Practical Modbus flooding attack and detection

The Modicon Communication Bus (Modbus) protocol is one of the most commonly used protocols in industrial control systems. Modbus was not designed to provide security. This paper confirms that the Modbus protocol is vulnerable to flooding attacks. These attacks involve injection of commands that result in disrupting the normal operation of the control system. This paper describes a set of experiments that shows that an anomaly-based change detection algorithm and signature-based Snort threshold module are capable of detecting Modbus flooding attacks. In comparing these intrusion detection techniques, we find that the signature-based detection requires a carefully selected threshold value, and that the anomaly-based change detection algorithm may have a short delay before detecting the attacks depending on the parameters used. In addition, we also generate a network traffic dataset of flooding attacks on the Modbus control system protocol.

Keep ahead of the workforce development curve through the establishment of standardised training for rail incident investigators

The Australasian rail industry lacks a consistently accepted standard of minimal training necessary to perform rail incident investigations. Current Australasian courses do not offer the breadth of development required for a comprehensive career pathway in incident investigation (Biggs, Banks & Dovan, 2012; Short, Kains & Harris, 2010).

Hydraulic instability onset detection in Kaplan turbines by monitoring shaft vibrations

Design of hydraulic turbines has often to deal with hydraulic instability. It is well-known that Francis and Kaplan types present hydraulic instability in their design power range. Even if modern CFD tools may help to define these dangerous operating conditions and optimize runner design, hydraulic instabilities may fortuitously arise during the turbine life and should be timely detected in order to assure a long-lasting operating life. In a previous paper, the authors have considered the phenomenon of helical vortex rope, which happens at low flow rates when a swirling flow, in the draft tube conical inlet, occupies a large portion of the inlet. In this condition, a strong helical vortex rope appears. The vortex rope causes mechanical effects on the runner, on the whole turbine and on the draft tube, which may eventually produce severe damages on the turbine unit and whose most evident symptoms are vibrations. The authors have already shown that vibration analysis is suitable for detecting vortex rope onset, thanks to an experimental test campaign performed during the commissioning of a 23 MW Kaplan hydraulic turbine unit. In this paper, the authors propose a sophisticated data driven approach to detect vortex rope onset at different power load, based on the analysis of the vibration signals in the order domain and introducing the so-called "residual order spectrogram", i.e. an order-rotation representation of the vibration signal. Some experimental test runs are presented and the possibility to detect instability onset, especially in real-time, is discussed.

Brisbane Macroscopic Fundamental Diagram : empirical findings on network partitioning and incident detection

The Macroscopic Fundamental Diagram (MFD) relates space-mean density and flow, and the existence with dynamic features was confirmed in congested urban network in downtown Yokohama with real data set. Since the MFD represents the area-wide network traffic performances, studies on perimeter control strategies and an area traffic state estimation utilizing the MFD concept has been reported. However, limited works have been reported on real world example from signalised arterial network. This paper fuses data from multiple sources (Bluetooth, Loops and Signals) and develops a framework for the development of the MFD for Brisbane, Australia. Existence of the MFD in Brisbane arterial network is confirmed. Different MFDs (from whole network and several sub regions) are evaluated to discover the spatial partitioning in network performance representation. The findings confirmed the usefulness of appropriate network partitioning for traffic monitoring and incident detections. The discussion addressed future research directions

Modal flexibility method for structural damage detection in suspension bridges

Suspension bridges meet the steadily growing demand for lighter and longer bridges in today’s infrastructure systems. These bridges are designed to have long life spans, but with age, their main cables and hangers could suffer from corrosion and fatigue. There is a need for a simple and reliable procedure to detect and locate such damage, so that appropriate retrofitting can be carried out to prevent bridge failure. Damage in a structure causes changes in its properties (mass, damping and stiffness) which in turn will cause changes in its vibration characteristics (natural frequencies, modal damping and mode shapes). Methods based on modal flexibility, which depends on both the natural frequencies and mode shapes, have the potential for damage detection. They have been applied successfully to beam and plate elements, trusses and simple structures in reinforced concrete and steel. However very limited applications for damage detection in suspension bridges have been identified to date. This paper examines the potential of modal flexibility methods for damage detection and localization of a suspension bridge under different damage scenarios in the main cables and hangers using numerical simulation techniques. Validated finite element model (FEM) of a suspension bridge is used to acquire mass normalized mode shape vectors and natural frequencies at intact and damaged states. Damage scenarios will be simulated in the validated FE models by varying stiffness of the damaged structural members. The capability of damage index based on modal flexibility to detect and locate damage is evaluated. Results confirm that modal flexibility based methods have the ability to successfully identify damage in suspension bridge main cables and hangers.

