Timing attack di Paul C. Kocher: attacco al sistema di sicurezza RSA mediante strumenti di statistica

In questa tesi ho voluto descrivere il Timing Attack al sistema crittografico RSA, il suo funzionamento, la teoria su cui si basa, i suoi punti di forza e i punti deboli. Questo particolare tipo di attacco informatico fu presentato per la prima volta da Paul C. Kocher nel 1996 all’“RSA Data Security and CRYPTO conferences”. Nel suo articolo “Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems” l’autore svela una nuova possibile falla nel sistema RSA, che non dipende da debolezze del crittosistema puramente matematiche, ma da un aspetto su cui nessuno prima di allora si era mai soffermato: il tempo di esecuzione delle operazioni crittografiche. Il concetto è tanto semplice quanto geniale: ogni operazione in un computer ha una certa durata. Le variazioni dei tempi impiegati per svolgere le operazioni dal computer infatti, necessariamente dipendono dal tipo di algoritmo e quindi dalle chiavi private e dal particolare input che si è fornito. In questo modo, misurando le variazioni di tempo e usando solamente strumenti statistici, Kocher mostra che è possibile ottenere informazioni sull’implementazione del crittosistema e quindi forzare RSA e altri sistemi di sicurezza, senza neppure andare a toccare l’aspetto matematico dell’algoritmo. Di centrale importanza per questa teoria diventa quindi la statistica. Questo perché entrano in gioco molte variabili che possono influire sul tempo di calcolo nella fase di decifrazione: - La progettazione del sistema crittografico - Quanto impiega la CPU ad eseguire il processo - L’algoritmo utilizzato e il tipo di implementazione - La precisione delle misurazioni - Ecc. Per avere più possibilità di successo nell’attaccare il sistema occorre quindi fare prove ripetute utilizzando la stessa chiave e input differenti per effettuare analisi di correlazione statistica delle informazioni di temporizzazione, fino al punto di recuperare completamente la chiave privata. Ecco cosa asserisce Kocher: “Against a vulnerable system, the attack is computationally inexpensive and often requires only known ciphertext.”, cioè, contro sistemi vulnerabili, l’attacco è computazionalmente poco costoso e spesso richiede solo di conoscere testi cifrati e di ottenere i tempi necessari per la loro decifrazione.

Ict security: Testing methodology for targeted attack defence tools

La tesi di laurea presentata si inserisce nell’ampio contesto della Sicurezza Informatica, in particolare tratta il problema del testing dei sistemi di sicurezza concepiti per contrapporsi alle odierne minacce: gli attacchi mirati (Targeted Attacks) ed in generale le minacce avanzate persistenti (Advanced Persistent Threats). Il principale obiettivo del lavoro svolto è lo sviluppo e la discussione di una metodologia di test per sistemi di sicurezza focalizzati su questo genere di problemi. Le linee guida proposte hanno lo scopo di aiutare a colmare il divario tra quello che viene testato e quello che in realt`a deve essere affrontato realmente. Le attività svolte durante la preparazione della tesi sono state sia di tipo teorico, per quanto concerne lo sviluppo di una metodologia per affrontare al meglio il testing di sistemi di sicurezza a fronte di attacchi mirati, che ne di tipo sperimentale in quanto si sono utilizzati tali concetti per lo svolgimento di test su più strumenti di difesa in uno scenario d’interesse reale.

Sellar collision tumor involving pituitary gonadotroph adenoma and chondroma: a potential clinical diagnosis

We report on a 74-year-old male patient who presented with progressive neuroophthalmologic symptoms soon after the administration of a long-acting gonadotropin-releasing hormone agonist for treatment of a prostate cancer. Imaging revealed a destructively growing and extensively calcified sellar mass inconsistent with a pituitary adenoma. A transseptal transsphenoidal tumor mass reduction yielded a histological diagnosis of a collision tumor comprised of a gonadotroph adenoma intermingled with osteochondroma. We discuss a potential causal relationship between the administration of the long-acting gonadotropin-releasing hormone agonist and the sudden appearance of the previously unsuspected sellar lesion. Although the association of these two tumors is very likely coincidental, the possibility of causal relationship is addressed.

