Integrity-Based Kernel Malware Detection

Kernel-level malware is one of the most dangerous threats to the security of users on the Internet, so there is an urgent need for its detection. The most popular detection approach is misuse-based detection. However, it cannot catch up with today's advanced malware that increasingly apply polymorphism and obfuscation. In this thesis, we present our integrity-based detection for kernel-level malware, which does not rely on the specific features of malware. We have developed an integrity analysis system that can derive and monitor integrity properties for commodity operating systems kernels. In our system, we focus on two classes of integrity properties: data invariants and integrity of Kernel Queue (KQ) requests. We adopt static analysis for data invariant detection and overcome several technical challenges: field-sensitivity, array-sensitivity, and pointer analysis. We identify data invariants that are critical to system runtime integrity from Linux kernel 2.4.32 and Windows Research Kernel (WRK) with very low false positive rate and very low false negative rate. We then develop an Invariant Monitor to guard these data invariants against real-world malware. In our experiment, we are able to use Invariant Monitor to detect ten real-world Linux rootkits and nine real-world Windows malware and one synthetic Windows malware. We leverage static and dynamic analysis of kernel and device drivers to learn the legitimate KQ requests. Based on the learned KQ requests, we build KQguard to protect KQs. At runtime, KQguard rejects all the unknown KQ requests that cannot be validated. We apply KQguard on WRK and Linux kernel, and extensive experimental evaluation shows that KQguard is efficient (up to 5.6% overhead) and effective (capable of achieving zero false positives against representative benign workloads after appropriate training and very low false negatives against 125 real-world malware and nine synthetic attacks). In our system, Invariant Monitor and KQguard cooperate together to protect data invariants and KQs in the target kernel. By monitoring these integrity properties, we can detect malware by its violation of these integrity properties during execution.

Seawater carbonate chemistry and structural integrity of the coralline algae Lithothamnion glaciale in a laboratory experiment

The uptake of anthropogenic emission of carbon dioxide is resulting in a lowering of the carbonate saturation state and a drop in ocean pH. Understanding how marine calcifying organisms such as coralline algae may acclimatize to ocean acidification is important to understand their survival over the coming century. We present the first long-term perturbation experiment on the cold-water coralline algae, which are important marine calcifiers in the benthic ecosystems particularly at the higher latitudes. Lithothamnion glaciale, after three months incubation, continued to calcify even in undersaturated conditions with a significant trend towards lower growth rates with increasing pCO2. However, the major changes in the ultra-structure occur by 589 µatm (i.e. in saturated waters). Finite element models of the algae grown at these heightened levels show an increase in the total strain energy of nearly an order of magnitude and an uneven distribution of the stress inside the skeleton when subjected to similar loads as algae grown at ambient levels. This weakening of the structure is likely to reduce the ability of the alga to resist boring by predators and wave energy with severe consequences to the benthic community structure in the immediate future (50 years).

Academic Integrity and Senior Nursing Undergraduate Clinical Practice

Background: Academic integrity (AI) has been defined as the commitment to the values of honesty, trust, fairness, respect, and responsibility with courage in all academic endeavours. The senior years of nursing studies provide an intersection for students to transition to professional roles through student clinical practice. It is essential to understand what predicts senior nursing students’ intention to behave with AI so that efforts can be directed to initiatives focused on strengthening their commitment to behaving with AI. Research Questions: To what extent do students differ on Theory of Planned Behaviour (TPB) variables? What predicts intention to behave with academic integrity among senior nursing students in clinical practice across three different Canadian Schools of Nursing? Method: The TPB framework, an elicitation (n=30) and two pilot studies (n=59, n=29) resulted in the development of a 38 question (41-item) self-report survey (Miron Academic Integrity Nursing Survey—MAINS: α>0.70) that was administered to Year 3 and 4 students (N=339). Three predictor variables (attitude, subjective norm, perceived behavioural control) were measured with students’ intention to behave with AI in clinical. Age, sex, year of study, program stream, students’ understanding of AI policies, and locations where students accessed AI information were also measured. Results: Hierarchical multiple regression analyses revealed that background, site, and TPB variables explained 32.6% of the variance in intention to behave with academic integrity. The TPB variables explained 26.8% of the variance in intention after controlling for background and site variables. In the final model, only the TPB predictor variables were statistically significant with Attitude having the highest beta value (beta=0.35, p<0.001), followed by Subjective Norm (beta=0.21, p<0.001) and Perceived Behavioural Control (beta=0.12, p<0.02). Conclusion: Student attitude is the strongest predictor to intention to behave with AI in clinical practice and efforts to positively influence students’ attitudes need to be a focus for schools, curricula, and clinical educators. Opportunities for future research should include replicating the current study with students enrolled in other professional programs and intervention studies that examine the effectiveness of specific endeavours to promote AI in practice.