Damage detection in cable structures using vibration characteristics

Cable structures find many applications such as in power transmission, in anchors and especially in bridges. They serve as major load bearing elements in suspension bridges, which are capable of spanning long distances. All bridges, including suspension bridges, are designed to have long service lives. However, during this long life, they become vulnerable to damage due to changes in loadings, deterioration with age and random action such as impacts. The main cables are more vulnerable to corrosion and fatigue, compared to the other bridge components, and consequently reduces the serviceability and ultimate capacity of the bridge. Detecting and locating such damage at the earliest stage is challenging in the current structural health monitoring (SHM) systems of long span suspension bridges. Damage or deterioration of a structure alters its stiffness, mass and damping properties which in turn modify its vibration characteristics. This phenomenon can therefore be used to detect damage in a structure. The modal flexibility, which depends on the vibration characteristics of a structure, has been identified as a successful damage indicator in beam and plate elements, trusses and simple structures in reinforced concrete and steel. Successful application of the modal flexibility phenomenon to detect and locate the damage in suspension bridge main cables has received limited attention in recent research work. This paper, therefore examines the potential of the modal flexibility based Damage Index (DI) for detecting and locating damage in the main cable of a suspension bridge under four different damage scenarios. Towards this end, a numerical model of a suspension bridge cable was developed to extract the modal parameters at both damaged and undamaged states. Damage scenarios considered in this study with varied location and severity were simulated by changing stiffness at particular locations of the cable model. Results confirm that the DI has the potential to successfully detect and locate damage in suspension bridge main cables. This simple method can therefore enable bridge engineers and managers to detect and locate damage in suspension bridges at an early stage, minimize expensive retrofitting and prevent bridge collapse.

Social event detection at MediaEval 2013 : challenges, datasets and evaluation

In this paper, we provide an overview of the Social Event Detection (SED) task that is part of the MediaEval Bench mark for Multimedia Evaluation 2013. This task requires participants to discover social events and organize the re- lated media items in event-specific clusters within a collection of Web multimedia. Social events are events that are planned by people, attended by people and for which the social multimedia are also captured by people. We describe the challenges, datasets, and the evaluation methodology.

Video analytics for the detection of near-miss incidents on approach to railway level crossings

Recent modelling of socio-economic costs by the Australian railway industry in 2010 has estimated the cost of level crossing accidents to exceed AU$116 million annually. To better understand causal factors that contribute to these accidents, the Cooperative Research Centre for Rail Innovation is running a project entitled Baseline Level Crossing Video. The project aims to improve the recording of level crossing safety data by developing an intelligent system capable of detecting near-miss incidents and capturing quantitative data around these incidents. To detect near-miss events at railway level crossings a video analytics module is being developed to analyse video footage obtained from forward-facing cameras installed on trains. This paper presents a vision base approach for the detection of these near-miss events. The video analytics module is comprised of object detectors and a rail detection algorithm, allowing the distance between a detected object and the rail to be determined. An existing publicly available Histograms of Oriented Gradients (HOG) based object detector algorithm is used to detect various types of vehicles in each video frame. As vehicles are usually seen from a sideway view from the cabin’s perspective, the results of the vehicle detector are verified using an algorithm that can detect the wheels of each detected vehicle. Rail detection is facilitated using a projective transformation of the video, such that the forward-facing view becomes a bird’s eye view. Line Segment Detector is employed as the feature extractor and a sliding window approach is developed to track a pair of rails. Localisation of the vehicles is done by projecting the results of the vehicle and rail detectors on the ground plane allowing the distance between the vehicle and rail to be calculated. The resultant vehicle positions and distance are logged to a database for further analysis. We present preliminary results regarding the performance of a prototype video analytics module on a data set of videos containing more than 30 different railway level crossings. The video data is captured from a journey of a train that has passed through these level crossings.

