Propuesta de Mecanismos de Verificación de Integridad de Plataformas Móviles de Computación basados en Entornos Seguros de Ejecución

Las prestaciones y características de los dispositivos móviles actuales los sitúa a un nivel similar a los ordenadores de escritorio tradicionales en cuanto a funcionalidad y posibilidades de uso, añadiendo además la movilidad y la sensación de pertenencia al usuario que se deriva de ésta. Estas cualidades convierten a las plataformas móviles de computación en verdaderos ordenadores personales, y cada día es más popular su utilización en ámbitos distintos del ocio y las comunicaciones propiamente dichas, pasando a convertirse en herramientas de apoyo a la productividad también en el entorno profesional y corporativo. La utilización del dispositivo móvil como parte de una infraestructura de telecomunicaciones da lugar a nuevas expresiones de problemas clásicos de gestión y seguridad. Para tratar de abordarlos con la flexibilidad y la escalabilidad necesarias se plantean alternativas novedosas que parten de enfoques originales a estos problemas, como las ideas y conceptos que se engloban en la filosofía del Control de Acceso a la Red (Network Access Control, o NAC). La mayoría de los planteamientos de NAC se basan, en el ámbito de la seguridad, en comprobar ciertas características del dispositivo móvil para tratar de determinar hasta qué punto puede éste suponer una amenaza para los recursos de la red u otros usuarios de la misma. Obtener esta información de forma fiable resulta extremadamente difícil si se caracteriza el dispositivo mediante un modelo de caja blanca, muy adecuado dada la apertura propia de los sistemas operativos móviles actuales, muy diferentes de los de antaño, y la ausencia de un marco de seguridad efectivo en ellos. Este trabajo explora el Estado de la Técnica en este ámbito de investigación y plantea diferentes propuestas orientadas a cubrir las deficiencias de las soluciones propuestas hasta el momento y a satisfacer los estrictos requisitos de seguridad que se derivan de la aplicación del modelo de caja blanca, materializándose en última instancia en la definición de un mecanismo de evaluación de características arbitrarias de un cierto dispositivo móvil basado en Entornos Seguros de Ejecución (Trusted Execution Environments, o TEEs) con elevadas garantías de seguridad compatible con los planteamientos actuales de NAC. ABSTRACT The performance and features of today’s mobile devices make them able to compete with traditional desktop computers in terms of functionality and possible usages. In addition to this, they sport mobility and the stronger sense of ownership that derives from it. These attributes change mobile computation platforms into truly personal computers, allowing them to be used not only for leisure or as mere communications devices, but also as supports of productivity in professional and corporative environments. The utilization of mobile devices as part of a telecommunications infrastructure brings new expressions of classic management and security problems with it. In order to tackle them with appropriate flexibility and scalability, new alternatives are proposed based on original approaches to these problems, such as the concepts and ideas behind the philosophy of Network Access Control (NAC). The vast majority of NAC proposals are based, security-wise, on checking certain mobile device’s properties in order to evaluate how probable it is for it to become a threat for network resources or even other users of the infrastructure. Obtaining this information in a reliable and trustworthy way is extremely difficult if the device is characterized using a white-box model, which is the most appropriate if the openness of today’s mobile operating systems, very different from former ones, and the absence of an effective security framework are taken into account. This work explores the State of the Art related with the aforementioned field of research and presents different proposals targeted to overcome the deficiencies of current solutions and satisfy the strict security requirements derived from the application of the white box model. These proposals are ultimately materialized in the definition of a high-security evaluation procedure of arbitrary properties of a given mobile device based on Trusted Execution Environments (TEEs) which is compatible with modern NAC approaches.