Power relations and good governance: a social network analysis of the evolution of the integrity in public office act in the Commonwealth of Dominica

La Banque mondiale propose la bonne gouvernance comme la stratégie visant à corriger les maux de la mauvaise gouvernance et de faciliter le développement dans les pays en développement (Carayannis, Pirzadeh, Popescu & 2012; & Hilyard Wilks 1998; Leftwich 1993; Banque mondiale, 1989). Dans cette perspective, la réforme institutionnelle et une arène de la politique publique plus inclusive sont deux stratégies critiques qui visent à établir la bonne gouvernance, selon la Banque et d’autres institutions de Bretton Woods. Le problème, c’est que beaucoup de ces pays en voie de développement ne possèdent pas l’architecture institutionnelle préalable à ces nouvelles mesures. Cette thèse étudie et explique comment un état en voie de développement, le Commonwealth de la Dominique, s’est lancé dans un projet de loi visant l’intégrité dans la fonction publique. Cette loi, la Loi sur l’intégrité dans la fonction publique (IPO) a été adoptée en 2003 et mis en œuvre en 2008. Cette thèse analyse les relations de pouvoir entre les acteurs dominants autour de évolution de la loi et donc, elle emploie une combinaison de technique de l’analyse des réseaux sociaux et de la recherche qualitative pour répondre à la question principale: Pourquoi l’État a-t-il développé et mis en œuvre la conception actuelle de la IPO (2003)? Cette question est d’autant plus significative quand nous considérons que contrairement à la recherche existante sur le sujet, l’IPO dominiquaise diverge considérablement dans la structure du l’IPO type idéal. Nous affirmons que les acteurs "rationnels," conscients de leur position structurelle dans un réseau d’acteurs, ont utilisé leurs ressources de pouvoir pour façonner l’institution afin qu’elle serve leurs intérêts et ceux et leurs alliés. De plus, nous émettons l’hypothèse que: d’abord, le choix d’une agence spécialisée contre la corruption et la conception ultérieure de cette institution reflètent les préférences des acteurs dominants qui ont participé à la création de ladite institution et la seconde, notre hypothèse rivale, les caractéristiques des modèles alternatifs d’institutions de l’intégrité publique sont celles des acteurs non dominants. Nos résultats sont mitigés. Le jeu de pouvoir a été limité à un petit groupe d’acteurs dominants qui ont cherché à utiliser la création de la loi pour assurer leur légitimité et la survie politique. Sans surprise, aucun acteur n’a avancé un modèle alternatif. Nous avons conclu donc que la loi est la conséquence d’un jeu de pouvoir partisan. Cette recherche répond à la pénurie de recherche sur la conception des institutions de l’intégrité publique, qui semblent privilégier en grande partie un biais organisationnel et structurel. De plus, en étudiant le sujet du point de vue des relations de pouvoir (le pouvoir, lui-même, vu sous l’angle actanciel et structurel), la thèse apporte de la rigueur conceptuelle, méthodologique, et analytique au discours sur la création de ces institutions par l’étude de leur genèse des perspectives tant actancielles que structurelles. En outre, les résultats renforcent notre capacité de prédire quand et avec quelle intensité un acteur déploierait ses ressources de pouvoir.