Miocene basin development and volcanism along a strike-slip to flat-slab subduction transition: Stratigraphy, geochemistry, and geochronology of the central Wrangell volcanic belt, Yakutat-North America collision zone

New geochronologic, geochemical, sedimentologic, and compositional data from the central Wrangell volcanic belt (WVB) document basin development and volcanism linked to subduction of overthickened oceanic crust to the northern Pacific plate margin. The Frederika Formation and overlying Wrangell Lavas comprise >3 km of sedimentary and volcanic strata exposed in the Wrangell Mountains of south-central Alaska (United States). Measured stratigraphic sections and lithofacies analyses document lithofacies associations that reflect deposition in alluvial-fluvial-lacustrine environments routinely influenced by volcanic eruptions. Expansion of intrabasinal volcanic centers prompted progradation of vent-proximal volcanic aprons across basinal environments. Coal deposits, lacustrine strata, and vertical juxtaposition of basinal to proximal lithofacies indicate active basin subsidence that is attributable to heat flow associated with intrabasinal volcanic centers and extension along intrabasinal normal faults. The orientation of intrabasinal normal faults is consistent with transtensional deformation along the Totschunda-Fairweather fault system. Paleocurrents, compositional provenance, and detrital geochronologic ages link sediment accumulation to erosion of active intrabasinal volcanoes and to a lesser extent Mesozoic igneous sources. Geochemical compositions of interbedded lavas are dominantly calc-alkaline, range from basaltic andesite to rhyolite in composition, and share geochemical characteristics with Pliocene-Quaternary phases of the western WVB linked to subduction-related magmatism. The U/Pb ages of tuffs and Ar-40/Ar-39 ages of lavas indicate that basin development and volcanism commenced by 12.5-11.0 Ma and persisted until at least ca. 5.3 Ma. Eastern sections yield older ages (12.5-9.3 Ma) than western sections (9.6-8.3 Ma). Samples from two western sections yield even younger ages of 5.3 Ma. Integration of new and published stratigraphic, geochronologic, and geochemical data from the entire WVB permits a comprehensive interpretation of basin development and volcanism within a regional tectonic context. We propose a model in which diachronous volcanism and transtensional basin development reflect progressive insertion of a thickened oceanic crustal slab of the Yakutat microplate into the arcuate continental margin of southern Alaska coeval with reported changes in plate motions. Oblique northwestward subduction of a thickened oceanic crustal slab during Oligocene to Middle Miocene time produced transtensional basins and volcanism along the eastern edge of the slab along the Duke River fault in Canada and subduction-related volcanism along the northern edge of the slab near the Yukon-Alaska border. Volcanism and basin development migrated progressively northwestward into eastern Alaska during Middle Miocene through Holocene time, concomitant with a northwestward shift in plate convergence direction and subduction collision of progressively thicker crust against the syntaxial plate margin.

Men's Modesty, Religion, and the State: Spaces of Collision

This article examines religious practices in the United States, which govern modesty and other dress norms for men. I focus both on the spaces within which they most collide with regulatory regimes of the state and the legal implications of these norms, particularly for observant Muslim men. Undergirding the research are those ‘‘gender equality’’ claims made by many religious adherents, that men are required to maintain proper modesty norms just as are women. Also undergirding the research is the extensive anti-Islam bias in American culture today. The spaces within which men’s religiously proscribed dress and grooming norms are most at issue—indicated by First Amendment legal challenges to rights of religious practice—are primarily those state-controlled, total institutions Goffman describes, such as in the military and prisons. The implications of gendered modesty norms are important, as state control over religious expression in prisons, for example, is much more difficult to contest than in other spaces, although this depends entirely on who is doing the contesting and within which religious context. In American society today—and particularly within the context of growing Islamaphobia following the 9/11 attacks—the implications are greatest for those men practicing ‘‘prison Islam.’’