OSIRIS – The scientific camera system onboard Rosetta

The Optical, Spectroscopic, and Infrared Remote Imaging System OSIRIS is the scientific camera system onboard the Rosetta spacecraft (Figure 1). The advanced high performance imaging system will be pivotal for the success of the Rosetta mission. OSIRIS will detect 67P/Churyumov-Gerasimenko from a distance of more than 106 km, characterise the comet shape and volume, its rotational state and find a suitable landing spot for Philae, the Rosetta lander. OSIRIS will observe the nucleus, its activity and surroundings down to a scale of ~2 cm px−1. The observations will begin well before the onset of cometary activity and will extend over months until the comet reaches perihelion. During the rendezvous episode of the Rosetta mission, OSIRIS will provide key information about the nature of cometary nuclei and reveal the physics of cometary activity that leads to the gas and dust coma. OSIRIS comprises a high resolution Narrow Angle Camera (NAC) unit and a Wide Angle Camera (WAC) unit accompanied by three electronics boxes. The NAC is designed to obtain high resolution images of the surface of comet 7P/Churyumov-Gerasimenko through 12 discrete filters over the wavelength range 250–1000 nm at an angular resolution of 18.6 μrad px−1. The WAC is optimised to provide images of the near-nucleus environment in 14 discrete filters at an angular resolution of 101 μrad px−1. The two units use identical shutter, filter wheel, front door, and detector systems. They are operated by a common Data Processing Unit. The OSIRIS instrument has a total mass of 35 kg and is provided by institutes from six European countries

Observations of Comet 9P/Tempel 1 around the Deep Impact event by the OSIRIS cameras onboard Rosetta

The OSIRIS cameras on the Rosetta spacecraft observed Comet 9P/Tempel 1 from 5 days before to 10 days after it was hit by the Deep Impact projectile. The Narrow Angle Camera (NAC) monitored the cometary dust in 5 different filters. The Wide Angle Camera (WAC) observed through filters sensitive to emissions from OH, CN, Na, and OI together with the associated continuum. Before and after the impact the comet showed regular variations in intensity. The period of the brightness changes is consistent with the rotation period of Tempel 1. The overall brightness of Tempel 1 decreased by about 10% during the OSIRIS observations. The analysis of the impact ejecta shows that no new permanent coma structures were created by the impact. Most of the material moved with View the MathML source∼200ms−1. Much of it left the comet in the form of icy grains which sublimated and fragmented within the first hour after the impact. The light curve of the comet after the impact and the amount of material leaving the comet (View the MathML source4.5–9×106kg of water ice and a presumably larger amount of dust) suggest that the impact ejecta were quickly accelerated by collisions with gas molecules. Therefore, the motion of the bulk of the ejecta cannot be described by ballistic trajectories, and the validity of determinations of the density and tensile strength of the nucleus of Tempel 1 with models using ballistic ejection of particles is uncertain.

A general mechanism for regulation of access to the translocon: Competition for a membrane attachment site on ribosomes

For proteins to enter the secretory pathway, the membrane attachment site (M-site) on ribosomes must bind cotranslationally to the Sec61 complex present in the endoplasmic reticulum membrane. The signal recognition particle (SRP) and its receptor (SR) are required for targeting, and the nascent polypeptide associated complex (NAC) prevents inappropriate targeting of nonsecretory nascent chains. In the absence of NAC, any ribosome, regardless of the polypeptide being synthesized, binds to the endoplasmic reticulum membrane, and even nonsecretory proteins are translocated across the endoplasmic reticulum membrane. By occupying the M-site, NAC prevents all ribosome binding unless a signal peptide and SRP are present. The mechanism by which SRP overcomes the NAC block is unknown. We show that signal peptide-bound SRP occupies the M-site and therefore keeps it free of NAC. To expose the M-site and permit ribosome binding, SR can pull SRP away from the M-site without prior release of SRP from the signal peptide.

Signal Recognition Particle-dependent Targeting of Ribosomes to the Rough Endoplasmic Reticulum in the Absence and Presence of the Nascent Polypeptide-associated Complex

Proteins with RER-specific signal sequences are cotranslationally translocated across the rough endoplasmic reticulum through a proteinaceous channel composed of oligomers of the Sec61 complex. The Sec61 complex also binds ribosomes with high affinity. The dual function of the Sec61 complex necessitates a mechanism to prevent signal sequence-independent binding of ribosomes to the translocation channel. We have examined the hypothesis that the signal recognition particle (SRP) and the nascent polypeptide-associated complex (NAC), respectively, act as positive and negative regulatory factors to mediate the signal sequence-specific attachment of the ribosome-nascent chain complex (RNC) to the translocation channel. Here, SRP-independent translocation of a nascent secretory polypeptide was shown to occur in the presence of endogenous wheat germ or rabbit reticulocyte NAC. Furthermore, SRP markedly enhanced RNC binding to the translocation channel irrespective of the presence of NAC. Binding of RNCs, but not SRP-RNCs, to the Sec61 complex is competitively inhibited by 80S ribosomes. Thus, the SRP-dependent targeting pathway provides a mechanism for delivery of RNCs to the translocation channel that is not inhibited by the nonselective interaction between the ribosome and the Sec61 complex.