Error Recovery Performance: The Impact of Leader Behavioral Integrity and Job Satisfaction

This article introduces the concept of error recovery performance, followed by the development and validation of an instrument to measure it. The first objective of this article is to broaden the current concept of service recovery to be relevant to the back-of-house operations. The second objective is to examine the influence of leader behavioral integrity (BI) on error recovery performance. Moreover, the study examines the mediating effect of job satisfaction between BI and error recovery performance. Finally, the study links error management performance with work-unit effectiveness. Data for Study 1 were collected from 369 hotel employees in Turkey. The same relationships were tested again in Study 2 to validate the findings of Study 1 with a different sample. Data for Study 2 were collected from 33 departmental managers from the same hotels. Linear regression analysis was used to test the direct effects. The mediating effects were tested using the mediation test suggested by Preacher and Hayes. In addition, in Study 2, general managers of the hotels were asked to rate the effectiveness of each manager and their respective department. Results from Study 1 indicate that BI drives error recovery performance, and this impact is mediated by employee job satisfaction. Results of Study 2 confirm this model and finds further that managers’ self-rated error recovery performance was associated with their general managers’ assessment of their deliverables and of their department’s overall performance.

Research on Behavioral Integrity: A Promising Construct for Positive Organizational Scholarship

Behavioral integrity (BI) is the perception that another person, group, or entity lives by his word—delivers on promises and enacts the same values he espouses. This construct is more basic than trust or justice, and is typically measured as the perceived pattern of alignment between words and deeds. Empirical studies have shown it to have powerful positive consequences for the attitudes and performance of followers, managers, and organizations, and also that BI moderates the impact of other leader behaviors on these outcomes. Only a few studies have examined antecedents, and fewer still have examined moderated antecedents. Although initial terrain has been sketched out by early studies, there is much yet to learn about the workings of this high-potential construct.

Influence of grinding operations on surface integrity and chloride induced stress corrosion cracking of stainless steels

Stainless steels were developed in the early 20th century and are used where both the mechanical properties of steels and corrosion resistance are required. There is continuous research to allow stainless steel components to be produced in a more economical way and be used in more harsh environments. A necessary component in this effort is to correlate the service performance with the production processes. The central theme of this thesis is the mechanical grinding process.  This is commonly used for producing stainless steel components, and results in varied surface properties that will strongly affect their service life. The influence of grinding parameters including abrasive grit size, machine power and grinding lubricant were studied for 304L austenitic stainless steel (Paper II) and 2304 duplex stainless steel (Paper I). Surface integrity was proved to vary significantly with different grinding parameters. Abrasive grit size was found to have the largest influence. Surface defects (deep grooves, smearing, adhesive/cold welding chips and indentations), a highly deformed surface layer up to a few microns in thickness and the generation of high level tensile residual stresses in the surface layer along the grinding direction were observed as the main types of damage when grinding stainless steels. A large degree of residual stress anisotropy is interpreted as being due to mechanical effects dominating over thermal effects. The effect of grinding on stress corrosion cracking behaviour of 304L austenitic stainless steel in a chloride environment was also investigated (Paper III). Depending on the surface conditions, the actual loading by four-point bend was found to deviate from the calculated value using the formula according to ASTM G39 by different amounts. Grinding-induced surface tensile residual stress was suggested as the main factor to cause micro-cracks initiation on the ground surfaces. Grinding along the loading direction was proved to increase the susceptibility to chloride-induced SCC, while grinding perpendicular to the loading direction improved SCC resistance. The knowledge obtained from this work can provide a reference for choosing appropriate grinding parameters when fabricating stainless steel components; and can also be used to help understanding the failure mechanism of ground stainless steel components during service.

Integrity and public sector governance : a democratic deficit?

Chase-Lloyd House at 250: significance of function and integrity of form

(M. Historic Preservation) -- University of Maryland-College Park, 2015 Faculty Advisor: Dr. Constance Werner Ramirez. Program Director: Dr. Donald W. Linebaugh

