An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

A generic formula for the values at the boundary points of monic classical orthogonal polynomials

In a previous paper we have determined a generic formula for the polynomial solution families of the well-known differential equation of hypergeometric type σ(x)y"n(x)+τ(x)y'n(x)-λnyn(x)=0. In this paper, we give another such formula which enables us to present a generic formula for the values of monic classical orthogonal polynomials at their boundary points of definition.

Wavelets and the generalization of the variogram

The experimental variogram computed in the usual way by the method of moments and the Haar wavelet transform are similar in that they filter data and yield informative summaries that may be interpreted. The variogram filters out constant values; wavelets can filter variation at several spatial scales and thereby provide a richer repertoire for analysis and demand no assumptions other than that of finite variance. This paper compares the two functions, identifying that part of the Haar wavelet transform that gives it its advantages. It goes on to show that the generalized variogram of order k=1, 2, and 3 filters linear, quadratic, and cubic polynomials from the data, respectively, which correspond with more complex wavelets in Daubechies's family. The additional filter coefficients of the latter can reveal features of the data that are not evident in its usual form. Three examples in which data recorded at regular intervals on transects are analyzed illustrate the extended form of the variogram. The apparent periodicity of gilgais in Australia seems to be accentuated as filter coefficients are added, but otherwise the analysis provides no new insight. Analysis of hyerpsectral data with a strong linear trend showed that the wavelet-based variograms filtered it out. Adding filter coefficients in the analysis of the topsoil across the Jurassic scarplands of England changed the upper bound of the variogram; it then resembled the within-class variogram computed by the method of moments. To elucidate these results, we simulated several series of data to represent a random process with values fluctuating about a mean, data with long-range linear trend, data with local trend, and data with stepped transitions. The results suggest that the wavelet variogram can filter out the effects of long-range trend, but not local trend, and of transitions from one class to another, as across boundaries.

Free gravity waves and balanced dynamics

It is shown how a renormalization technique, which is a variant of classical Krylov–Bogolyubov–Mitropol’skii averaging, can be used to obtain slow evolution equations for the vortical and inertia–gravity wave components of the dynamics in a rotating flow. The evolution equations for each component are obtained to second order in the Rossby number, and the nature of the coupling between the two is analyzed carefully. It is also shown how classical balance models such as quasigeostrophic dynamics and its second-order extension appear naturally as a special case of this renormalized system, thereby providing a rigorous basis for the slaving approach where only the fast variables are expanded. It is well known that these balance models correspond to a hypothetical slow manifold of the parent system; the method herein allows the determination of the dynamics in the neighborhood of such solutions. As a concrete illustration, a simple weak-wave model is used, although the method readily applies to more complex rotating fluid models such as the shallow-water, Boussinesq, primitive, and 3D Euler equations.

Post-collisional lamprophyric event in Sierra Norte, Cordoba, Argentina: Mineralogical, geochemical and isotopic characteristics

Over 20 lamprophyre dykes, varying in width between a few centimeters and several meters, have been identified in central Sierra Norte - Eastern Pampean Ranges, Cordoba, Argentina. Their mineralogy and chemistry indicate that they are part of the calc-alkaline lamprophyres clan (CAL). They contain phenocrysts of magnesiohomblende +/- augite set in a groundmass of magnesiohornblende, calcic-plagioclase, alkali feldspar, and opaque minerals, which designate them as spessartite-type lamprophyres. Alteration products include chlorite, calcite and iron oxides after malfic phenocrysts, though some are partially replaced by actinolite. Feldspars are replaced by carbonate and clay minerals. The dykes are relatively primitive, and show restricted major element variation (SiO(2) 51.1-55.3 wt.%, Al(2)O(3) 12-16.6 wt.%, total alkalies 1.5-4.7 wt.%), high Mg# (55-77), high Cr contents (27-988 ppm) and moderate to high Ni contents (60-190 ppm). Lamprophyre LILE (e.g. Rb averages 110 ppm, Sr 211-387 ppm, Ba 203-452 ppm) are high relative to HFSE (e.g., Ta 0.2-1.6 ppm, Nb 4-11 ppm, Y 17-21 ppm), and are enriched in LREE (30-70 times chondrite). They are characterized by relatively high (208)Pb/(204)Pb (38.8-39.9), (207)Pb/(204)Pb(similar to 15.7), and (206)Pb/(204)Pb (18.7-20.1), combined with low (epsilon)epsilon(Nd) (-4.69 to -1.52) and a relative moderately high ((87)Sr/(86)Sr)(i) of 0.7055-0.7074. The Rb-Sr whole rock isochron indicates an Early Ordovician age of 485 +/- 25 Ma. The calculated T(DM) (1.7 Ga) suggests that these rocks appear to have originated from a reservoir that was created during a mantle metasomatism event related to the Pampean orogeny. The Sierra Norte lamprophyres show affinities with a subduction-related magma in an active continental margin. Their geochemical and isotopic features suggest a multicomponent source, composed of enriched mantle material variably contaminated by crustal components. The lamprophyric suite emplacement occurred at the dawning stage of the Pampean orogeny, in a regional post-collisional extensional setting developed in the Sierra Norte-Ambargasta batholith (SNAB) in Early Ordovician times. (C) 2008 Published by Elsevier Ltd.