Nascent Polypeptide–associated Complex Stimulates Protein Import into Yeast Mitochondria

To identify yeast cytosolic proteins that mediate targeting of precursor proteins to mitochondria, we developed an in vitro import system consisting of purified yeast mitochondria and a radiolabeled mitochondrial precursor protein whose C terminus was still attached to the ribosome. In this system, the N terminus of the nascent chain was translocated across both mitochondrial membranes, generating a translocation intermediate spanning both membranes. The nascent chain could then be completely chased into the mitochondrial matrix after release from the ribosome. Generation of this import intermediate was dependent on a mitochondrial membrane potential, mitochondrial surface proteins, and was stimulated by proteins that could be released from the ribosomes by high salt. The major salt-released stimulatory factor was yeast nascent polypeptide–associated complex (NAC). Purified NAC fully restored import of salt-washed ribosome-bound nascent chains by enhancing productive binding of the chains to mitochondria. We propose that ribosome-associated NAC facilitates recognition of nascent precursor chains by the mitochondrial import machinery.

Essential role for complex N-glycans in forming an organized layer of bronchial epithelium.

Mice lacking the complex subset of N-glycans due to inactivation of the Mgat1 gene die at mid-gestation, making it difficult to identify specific biological functions for this class of cell surface carbohydrates. To circumvent this embryonic lethality and to uncover tissue-specific functions for complex N-glycans, WW6 embryonic stem cells with inactivated Mgat1 alleles were tracked in chimeric embryos. The Mgat1 gene encodes N-acetylglucosaminyltransferase I (Glc-NAc-TI; EC 2.4.1.101), the transferase that initiates the synthesis of complex N-glycans. WW6 cells carry an inert beta-globin transgene that allows their identification in chimeras by DNA-DNA in situ hybridization. Independent Mgat1-/- and Mgat1+/- mutant WW6 isolates contributed like parent WW6 cells to the tissues of embryonic day (E) 10.5 to E16.5 chimeras. However, a cell type-specific difference was observed in lung. Homozygous null Mgat1-/- WW6 cells did not contribute to the epithelial layer in more than 99% bronchi. This deficiency was corrected by transfection of a Mgat1 transgene. Interestingly, heterozygous Mgat1+/- WW6 cells were also deficient in populating the layer of bronchial epithelium. Furthermore, examination of lung bud in E9.5 Mgat1-/- mutant embryos showed complete absence of an organized epithelial cell layer in the bronchus. Thus, complex N-glycans are required to form a morphologically recognizable bronchial epithelium, revealing an in vivo, cell type-specific function for this class of N-glycans.

A rat genetic map constructed by representational difference analysis markers with suitability for large-scale typing.

Representational difference analysis (RDA) was applied to isolate chromosomal markers in the rat. Four series of RDA [restriction enzymes, BamHI and HindIII; subtraction of ACI/N (ACI) amplicon from BUF/Nac (BUF) amplicon and vice versa] yielded 131 polymorphic markers; 125 of these markers were mapped to all chromosomes except for chromosome X. This was done by using a mapping panel of 105 ACI x BUF F2 rats. To complement the relative paucity of chromosomal markers in the rat, genetically directed RDA, which allows isolation of polymorphic markers in the specific chromosomal region, was performed. By changing the F2 driver-DNA allele frequency around the region, four markers were isolated from the D1Ncc1 locus. Twenty-five of 27 RDA markers were informative regarding the dot blot analysis of amplicons, hybridizing only with tester amplicons. Dot blot analysis at a high density per unit of area made it possible to process a large number of samples. Quantitative trait loci can now be mapped in the rat genome by processing a large number of samples with RDA markers and then by isolating markers close to the loci of interest by genetically directed RDA.

The intrinsic ability of ribosomes to bind to endoplasmic reticulum membranes is regulated by signal recognition particle and nascent-polypeptide-associated complex.