Copeptin and risk stratification in patients with ischemic stroke and transient ischemic attack: The CoRisk Study

RATIONALE: Copeptin independently predicts functional outcome and mortality at 90 days and one-year after ischemic stroke. In patients with transient ischemic attack, elevated copeptin values indicate an increased risk of further cerebrovascular events. AIMS: The Copeptin Risk Stratification (CoRisk) study aims to validate the predictive value of copeptin in patients with ischemic stroke and transient ischemic attack. In patients with ischemic stroke, the CoRisk study aims to further explore the effect of treatment (i.e. thrombolysis) on the predictive value of copeptin. DESIGN: Prospective observational multicenter study analyzing three groups of patients, i.e. patients with ischemic stroke treated with and without thrombolysis and patients with transient ischemic attack. OUTCOMES: Primary end-point: In patients with ischemic stroke, the primary end-point includes disability (modified Rankin scale from 3 to 5) and mortality (modified Rankin scale 6) at three-months after stroke. In patients with transient ischemic attack, the primary end-point is a recurrent ischemic cerebrovascular event (i.e. ischemic stroke or recurrent transient ischemic attack). Secondary end-point: In patients with ischemic stroke, the secondary end-points include in-house complications (i.e. symptomatic intracerebral hemorrhage, malignant edema, aspiration pneumonia or seizures during hospitalization, and in-house mortality).

Sleep-disordered breathing in acute ischemic stroke and transient ischemic attack: effects on short- and long-term outcome and efficacy of treatment with continuous positive airways pressure - rationale and design of the SAS CARE study

Sleep-disordered breathing represents a risk factor for cardiovascular morbidity and mortality and negatively affects short-term and long-term outcome after an ischemic stroke or transient ischemic attack. The effect of continuous positive airways pressure in patients with sleep-disordered breathing and acute cerebrovascular event is poorly known. The SAS CARE 1 study assesses the effects of sleep-disordered breathing on clinical evolution, vascular functions, and markers within the first three-months after an acute cerebrovascular event. The SAS CARE 2 assesses the effect of continuous positive airways pressure on clinical evolution, cardiovascular events, and mortality as well as vascular functions and markers at 12 and 24 months after acute cerebrovascular event.

[Management of transient ischemic attack (TIA) and acute stroke]

Patients with a transient ischemic attack and an acute stroke need urgent investigations and therapy in a stroke unit. Immediate investigation of the etiology and early secondary prevention measures reduce the likelihood of recurrent and other vascular events. In selected stroke patients intravenous thrombolysis and/or endovascular therapies lead to a significant reduction of long term disabilities.

Collision-Induced Dissociation Of Dipeptides In Negative Ion Electrospray Ionization Tandem Mass Spectrometry

This purpose of this project was to investigate the collision-induced dissociation of dipeptides in negative ion electrospray ionization tandem mass spectrometry, with a focus on the mechanism of the production of imidazole-type fragments not previously reported from the fragmentation of the dipeptides being studied. The majority of the dipeptides studied were alanine N-terminal or serine C-terminal dipeptides. All dipeptides were dissolved in 50:50 methanol:water, 3 mM ammonium formate. Collision-induced dissociation in the collision cell of a triple quadrupole mass spectrometer was used to fragment [M-H]- precursor ions. Accurate mass measurements confirmed the molecular formula of the imidazole-type fragments. Further MS/MS studies were performed to provide information about the fragmentation mechanism for the formation of the imidazole-type fragments. The m/z values of intermediate ions in the formation of the imidazole-type fragments were confirmed through second-generation product ion scans and precursor ion scans. More sophisticated instrumentation will be required to further probe the structure of the intermediate ions.