledge discovery from this large and rapidly growing corpus of literature.

Mating system parameters at hierarchical levels of fruits, individuals and populations in the Brazilian insect-pollinated tropical tree, Tabebuia roseo-alba (Bignoniaceae)

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Low levels of realized seed and pollen gene flow and strong spatial genetic structure in a small, isolated and fragmented population of the tropical tree Copaifera langsdorffii Desf

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Understanding the effects of isolation on seed and pollen flow, spatial genetic structure and effective population size of the dioecious tropical tree species Myracrodruon urundeuva

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Horizontal and vertical tree community structure in a lowland atlantic rain forest, southeastern Brazil

A estrutura horizontal e vertical do componente arbóreo foi investigada em um trecho de Floresta Atlântica baixo-montana através de um levantamento fitossociológico em dois blocos amostrais de 0,99 ha cada no Parque Estadual Intervales. Todos os indivíduos com DAP > 5 cm foram registrados. Foram amostrados 3.078 indivíduos distribuídos em 172 espécies. O índice de diversidade de Shannon foi de H' = 3,85 nat.ind.-1. A família Myrtaceae se destacou tanto em número de espécies (38) quanto em número de indivíduos (745) no levantamento. Euterpe edulis Mart. teve o maior valor de importância (33,98%), abrangendo 21,8% do total de indivíduos registrados. O índice de similaridade quantitativo foi maior do que o qualitativo, mostrando pouca variação estrutural entre os blocos amostrais, mas a grande quantidade de espécies pouco abundantes, resultou em pronunciadas diferenças florísticas entre eles. Uma análise de correspondência retificada (DCA) gerou três estratos verticais arbitrários. O estrato A (> 26 m) teve a menor densidade e foi bem representado pelas espécies Sloanea guianensis (Aubl.) Benth. e Virola bicuhyba (Schott. ex A.DC.) Warb. O estrato B (8 m < h < 26 m) mostrou a maior riqueza e diversidade florística, e o estrato C (< 8 m) a maior densidade. Euterpe edulis, Guapira opposita (Vell.) Reitz, Garcinia gardneriana (Planch. & Triana) Zappi e Eugenia mosenii (Kausel) Sobral foram bem representadas nos estratos B e C da floresta. A existência de estratos verticais em florestas tropicais é discutida, recomendando-se o uso da DCA para estudos da estratificação vertical em outras florestas tropicais.

Variations in tree community composition and structure in a fragment of tropical semideciduous forest in southeastern Brazil related to different human disturbance histories

In an area of tropical seasonal semideciduous forest, the soil characteristics, floristic composition, physiognomic structure, and the distribution of three regeneration and three dispersal guilds were studied for four stands within the forest that had documented histories of varying degrees of human disturbance. The aim was to study forest regeneration in areas of preserved forest and secondary forest, with parts of both types of forest experiencing either 'intensive' or 'occasional' cattle trampling. The study was carried out in the Sebastiao Aleixo da Silva Ecological Station, Bauru, São Paulo State, Brazil. Two stands were called 'secondary' because they corresponded to forest tracts that were felled and occupied by crops and pastures in the past and then abandoned to forest regeneration ca. 40 years before this study. The other two stands, called 'preserved', corresponded to areas of the fragment where the forest has been maintained with only minor human impacts. The arboreal component of the tree community (diameter at breast height or dbh greater than or equal to 5 cm) was sampled in 20 plots of 40 m x 40 m, and the subarboreal component (diameter at the base of the stem or dbs < 5 cm and height greater than or equal to 0.5 m) in subplots of 40 m x 2 m. Physiognomic features, such as canopy height and density of climbing plants, were registered all over a 5 m x 5 m gridline laid on the sample plots. Soil bulk samples were collected for chemical and textural analyses. Most detected differences contrasted the secondary to the preserved forest stands. The soils of the secondary stands showed higher proportions of sand and lower levels of mineral nutrients and organic matter than those of the preserved stands, probably due to higher losses by leaching and erosion. Compared to the secondary stands, the preserved ones had higher proportions of tall trees, higher mean canopy height, lower species diversity, higher abundance of autochorous and shade-tolerant climax species, and lower abundance of pioneer and light-demanding climax species. Despite the high proportion of species shared by the preserved and secondary stands (108 out of 139), they differed consistently in terms of density of the most abundant species. on the other hand, the secondary and preserved stands held similar values for tree density and basal area, suggesting that 40 years were enough to restore these features. Effects of cattle trampling on the vegetation were detected for the frequency of trees of anemochorous and zoochorous species, which were higher in the stands under occasional and intensive cattle trampling, respectively. The density of thin climbers was lower in the stands with intensive trampling. (C) 2004 Elsevier B.V. All rights reserved.