Signal peptides direct the cotranslational targeting of nascent polypeptides to the endoplasmic reticulum (ER). It is currently believed that the signal recognition particle (SRP) mediates this targeting by first binding to signal peptides and then by directing the ribosome/nascent chain/SRP complex to the SRP receptor at the ER. We show that ribosomes can mediate targeting by directly binding to translocation sites. When purified away from cytosolic factors, including SRP and nascent-polypeptide-associated complex (NAC), in vitro assembled translation intermediates representing ribosome/nascent-chain complexes efficiently bound to microsomal membranes, and their nascent polypeptides could subsequently be efficiently translocated. Because removal of cytosolic factors from the ribosome/nascent-chain complexes also resulted in mistargeting of signalless nascent polypeptides, we previously investigated whether readdition of cytosolic factors, such as NAC and SRP, could restore fidelity to targeting. Without SRP, NAC prevented all nascent-chain-containing ribosomes from binding to the ER membrane. Furthermore, SRP prevented NAC from blocking ribosome-membrane association only when the nascent polypeptide contained a signal. Thus, NAC is a global ribosome-binding prevention factor regulated in activity by signal-peptide-directed SRP binding. A model presents ribosomes as the targeting vectors for delivering nascent polypeptides to translocation sites. In conjunction with signal peptides, SRP and NAC contribute to this specificity of ribosomal function by regulating exposure of a ribosomal membrane attachment site that binds to receptors in the ER membrane.

NACP, the precursor protein of the non-amyloid beta/A4 protein (A beta) component of Alzheimer disease amyloid, binds A beta and stimulates A beta aggregation.

NACP, a 140-amino acid presynaptic protein, is the precursor of NAC [the non-amyloid beta/A4 protein (A beta) component of Alzheimer disease (AD) amyloid], a peptide isolated from and immunologically localized to brain amyloid of patients afflicted with AD. NACP produced in Escherichia coli bound to A beta peptides, the major component of AD amyloid. NACP bound to A beta 1-38 and A beta 25-35 immobilized on nitrocellulose but did not bind to A beta 1-28 on the filter under the same conditions. NACP binding to A beta 1-38 was abolished by addition of A beta 25-35 but not by A beta 1-28, suggesting that the hydrophobic region of the A beta peptide is critical to this binding. NACP-112, a shorter splice variant of NACP containing the NAC sequence, bound to A beta, but NACP delta, a deletion mutant of NACP lacking the NAC domain, did not bind A beta 1-38. Furthermore, binding between NACP-112 and A beta 1-38 was decreased by addition of peptide Y, a peptide that covers the last 15 residues of NAC. In an aqueous solution, A beta 1-38 aggregation was observed when NACP was also present in an incubation mixture at a ratio of 1:125 (NACP/A beta), whereas A beta 1-38 alone or NACP alone did not aggregate under the same conditions, suggesting that the formation of a complex between A beta and NACP may promote aggregation of A beta. Thus, NACP can bind A beta peptides through the specific sequence and can promote A beta aggregation, raising the possibility that NACP may play a role in the development of AD amyloid.

Nascent polypeptide-associated complex protein prevents mistargeting of nascent chains to the endoplasmic reticulum.

We show that, after removal of the nascent polypeptide-associated complex (NAC) from ribosome-associated nascent chains, ribosomes synthesizing proteins lacking signal peptides are efficiently targeted to the endoplasmic reticulum (ER) membrane. After this mistargeting, translocation across the ER membrane occurs, albeit less efficiently than for a nascent secretory polypeptide, perhaps because the signal peptide is needed to catalyze the opening of the translocation pore. The mistargeting was prevented by the addition of purified NAC and was shown not to be mediated by the signal recognition particle and its receptor. Instead, it appears to be a consequence of the intrinsic affinity of ribosomes for membrane binding sites, since it can be blocked by competing ribosomes that lack associated nascent polypeptides. We propose that, when bound to a signalless ribosome-associated nascent polypeptide, NAC sterically blocks the site in the ribosome for membrane binding.

Endogenous intracellular glutathionyl radicals are generated in neuroblastoma cells under hydrogen peroxide oxidative stress.

