An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

Analysis of System Signals Based on Cross Recurrence Method for System Dynamics Characterization

Natural systems are inherently non linear. Recurrent behaviours are typical of natural systems. Recurrence is a fundamental property of non linear dynamical systems which can be exploited to characterize the system behaviour effectively. Cross recurrence based analysis of sensor signals from non linear dynamical system is presented in this thesis. The mutual dependency among relatively independent components of a system is referred as coupling. The analysis is done for a mechanically coupled system specifically designed for conducting experiment. Further, cross recurrence method is extended to the actual machining process in a lathe to characterize the chatter during turning. The result is verified by permutation entropy method. Conventional linear methods or models are incapable of capturing the critical and strange behaviours associated with the dynamical process. Hence any effective feature extraction methodologies should invariably gather information thorough nonlinear time series analysis. The sensor signals from the dynamical system normally contain noise and non stationarity. In an effort to get over these two issues to the maximum possible extent, this work adopts the cross recurrence quantification analysis (CRQA) methodology since it is found to be robust against noise and stationarity in the signals. The study reveals that the CRQA is capable of characterizing even weak coupling among system signals. It also divulges the dependence of certain CRQA variables like percent determinism, percent recurrence and entropy to chatter unambiguously. The surrogate data test shows that the results obtained by CRQA are the true properties of the temporal evolution of the dynamics and contain a degree of deterministic structure. The results are verified using permutation entropy (PE) to detect the onset of chatter from the time series. The present study ascertains that this CRP based methodology is capable of recognizing the transition from regular cutting to the chatter cutting irrespective of the machining parameters or work piece material. The results establish this methodology to be feasible for detection of chatter in metal cutting operation in a lathe.

Analysis of the circadian system of the cockroach Rhyparobia (Leucophaea) maderae

Biologische Rhythmen bestimmen das gesamte Leben auf der Erde. Dabei scheint der circadiane Rhythmus der bekannteste zu sein, welcher durch eine Periodendauer von etwa (lat. circa) 24 Stunden gekennzeichnet ist. Dieser seit Jahrmillionen täglich stattfindende Wechsel von Hell- und Dunkelphasen führte zur Entwicklung von inneren Uhren in nahezu allen Organismen, welche die Physiologie und das Verhalten steuern. In der Schabe Rhyparobia (Leucophaea) maderae, einem etablierten Modellorganismus der circadianen Rhythmusforschung, konnte die innere Uhr auf die akzessorischen Medulla (AMe) eingegrenzt werden. Da neben klassischen Neurotransmittern auch Neuropeptide unablässig für die Aufrechterhaltung des endogenen Rhythmus oder aber für Synchronisationsprozesse sind, bestand der Hauptfokus der Arbeit in der Analyse einer möglichen Beteiligung des myoinhibitorischen Neuropeptids (MIP) am circadianen System von R. maderae. Mittels MALDI-TOF Massenspektrometrie konnten fünf Rhyparobia-MIPs in Präparationen der AMe identifiziert und zwei vollständig sequenziert werden. Immunzytochemische Analysen zeigten neben einer weiten MIP-Immunreaktivität im Gehirn eine dichte Innervierung der AMe und mit ihr assoziierten Neuronengruppen. Kolokalisation von MIP- und Pigment-dispersing Faktor-Immunreaktivitäten wurden in mindestens zwei circadianen Schrittmacherzellen beobachtet. Immunreaktivitäten in diversen Kommissuren lassen den Schluss zu, dass Rhyparobia-MIPs als Kopplungsfaktoren beider akzessorischen Medullae agieren. Immunzytochemische Kolokalisationsexperimente mit anderen neuroaktiven Kandidaten für den Lichteingangsweg zeigen, dass Rhyparobia-MIPs auch an der Übermittlung photischer Eingänge in die AMe vom ipsi- und kontralateralen Komplexauge beteiligt sein könnten. Darüber hinaus konnte durch Injektionsexperimente kombiniert mit Verhaltensassays gezeigt werden, dass mindestens Rhyparobia-MIP-1 und -2 Eingangssignale in die AMe sind. Des Weiteren konnte mittels enzyme-linked immunosorbent Assays gezeigt werden, dass MIP in der AMe und dem optischen Lobus mindestens über G-Protein gekoppelte Rezeptoren agiert. Diese Rezeptoren scheinen zudem tageszeitabhängig unterschiedlich exprimiert oder aber unterschiedlich sensitiv zu sein.