Second harmonic generation and multiphoton microscopic detection of collagen without the need for species specific antibodies

High-resolution, high-contrast, three-dimensional images of live cell and tissue architecture can be obtained using second harmonic generation (SHG), which comprises non-absorptive frequency changes in an excitation laser line. SHG does not require any exogenous antibody or fluorophore labeling, and can generate images from unstained sections of several key endogenous biomolecules, in a wide variety of species and from different types of processed tissue. Here, we examined normal control human skin sections and human burn scar tissues using SHG on a multi-photon microscope (MPM). Examination and comparison of normal human skin and burn scar tissue demonstrated a clear arrangement of fibers in the dermis, similar to dermal collagen fiber signals. Fluorescence-staining confirmed the MPM-SHG collagen colocalization with antibody staining for dermal collagen type-I but not fibronectin or elastin. Furthermore, we were able to detect collagen MPM-SHG signal in human frozen sections as well as in unstained paraffin embedded tissue sections that were then compared with hematoxylin and eosin staining in the identical sections. This same approach was also successful in localizing collagen in porcine and ovine skin samples, and may be particularly important when species-specific antibodies may not be available. Collectively, our results demonstrate that MPM SHG-detection is a useful tool for high resolution examination of collagen architecture in both normal and wounded human, porcine and ovine dermal tissue.

Collagen in the scarless fetal skin wound : detection with picrosirius-polarization

Our group has developed an ovine model of deep dermal, partial-thickness burn where the fetus heals scarlessly and the lamb heals with scar. The comparison of collagen structure between these two different mechanisms of healing may elucidate the process of scarless wound healing. Picrosirius staining followed by polarized light microscopy was used to visualize collagen fibers, with digital capture and analysis. Collagen deposition increased with fetal age and the fibers became thicker, changing from green (type III collagen) to yellow/red (type I collagen). The ratio of type III collagen to type I was high in the fetus (166), whereas the lamb had a much lower ratio (0.2). After burn, the ratios of type III to type I collagen did not differ from those in control skin for either fetus or lamb. The fetal tissue maintained normal tissue architecture after burn while the lamb tissue showed irregular collagen organization. In conclusion, the type or amount of collagen does not alter significantly after injury. Tissue architecture differed between fetal and lamb tissue, suggesting that scar development is related to collagen cross-linking or arrangement. This study indicates that healing in the scarless fetal wound is representative of the normal fetal growth pattern, rather than a "response" to burn injury.

Standardising corneal nerve fibre length for nerve tortuosity increases its association with measures of diabetic neuropathy

AIMS: Recent studies on corneal markers have advocated corneal nerve fibre length as the most important measure of diabetic peripheral neuropathy. The aim of this study was to determine if standardizing corneal nerve fibre length for tortuosity increases its association with other measures of diabetic peripheral neuropathy. METHODS: Two hundred and thirty-one individuals with diabetes with either predominantly mild or absent neuropathic changes and 61 control subjects underwent evaluation of diabetic neuropathy symptom score, neuropathy disability score, testing with 10-g monofilament, quantitative sensory testing (warm, cold, vibration detection) and nerve conduction studies. Corneal nerve fibre length and corneal nerve fibre tortuosity were measured using corneal confocal microscopy. A tortuosity-standardised corneal nerve fibre length variable was generated by dividing corneal nerve fibre length by corneal nerve fibre tortuosity. Differences in corneal nerve morphology between individuals with and without diabetic peripheral neuropathy and control subjects were determined and associations were estimated between corneal morphology and established tests of, and risk factors for, diabetic peripheral neuropathy. RESULTS: The tortuosity-standardised corneal nerve fibre length variable was better than corneal nerve fibre length in demonstrating differences between individuals with diabetes, with and without neuropathy (tortuosity-standardised corneal nerve fibre length variable: 70.5 ± 27.3 vs. 84.9 ± 28.7, P < 0.001, receiver operating characteristic area under the curve = 0.67; corneal nerve fibre length: 15.9 ± 6.9 vs. 18.4 ± 6.2 mm/mm(2) , P = 0.004, receiver operating characteristic area under the curve = 0.64). Furthermore, the tortuosity-standardised corneal nerve fibre length variable demonstrated a significant difference between the control subjects and individuals with diabetes, without neuropathy, while corneal nerve fibre length did not (tortuosity-standardised corneal nerve fibre length variable: 94.3 ± 27.1 vs. 84.9 ± 28.7, P = 0.028; corneal nerve fibre length: 20.1 ± 6.3 vs. 18.4 ± 6.2 mm/mm(2) , P = 0.084). Correlations between corneal nerve fibre length and established measures of neuropathy and risk factors for neuropathy were higher when a correction was made for the nerve tortuosity. CONCLUSIONS: Standardizing corneal nerve fibre length for tortuosity enhances the ability to differentiate individuals with diabetes, with and without neuropathy.