AN ENTROPIC THEORY OF DAMAGE WITH APPLICATIONS TO CORROSION-FATIGUE STRUCTURAL INTEGRITY ASSESSMENT

This dissertation demonstrates an explanation of damage and reliability of critical components and structures within the second law of thermodynamics. The approach relies on the fundamentals of irreversible thermodynamics, specifically the concept of entropy generation due to materials degradation as an index of damage. All failure mechanisms that cause degradation, damage accumulation and ultimate failure share a common feature, namely energy dissipation. Energy dissipation, as a fundamental measure for irreversibility in a thermodynamic treatment of non-equilibrium processes, leads to and can be expressed in terms of entropy generation. The dissertation proposes a theory of damage by relating entropy generation to energy dissipation via generalized thermodynamic forces and thermodynamic fluxes that formally describes the resulting damage. Following the proposed theory of entropic damage, an approach to reliability and integrity characterization based on thermodynamic entropy is discussed. It is shown that the variability in the amount of the thermodynamic-based damage and uncertainties about the parameters of a distribution model describing the variability, leads to a more consistent and broader definition of the well know time-to-failure distribution in reliability engineering. As such it has been shown that the reliability function can be derived from the thermodynamic laws rather than estimated from the observed failure histories. Furthermore, using the superior advantages of the use of entropy generation and accumulation as a damage index in comparison to common observable markers of damage such as crack size, a method is proposed to explain the prognostics and health management (PHM) in terms of the entropic damage. The proposed entropic-based damage theory to reliability and integrity is then demonstrated through experimental validation. Using this theorem, the corrosion-fatigue entropy generation function is derived, evaluated and employed for structural integrity, reliability assessment and remaining useful life (RUL) prediction of Aluminum 7075-T651 specimens tested.

Transcriptome, carbohydrate, and phytohormone analysis of Petunia hybrida reveals a complex disturbance of plant functional integrity under mild chilling stress

Cultivation of chilling-tolerant ornamental crops at lower temperature could reduce the energy demands of heated greenhouses. To provide a better understanding of how sub-optimal temperatures (12 degrees C vs. 16 degrees C) affect growth of the sensitive Petunia hybrida cultivar 'SweetSunshine Williams', the transcriptome, carbohydrate metabolism, and phytohormone homeostasis were monitored in aerial plant parts over 4 weeks by use of a microarray, enzymatic assays and GC-MS/MS. The data revealed three consecutive phases of chilling response. The first days were marked by a strong accumulation of sugars, particularly in source leaves, preferential up-regulation of genes in the same tissue and down-regulation of several genes in the shoot apex, especially those involved in the abiotic stress response. The midterm phase featured a partial normalization of carbohydrate levels and gene expression. After 3 weeks of chilling exposure, a new stabilized balance was established. Reduced hexose levels in the shoot apex, reduced ratios of sugar levels between the apex and source leaves and a higher apical sucrose/hexose ratio, associated with decreased activity and expression of cell wall invertase, indicate that prolonged chilling induced sugar accumulation in source leaves at the expense of reduced sugar transport to and reduced sucrose utilization in the shoot. This was associated with reduced levels of indole-3-acetic acid and abscisic acid in the apex and high numbers of differentially, particularly up-regulated genes, especially in the source leaves, including those regulating histones, ethylene action, transcription factors, and a jasmonate-ZIM-domain protein. Transcripts of one Jumonji C domain containing protein and one expansin accumulated in source leaves throughout the chilling period. The results reveal a dynamic and complex disturbance of plant function in response to mild chilling, opening new perspectives for the comparative analysis of differently tolerant cultivars.

The structural and mechanical integrity of historic wood

Little is known about historic wood as it ages naturally. Instead, most studies focus on biological decay, as it is often assumed that wood remains otherwise stable with age. This PhD project was organised by Historic Scotland and the University of Glasgow to investigate the natural chemical and physical aging of wood. The natural aging of wood was a concern for Historic Scotland as traditional timber replacement is the standard form of repair used in wooden cultural heritage; replacing rotten timber with new timber of the same species. The project was set up to look at what differences could exist both chemically and physically between old and new wood, which could put unforeseen stress on the joint between them. Through Historic Scotland it was possible to work with genuine historic wood from two species, Oak and Scots pine, both from the 1500’s, rather than relying on artificial aging. Artificial aging of wood is still a debated topic, with consideration given to whether it is truly mimicking the aging process or just damaging the wood cells. The chemical stability of wood was investigated using Fourier-transform infrared (FTIR) microscopy, as well as wet chemistry methods including a test for soluble sugars from the possible breakdown of the wood polymers. The physical properties assessed included using a tensile testing machine to uncover possible differences in mechanical properties. An environmental chamber was used to test the reaction to moisture of wood of different ages, as moisture is the most damaging aspect of the environment to wooden cultural objects. The project uncovered several differences, both physical and chemical, between the modern and historic wood which could affect the success of traditional ‘like for like’ repairs. Both oak and pine lost acetyl groups, over historic time, from their hemicellulose polymers. This chemical reaction releases acetic acid, which had no effect on the historic oak but was associated with reduced stiffness in historic pine, probably due to degradation of the hemicellulose polymers by acid hydrolysis. The stiffness of historic oak and pine was also reduced by decay. Visible pest decay led to loss of wood density but there was evidence that fungal decay, extending beyond what was visible, degraded the S2 layer of the pine cell walls, reducing the stiffness of the wood by depleting the cellulose microfibrils most aligned with the grain. Fungal decay of polysaccharides in pine wood left behind sugars that attracted increased levels of moisture. The degradation of essential polymers in the wood structure due to age had different impacts on the two species of wood, and raised questions concerning both the mechanism of aging of wood and the ways in which traditional repairs are implemented, especially in Scots pine. These repairs need to be done with more care and precision, especially in choosing new timber to match the old. Within this project a quantitative method of measuring the microfibril angle (MFA) of wood using polarised Fourier transform infrared (FTIR) microscopy has been developed, allowing the MFA of both new and historic pine to be measured. This provides some of the information needed for a more specific match when selecting replacement timbers for historic buildings.