Foraging Behavior and Subtask Hierarchical Structure in Acromyrmex spp. (Hymenoptera: Formicidae)

This study considers the function and complexity of tasks during foraging of three Acromyrmex species. Foraging was classified as a team task composed of 2 or 3 processes: recruitment, selection, and collection. Each process was subdivided into different subtasks. Points were attributed to subtasks considering their hierarchical level to compare the complexity of foraging among species. Total scores obtained were 19 for A. balzani and 14 for A. crassispinus and A. rugosus, indicating different degrees of social complexity for grass-cutting and leaf-cutting ant species. Acromyrmex balzani, a grass-cutting ant species, shows a behavioral repertoire composed of more variable subtasks during foraging.

Community structure of mites (Arachnida: Acari) in six rubber tree clones

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Tree species community spatial structure in a terra firme Amazon forest, Brazil

All trees with diameter at breast height dbh >= 10.0 cm were stem-mapped in a "terra firme" tropical rainforest in the Brazilian Amazon, at the EMBRAPA Experimental Site, Manaus, Brazil. Specifically, the relationships of tree species with soil properties were determined by using canonical correspondence analyses based on nine soil variables and 68 tree species. From the canonical correspondence analyses, the species were grouped into two groups: one where species occur mainly in sandy sites, presenting low organic matter content; and another one where species occur mainly in dry and clayey sites. Hence, we used Ripley's K function to analyze the distribution of species in 32 plots ranging from 2,500 m(2) to 20,000 m(2) to determine whether each group presents some spatial aggregation as a soil variations result. Significant spatial aggregation for the two groups was found only at over 10,000 m(2) sampling units, particularly for those species found in clayey soils and drier environments, where the sampling units investigated seemed to meet the species requirements. Soil variables, mediated by topographic positions had influenced species spatial aggregation, mainly in an intermediate to large distances varied range (>= 20 m). Based on our findings, we conclude that environmental heterogeneity and 10,000 m(2) minimum sample unit sizes should be considered in forest dynamic studies in order to understand the spatial processes structuring the "terra firme" tropical rainforest in Brazilian Amazon.

A novel XML document structure comparison framework based-on sub-tree commonalities and label semantics

XML similarity evaluation has become a central issue in the database and information communities, its applications ranging over document clustering, version control, data integration and ranked retrieval. Various algorithms for comparing hierarchically structured data, XML documents in particular, have been proposed in the literature. Most of them make use of techniques for finding the edit distance between tree structures, XML documents being commonly modeled as Ordered Labeled Trees. Yet, a thorough investigation of current approaches led us to identify several similarity aspects, i.e., sub-tree related structural and semantic similarities, which are not sufficiently addressed while comparing XML documents. In this paper, we provide an integrated and fine-grained comparison framework to deal with both structural and semantic similarities in XML documents (detecting the occurrences and repetitions of structurally and semantically similar sub-trees), and to allow the end-user to adjust the comparison process according to her requirements. Our framework consists of four main modules for (i) discovering the structural commonalities between sub-trees, (ii) identifying sub-tree semantic resemblances, (iii) computing tree-based edit operations costs, and (iv) computing tree edit distance. Experimental results demonstrate higher comparison accuracy with respect to alternative methods, while timing experiments reflect the impact of semantic similarity on overall system performance.