We report the detection of endogenous intracellular glutathionyl (GS.) radicals in the intact neuroblastoma cell line NCB-20 under oxidative stress. Spin-trapping and electron paramagnetic resonance (EPR) spectroscopic methods were used for monitoring the radicals. The cells incubated with the spin trap 5,5-dimethyl-1-pyrroline 1-oxide (DMPO) were challenged with H2O2 generated by the enzymic reaction of glucose/glucose oxidase. These cells exhibit the EPR spectrum of the GS. radical adduct of DMPO (DMPO-.SG) without exogenous reduced glutathione (GSH). The identity of this radical adduct was confirmed by observing hyperfine coupling constants identical to previously reported values in in vitro studies, which utilized known enzymic reactions, such as horseradish peroxidase and Cu/Zn superoxide dismutase, with GSH and H2O2 as substrates. The formation of the GS. radicals required viable cells and continuous biosynthesis of GSH. No significant effect on the resonance amplitude by the addition of a membrane-impermeable paramagnetic broadening agent indicated that these radicals were located inside the intact cell. N-Acetyl-L-cysteine (NAC)-treated cells produced NAC-derived free radicals (NAC.) in place of GS. radicals. The time course studies showed that DMPO-.SG formation exhibited a large increase in its concentration after a lag period, whereas DMPO-NAC. formation from NAC-treated cells did not show this sudden increase. These results were discussed in terms of the limit of antioxidant enzyme defenses in cells and the potential role of the GS. radical burst in activation of the transcription nuclear factor NF-kappa B in response to oxidative stress.

Electrolito sólido polimérico: desde las pilas de combustible hasta la electrosíntesis orgánica

En este trabajo, en primer lugar, se presenta una nueva técnica desarrollada en nuestro laboratorio para el estudio electroquímico de las capas catalíticas de las pilas de combustible en células de tres electrodos, centrándonos en el proceso de electroxidación de ácido fórmico como reacción de test. Gracias a esta técnica se han estudiado parámetros de construcción como % en peso del metal, relación Nafion / sólidos totales y recubrimiento catalítico comprobando como la adsorción irreversible de adátomos de Bi sobre Pt soportado sobre Vulcan XC-72 favorece este proceso y como puede caracterizarse la capa catalítica de una pila de combustible de ácido fórmico (DFAFC) de forma integral utilizando estudios de sistemas nanoparticulados de Pt-Pd soportados sobre Vulcan XC-72 en el seno de ésta. En segundo lugar se ha introducido el concepto de PEMER (Polymer Electrolyte Membrane Electrochemical Reactor). De esta forma, una configuración electródica propia de las pilas de combustible se utiliza en electrosíntesis orgánica. Como reacciones test se han testeado la formación de 1-feniletanol como producto mayoritario por hidrogenación electrocatalítica de la acetofenona sobre nanopartículas de Pd soportadas sobre Vulcan XC-72 como electrocatalizador y, utilizando Pb (catalizador no noble) soportado sobre Vulcan XC-72, se ha estudiado la ruptura del puente disulfuro de L-cistina y N,N-diacetil-L-cistina (NNDAC) para obtener L-cisteína y N-acetil- L-cisteína (NAC). En ambas reacciones, hidrogenación y ruptura del puente disulfuro, se han analizado tanto parámetros constructivos de la capa catalítica como parámetros de proceso tanto a escala laboratorio con el uso de un reactor comercial de 25 cm² como a escala pre-piloto con la construcción de un reactor de 100 cm².

Mécanismes moléculaires de l’hypertrophie vasculaire dans le modèle animal d’hypertension essentielle (SHR)