A molecular and cellular analysis of the circadian system of the cockroach Rhyparobia (Leucophaea) maderae

Circadiane Schrittmacher koordinieren die täglichen Rhythmen in Physiologie und Verhalten in lebenden Organismen. Die Madeira Schabe Rhyparobia maderae (Synonym: Leucophaea maderae) ist ein gut etabliertes Modell, um die neuronalen Mechanismen der circadianen Rhythmen bei Insekten zu studieren. Die akzessorische Medulla (AME) in den optischen Loben des Gehirns wurde als das circadiane Schrittmacherzentrum der Madeira Schabe identifiziert, das circadiane Rhythmen in der Laufaktivität steuert. Über die Neurotransmitter der Eingangswege in das circadiane System der Madeira Schabe ist noch nicht viel bekannt. Das Hauptziel dieser Arbeit war es, mögliche Eingangssignale in die innere Uhr der Madeira Schabe zu bestimmen. An primären Zellkulturen von AME-Neuronen wurden Calcium-Imaging Experimente durchgeführt, um die Neurotransmitter-abhängigen Veränderungen in der intrazellulären Calcium-Konzentration zu messen. Darüber hinaus wurde die Signalkaskade des Neuropeptids Pigment Dispersing Factor (PDF), dem wichtigsten Kopplungsfaktor in circadianen Schrittmachern von Insekten, in Calcium-Imaging und Förster-Resonanzenergietransfer (FRET) Experimenten untersucht. Acetylcholin (ACh) erhöht die intrazelluläre Calcium-Konzentration in der Mehrzahl der circadianen Schrittmacherneurone der Madeiraschabe. Applikation von GABA, Serotonin und Octopamin erhöhten oder reduzierten die intrazelluläre Calcium-Konzentration in den AME-Neuronen, während Histamin und Glutamat die intrazelluläre Calcium-Konzentration ausschließlich reduzierten. Pharmakologische Experimente zeigten, dass die AME-Neurone ACh über ionotrope nikotinische ACh-Rezeptoren detektierten, während GABA über ionotrope GABAA-Rezeptoren und metabotrope GABAB-Rezeptoren detektiert wurde. Diese Ergebnisse deuten darauf hin, dass die circadiane Aktivität der Schabe durch verschiedene Eingänge, einschließlich ACh, GABA, Glutamat, Histamin, Octopamin und Serotonin, moduliert wird. Bei den FRET Studien wurde ein Proteinkinase A (PKA)-basierter FRET Sensor zur Detektion von cyclischem AMP (cAMP) verwendet. Es wurde gezeigt, dass PDF über Adenylylcyclase-abhängige und -unabhängige Signalwege wirken kann. Zusätzlich wurden Laufrad-Assays durchgeführt, um Phasenverschiebungen im Rhythmus der circadianen Laufaktivität zu detektieren, nachdem der Neurotransmitter Histamin zu verschiedenen circadianen Zeiten injiziert wurde. Histamin-Injektionen durch die Komplexaugen der Schabe ergaben eine biphasische Phasenantwortkurve (phase response curve) mit Phasenverzögerungen in der Laufaktivität am späten subjektiven Tag und am Beginn der subjektiven Nacht und Phasenbeschleunigungen in der späten subjektiven Nacht. Schließlich wurde eine extrazelluläre Ableittechnik an lebenden Schaben etabliert, die gleichzeitige Langzeit-Ableitungen von der AME, des Komplexauges (Elektroretinogramm = ERG), und der Beinmuskulatur (Elektromyogramm = EMG) für mehrere Tage ermöglichte. Diese Methode bietet einen Ausgangspunkt für weitere elektrophysiologische Untersuchungen des circadianen Systems der Schabe, in denen Substanzen (z.B. Neurotransmitter und Neuropeptide) analysiert werden können, die einen Einfluss auf den circadianen Rhythmus in der Laufaktivität haben

SAGA: System for Automated Geographical Analysis [abstract]

SAGA (System for Automated Geographic Analysis) es un SIG libre con capacidades para el manejo y análisis de información tanto vectorial como ráster, con un especial enfoque en esta última. Asimismo, es su enfoque analítico el que constituye su característica más destacable, siendo una herramienta de primer orden para la extracción de información a partir de todo tipo de capas de datos georeferenciados. (...)

The Ergonomic Analysis and Back Injuries in Flexible Production System

Back injuries identification and diagnoses in the transition of the Taylor model to the flexiblemodel of production organization, demands a parallel intervention of prevention actors at work. This study uses simultaneously three intervention models (structured action analysis, muscle skeletal symptoms questionnaires and muscle skeletal assessment) for work activities in a packaging plant. In this study seventy and two (72) operative workers participated (28 workers with muscle skeletal evaluation). In an intervention period of 10 months, the physical, cognitive, organizational components and productive process dynamics were evaluated from the muscle skeletal demands issues. The differences established between objective exposure at risk, back injury risk perception, appreciation and a vertebral spine evaluation, in prior and post intervention, determines the structure for a muscle skeletal risk management system. This study explains that back injury symptoms can be more efficiently reduced among operative workers combining measures registered and the adjustment between dynamics, the changes at work and efficient gestures development. Relevance: the results of this study can be used to pre ent back injuries in workers of flexible production processes.