Role of phospholipase A(2) and tyrosine kinase in Clostridium difficile toxin A-induced disruption of epithelial integrity, histologic inflammatory damage and intestinal secretion

Clostridium difficile-associated disease causes diarrhea to fulminant colitis and death. We investigated the role of phospholipase A(2) (PLA(2)) inhibitors, aristolochic acid (AA), bromophenacyl bromide BPB and quinacrine (QUIN) on the C. difficile toxin A-induced disruption of epithelial integrity, histologic inflammatory damage and intestinal secretion. Toxin A caused severe hemorrhagic and inflammatory fluid secretion at 6-8 h in rabbit ileal segments, an effect that was significantly inhibited by QUIN (71%, P < 0.01), AA (87%, P < 0.0001) or by BPB (51%, P < 0.01). The secretory effect of toxin A was also inhibited in segments adjacent to those with AA (89%, P < 0.01). Furthermore, QUIN or AA substantially reduced the histologic damage seen after 6-8 h in rabbit ileal segments. The cyclooxygenase inhibitor, indomethacin, also significantly inhibited (96%; n = 6) the secretory effects of toxin A in ligated rabbit intestinal segments. The destruction by toxin A of F-actin at the light junctions of T-84 cell monolayers was not inhibited by AA or BPB. AA or QUIN had no effect on the T-84 cell tissue resistance reduction over 8-24 h after toxin A exposure. All the inhibitors were shown to be effective in the doses administered direct in ileal loops to inhibit PLA(2) activity. The data suggest that PLA(2) is involved in the major pathway of toxin A-induced histologic inflammatory damage and hemorrhagic fluid secretion. Cop. right (C) 2008 John Wiley & Sons, Ltd.

Early and late effects of Ibuprofen on mouse sperm parameters, chromatin condensation, and DNA integrity in mice

Background: There are few studies indicating the detrimental effects of ibuprofen on sperm fertility potential and DNA integrity. Objective: To determine the effects of Ibuprofen on sperm parameters, chromatin condensation and DNA integrity of mice. Materials and Methods: In this experimental study, 36 adult male mice with average weight 37 gr were divided into three groups, including control (group I, n=12), normal dosage of ibuprofen (group II, n=12) and high dosage (group III, n=12). Ibuprofen with different doses was dissolved in daily water of animals. After 35, 70 and 105 days, the cauda epididymis of mice were cut and incubated in Ham’s F10 media. Sperm samples were analyzed for parameters (motility, morphology and count), DNA integrity (SCD test) and chromatin condensation (chromomycin A3 and Aniline blue staining). Results: After 35 days, in addition to above mentioned sperm parameters, all of the treated mice showed statistically significant increase in spermatozoa with immature chromatin (P<0.05). However, after 70 days, the rate of sperm DNA fragmentation assessed by SCD was increased in group II (66.5±0.7) and the percentage of immature spermatozoa (AB+ and CMA3+) was higher in group III (77.5±0.7 and 49.5±6.3 respectively) than other groups. After 105 days, the AB+ spermatozoa were increased in both normal dose and high dose groups. Conclusion: Ibuprofen may cause a significant reduction in sperm parameters and sperm chromatin/DNA integrity in mice. It should be noted that these deleterious effects are dose-dependent and can be seen in early and late stage of drug treatments.