INEQUALITIES FOR ZEROS of JACOBI POLYNOMIALS VIA OBRECHKOFF'S THEOREM

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Monotonicity of the zeros of orthogonal polynomials through related measures

Relation between two sequences of orthogonal polynomials, where the associated measures are related to each other by a first degree polynomial multiplication (or division), is well known. We use this relation to study the monotonicity properties of the zeros of generalized orthogonal polynomials. As examples, the Jacobi, Laguerre and Charlier polynomials are considered. (c) 2005 Elsevier B.V. All rights reserved.

Nonnegative trigonometric polynomials

An extremal problem for the coefficients of sine polynomials, which are nonnegative in [0,π] , posed and discussed by Rogosinski and Szego is under consideration. An analog of the Fejér-Riesz representation of nonnegative general trigonometric and cosine polynomials is proved for nonnegative sine polynomials. Various extremal sine polynomials for the problem of Rogosinski and Szego are obtained explicitly. Associated cosine polynomials k n (θ) are constructed in such a way that { k n (θ) } are summability kernels. Thus, the L p , pointwise and almost everywhere convergence of the corresponding convolutions, is established. © 2002 Springer-Verlag New York Inc.

Polinômios irredutíveis: critérios e aplicações

Pós-graduação em Matemática em Rede Nacional - IBILCE

Zeros of classical orthogonal polynomials of a discrete variable

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Future value based single assignment program representations and optimizations

An optimizing compiler internal representation fundamentally affects the clarity, efficiency and feasibility of optimization algorithms employed by the compiler. Static Single Assignment (SSA) as a state-of-the-art program representation has great advantages though still can be improved. This dissertation explores the domain of single assignment beyond SSA, and presents two novel program representations: Future Gated Single Assignment (FGSA) and Recursive Future Predicated Form (RFPF). Both FGSA and RFPF embed control flow and data flow information, enabling efficient traversal program information and thus leading to better and simpler optimizations. We introduce future value concept, the designing base of both FGSA and RFPF, which permits a consumer instruction to be encountered before the producer of its source operand(s) in a control flow setting. We show that FGSA is efficiently computable by using a series T1/T2/TR transformation, yielding an expected linear time algorithm for combining together the construction of the pruned single assignment form and live analysis for both reducible and irreducible graphs. As a result, the approach results in an average reduction of 7.7%, with a maximum of 67% in the number of gating functions compared to the pruned SSA form on the SPEC2000 benchmark suite. We present a solid and near optimal framework to perform inverse transformation from single assignment programs. We demonstrate the importance of unrestricted code motion and present RFPF. We develop algorithms which enable instruction movement in acyclic, as well as cyclic regions, and show the ease to perform optimizations such as Partial Redundancy Elimination on RFPF.