Overcoming Gender Disadvantages. Social Policy Analysis of urban middle-class women in Colombia

The World Bank Report 2012 starts with this statement: “Gender equality matters in itself andit matters for development because, in today’s globalized worlds, countries that use the skillsand talents of their women would have an advantage over those which do not use it.” With theframe that suggest that gender equality matters, this paper describes some policy alternativesoriented to overcome gender disadvantages in the formal labor market incorporation of theurban middle class women in Colombia. On balance, the final recommendation suggest that itis desirable to adopt policy alternatives as Community Centers, which are programs orientedto a social redistribution of the domestic work as a way to encourage women participationin the formal labor market with the social support of the members of their own community.The problem that the social policy needs to address is the segregation of women in the formallabor market in Colombia. Although the evidence shows that the women overcome theeducational gap by showing better performance in education that their male peers, womenare still segregated of the labor market. The persistence of high rates of unemployment on thefemale population, the prevalence of the informal labor market as a women labor market, andthe presence of the payment difference between men and women with similar professionaltrainings are circumstances that sustain the segregation statement. These circumstances areinefficient for the society because an economic analysis shows that the cost of maintain the statuquo is externalized in the social security system that includes health, pension and maternityleave regimens. Therefore, the women segregation involves a market failure.This paper evaluates five policy alternatives each directed to the progress of a different causaldimension of the problem: (i) Quotas in the private market, (ii) Flexible working hours,(iii) replace the maternity leave with a family leave, (iv) Increase the Community Centers forredistributing the care work, and (v) Equal payment enforcement. The first alternative looksto increase women’s participation in the formal labor market. The second, third, and fourthalternatives constitute a package addressed at redistributing care work by reducing women’sresponsibility for reproductive work in the household with the help of husbands and the localgovernment. The fifth alternative intervenes to resolve the equal payment problem.After a four criteria evaluation that measure effectiveness, robustness and improbability inimplementation, efficiency and political acceptability or social opposition, the strongest alternativeis the fostering of Community Centers that promote a redistribution of care work. Thispolicy performs well in the assessment process because it combines gender focus with importantindirect effects: child support and human capabilities. The policy also shows a bottomup implementation process that overcomes the main adoption difficulties in the gender focusprograms and is supported by strong evidence of success in the Colombian context; this evidenceis produced by both transnational actors as a World Bank and also in local accountabilityreporters executed by local institutions like Colombian Institute of Family Welfare (ICBF).

Configuración de la interfaz discurso-gramática en el lenguaje del profesor de preescolar en el aula ILE : presentación de una red sistémica como herramienta para un análisis sistemático de las funciones reguladoras. Modelling the discourse-grammar interface of ELF pre-school teacher talk (native and non-native) : proposal of a system network enabling the systematic analysis of regulatory functions.

Esta investigación pretende alcanzar dos objetivos. Cubrir el vacío existente en los estudios de las funciones comunicativas del habla de profesores, en este caso de inglés como Lengua Extranjera (ILE) destinado a nivel preescolar, y configurar una interfaz discurso-gramática de las funciones reguladoras del lenguaje.. En primer lugar, para lograr un análisis discursivo-semántico, en este trabajo se diseña la Red Sistémica de Funciones Reguladoras, RSFR, una herramienta que resume las diferentes opciones discursivo-semánticas de los contextos de las funciones reguladoras. A continuación, se analizan los datos en el estrato léxico-gramatical para facilitar conclusiones sobre la relación función-realización formal. Por último se exponen las similitudes y diferencias en la producción lingüística de las funciones reguladoras entre profesores nativos y no nativos.. Las aportaciones más destacadas de esta investigación son cuatro: hacer posible un estudio sistemático del significado mediante el diseño de una herramienta; la propuesta de una taxonomía de funciones reguladoras; el análisis de la dependencia entre las funciones reguladoras, y sus realizaciones lingüísticas; y las diferencias encontradas en la comparación del discurso del profesor nativo y no-nativo..

Phoneme analysis of cochlear implant recipients' responses to CNC words using the MPEAK and SPEAK speech coding strategies of the Nucleus cochlear implant system

This paper discusses a study done to determine how cochlear implant users perceive speech sounds using MPEAK or SPEAK speech coding strategy.

The 'direct costs' of livestock disease: The development of a system of models for the analysis of 30 endemic livestock diseases in Great Britain

The 'direct costs' attributable to 30 different endemic diseases of farm animals in Great Britain are estimated using a standardised method to construct a simple model for each disease that includes consideration of disease prevention and treatment costs. The models so far developed provide a basis for further analyses including cost-benefit analyses for the economic assessment of disease control options. The approach used reflects the inherent livestock disease information constraints, which limit the application of other economic analytical methods. It is a practical and transparent approach that is relatively easily communicated to veterinary scientists and policy makers. The next step is to develop the approach by incorporating wider economic considerations into the analyses in a way that will demonstrate to policy makers and others the importance of an economic perspective to livestock disease issues.