Augmenting traversability maps with ultra-wideband radar to enhance obstacle detection in vegetated environments

Operating in vegetated environments is a major challenge for autonomous robots. Obstacle detection based only on geometric features causes the robot to consider foliage, for example, small grass tussocks that could be easily driven through, as obstacles. Classifying vegetation does not solve this problem since there might be an obstacle hidden behind the vegetation. In addition, dense vegetation typically needs to be considered as an obstacle. This paper addresses this problem by augmenting probabilistic traversability map constructed from laser data with ultra-wideband radar measurements. An adaptive detection threshold and a probabilistic sensor model are developed to convert the radar data to occupancy probabilities. The resulting map captures the fine resolution of the laser map but clears areas from the traversability map that are induced by obstacle-free foliage. Experimental results validate that this method is able to improve the accuracy of traversability maps in vegetated environments.

Hot spot detection and spatio-temporal dispersion of dengue fever in Hanoi, Vietnam

INTRODUCTION Dengue fever (DF) in Vietnam remains a serious emerging arboviral disease, which generates significant concerns among international health authorities. Incidence rates of DF have increased significantly during the last few years in many provinces and cities, especially Hanoi. The purpose of this study was to detect DF hot spots and identify the disease dynamics dispersion of DF over the period between 2004 and 2009 in Hanoi, Vietnam. METHODS Daily data on DF cases and population data for each postcode area of Hanoi between January 1998 and December 2009 were obtained from the Hanoi Center for Preventive Health and the General Statistic Office of Vietnam. Moran's I statistic was used to assess the spatial autocorrelation of reported DF. Spatial scan statistics and logistic regression were used to identify space-time clusters and dispersion of DF. RESULTS The study revealed a clear trend of geographic expansion of DF transmission in Hanoi through the study periods (OR 1.17, 95% CI 1.02-1.34). The spatial scan statistics showed that 6/14 (42.9%) districts in Hanoi had significant cluster patterns, which lasted 29 days and were limited to a radius of 1,000 m. The study also demonstrated that most DF cases occurred between June and November, during which the rainfall and temperatures are highest. CONCLUSIONS There is evidence for the existence of statistically significant clusters of DF in Hanoi, and that the geographical distribution of DF has expanded over recent years. This finding provides a foundation for further investigation into the social and environmental factors responsible for changing disease patterns, and provides data to inform program planning for DF control.

A recurrent network in the lateral amygdala : a mechanism for coincidence detection

Synaptic changes at sensory inputs to the dorsal nucleus of the lateral amygdala (LAd) play a key role in the acquisition and storage of associative fear memory. However, neither the temporal nor spatial architecture of the LAd network response to sensory signals is understood. We developed a method for the elucidation of network behavior. Using this approach, temporally patterned polysynaptic recurrent network responses were found in LAd (intra-LA), both in vitro and in vivo, in response to activation of thalamic sensory afferents. Potentiation of thalamic afferents resulted in a depression of intra-LA synaptic activity, indicating a homeostatic response to changes in synaptic strength within the LAd network. Additionally, the latencies of thalamic afferent triggered recurrent network activity within the LAd overlap with known later occurring cortical afferent latencies. Thus, this recurrent network may facilitate temporal coincidence of sensory afferents within LAd during associative learning.

Web based surveillance systems could improve disease detection and the response to emerging disease events

The Chinese government should be commended for its open, concerted, and rapid response to the recent H7N9 influenza outbreak. However, the first known case was not reported until 48 days after disease onset.1 Although the difficulties in detecting the virus and the lack of suitable diagnostic methods have been the focus of discussion,2 systematic limitations that may have contributed to this delay have hardly been discussed. The detection speed of surveillance systems is limited by the highly structured nature of information flow and hierarchical organisation of these systems. Flu surveillance usually relies on notification to a central authority of laboratory confirmed cases or presentations to sentinel practices for flu-like illness. Each step in this pathway presents a bottleneck at which information and time can be lost; this limitation must be dealt with...