Integrated fossil and molecular data reconstruct bat echolocation

Molecular and morphological data have important roles in illuminating evolutionary history. DNA data often yield well resolved phylogenies for living taxa, but are generally unattainable for fossils. A distinct advantage of morphology is that some types of morphological data may be collected for extinct and extant taxa. Fossils provide a unique window on evolutionary history and may preserve combinations of primitive and derived characters that are not found in extant taxa. Given their unique character complexes, fossils are critical in documenting sequences of character transformation over geologic time and may elucidate otherwise ambiguous patterns of evolution that are not revealed by molecular data alone. Here, we employ a methodological approach that allows for the integration of molecular and paleontological data in deciphering one of the most innovative features in the evolutionary history of mammals—laryngeal echolocation in bats. Molecular data alone, including an expanded data set that includes new sequences for the A2AB gene, suggest that microbats are paraphyletic but do not resolve whether laryngeal echolocation evolved independently in different microbat lineages or evolved in the common ancestor of bats and was subsequently lost in megabats. When scaffolds from molecular phylogenies are incorporated into parsimony analyses of morphological characters, including morphological characters for the Eocene taxa Icaronycteris, Archaeonycteris, Hassianycteris, and Palaeochiropteryx, the resulting trees suggest that laryngeal echolocation evolved in the common ancestor of fossil and extant bats and was subsequently lost in megabats. Molecular dating suggests that crown-group bats last shared a common ancestor 52 to 54 million years ago.

Flightless brown kiwis of New Zealand possess extremely subdivided population structure and cryptic species like small mammals.

Using allozymes and mtDNA sequences from the cytochrome b gene, we report that the brown kiwi has the highest levels of genetic structuring observed in birds. Moreover, the mtDNA sequences are, with two minor exceptions, diagnostic genetic markers for each population investigated, even though they are among the more slowly evolving coding regions in this genome. A major unexpected finding was the concordant split in molecular phylogenies between brown kiwis in the southern South Island and elsewhere in New Zealand. This basic phylogeographic boundary halfway down the South Island coincides with a fixed allele difference in the Hb nuclear locus and strongly suggests that two morphologically cryptic species are currently merged under one polytypic species. This is another striking example of how molecular genetic assays can detect phylogenetic discontinuities that are not reflected in traditional morphologically based taxonomies. However, reanalysis of the morphological characters by using phylogenetic methods revealed that the reason for this discordance is that most are primitive and thus are phylogenetically uninformative. Shared-derived morphological characters support the same relationships evident in the molecular phylogenies and, in concert with the molecular data, suggest that as brown kiwis colonized northward from the southern South Island, they retained many primitive characters that confounded earlier systematists. Strong subdivided population structure and cryptic species in brown kiwis seem to have evolved relatively recently as a consequence of Pleistocene range disjunctions, low dispersal power, and genetic drift in small populations.

Formal group laws and hypergraph colorings

Thesis (Ph.D.)--University of Washington, 2016-06

An evolutionary framework for studies of hibernation and short-term torpor

Data from diverse studies endorse ideas that short term torpor and hibernation are expressions of ancient characters. In evolutionary terms, their basic mechanisms are probably plesiomorphic (= ancestral/primitive) and physiologically similar. This contrasts with the alternate view that they are apomorphic (= derived, specialized), arising independently in many taxa from homeothermic ancestry by numerous apparent convergences. This paper explores some of the implications of accepting the plesiomorphic interpretation. Hibernation is, of course, a complex phenomenon that has undergone variations and refinements in different mammalian lineages. The argument is not that hibernation in total is a plesiomorphic character, but that it is built upon fundamental processes that are. Taking this view provides a framework for research that emphasizes the value of comparative studies, particularly of reptiles and birds. Studies of reptiles, for example, might unravel the mystery about periodic arousals. A plesiomorphic framework also explains the most extreme examples of hibernation as derived specializations from ancestry in which heterothermy is more about energy management than escape from cold. It cautions against using low body temperature (Tb) alone to diagnose torpor, emphasizes the need to distinguish between constitutional eurythermy (plesiomorphic) and constitutional stenothermy (apomorphic), and leads to a parsimonious theory about the evolution of endothermy. The paper proposes that brown adipose tissue (BAT) is apomorphic within eutheria and highlights the conundrum posed by the occurrence of both nonshivering thermogenesis (NST) and rapid arousal from hibernation in noneutherian mammals that lack BAT and uncoupling protein 1 (UCP1). It endorses the likely existence of a different, ancient and widespread mechanism for regulatory NST in mammals.