La voie de signalisation des phosphoinositides joue un rôle clé dans la régulation du tonus vasculaire. Plusieurs études rapportent une production endogène de l’angiotensin II (Ang II) et de l’endothéline-1 (ET-1) par les cellules musculaires lisses vasculaires (CMLVs) de rats spontanément hypertendus (spontaneously hypertensive rats : SHR). De plus, l’Ang II exogène induit son effet prohypertrophique sur les CMLVs selon un mécanisme dépendant de la protéine Gqα et de la PKCẟ. Cependant, le rôle de l’axe Gqα/PLCβ/PKCẟ dans l’hypertrophie des CMLVs provenant d’un modèle animal de l’hypertension artérielle n’est pas encore étudié. L’objectif principal de cette thèse est d’examiner le rôle de l’axe Gqα/PLCβ1 dans les mécanismes moléculaires de l’hypertrophie des CMLVs provenant d’un modèle animal d’hypertension artérielle essentielle (spontaneously hypertensive rats : SHR). Nos premiers résultats indiquent que contrairement aux CMLVs de SHR âgés de 12 semaines (absence d’hypertrophie cardiaque), les CMLVs de SHR âgés de 16 semaines (présence d’hypertrophie cardiaque) présentent une surexpression protéique endogène de Gqα et de PLCβ1 par rapport aux CMLVs de rats WKY appariés pour l’âge. L’inhibition du taux d’expression protéique de Gqα et de PLCβ1 par des siRNAs spécifiques diminue significativement le taux de synthèse protéique élevé dans les CMLVs de SHR. De plus, la surexpression endogène des Gqα et PLCβ1, l’hyperphosphorylation de la molécule ERK1/2 et le taux de synthèse protéique élevé dans les CMLVs de SHR de 16 semaines ont été atténués significativement par des antagonistes des récepteurs AT1 (losartan) et ETA (BQ123), mais pas par l’antagoniste du récepteur ETB (BQ788). L’inhibition pharmacologique des MAPKs par PD98059 diminue significativement la surexpression endogène de Gqα/PLCβ1 et le taux de synthèse protéique élevé dans les CMLVs de SHR. D’un côté, l’inhibition du stress oxydatif (par DPI, inhibiteur de la NAD(P)H oxidase, et NAC , molécule anti-oxydante), de la molécule c-Src (PP2) et des récepteurs de facteurs de croissance (AG1024 (inhibiteur de l’IGF1-R), AG1478 (inhibiteur de l’EGFR) et AG1295 (inhibiteur du PDGFR)) a permis d’atténuer significativement la surexpression endogène élevée de Gqα/PLCβ1 et l’hypertrophie des CMLVs de SHR. D’un autre côté, DPI, NAC et PP2 atténuent significativement l’hyperphosphorylation de la molécule c-Src, des RTKs (récepteurs à activité tyrosine kinase) et de la molécule ERK1/2. Dans une autre étude, nous avons aussi démontré que la PKCẟ montre une hyperphosphorylation en Tyr311 dans les CMLVs de SHR comparées aux CMLVs de WKY. La rottlerin, utilisée comme inhibiteur spécifique de la PKCẟ, inhibe significativement cette hyperphosphorylation en Tyr311 dépendamment de la concentration. L’inhibition de l’activité de la PKCẟ par la rottlerin a été aussi associée à une atténuation significative de la surexpression protéique endogène de Gqα/PLCβ1 et l’hypertrophie des CMLVs de SHR. De plus, l’inhibition pharmacologique de l’activité de la PKCẟ, en amont du stress oxydatif, a permis d’inhiber significativement l’activité de la NADPH, le taux de production élevée de l’ion superoxyde ainsi que l’hyperphosphorylation de la molécule ERK1/2, de la molécule c-Src et des RTKs. À notre surprise, nous avons aussi remarqué une surexpression protéique de l’EGFR et de l’IGF-1R dans les CMLVs de SHR à l’âge de 16 semaines. L’inhibition pharmacologique de l’activité de la PKCẟ, de la molécule c-Src et du stress oxydatif a permis d’inhiber significativement la surexpression protéique endogène de ces RTKs. De plus, l’inhibition de l’expression protéique de l’EGFR et de la molécule c-Src par des siRNA spécifiques atténue significativement le taux d’expression protéique élevé de Gqα et de PLCβ1 ainsi que le taux de synthèse protéique élevé dans les CMLVs de SHR. Des siRNAs spécifiques à la PKCẟ ont permis d’atténuer significativement le taux de synthèse protéique élevé dans les CMLVs de SHR et confirment le rôle important de la PKCẟ dans les mécanismes moléculaires de l’hypertrophie des CMLVs selon une voie dépendante du stress oxydatif. En conclusion, ces résultats suggèrent un rôle important de l’activation endogène de l’axe Gqα-PLCβ-PKCẟ dans le processus d’hypertrophie vasculaire selon un mécanisme impliquant une activation endogène des récepteurs AT1/ETa, de la molécule c-Src, du stress oxidatif, des RTKs et des MAPKs.

Via-láctea : religião, artes, sciencias e lettras.

Mode of access: Internet.