Data Mining for Network Intrusion Detection : A comparison of data mining algorithms and an analysis of relevant features for detecting cyber-attacks

Data mining can be defined as the extraction of implicit, previously un-known, and potentially useful information from data. Numerous re-searchers have been developing security technology and exploring new methods to detect cyber-attacks with the DARPA 1998 dataset for Intrusion Detection and the modified versions of this dataset KDDCup99 and NSL-KDD, but until now no one have examined the performance of the Top 10 data mining algorithms selected by experts in data mining. The compared classification learning algorithms in this thesis are: C4.5, CART, k-NN and Naïve Bayes. The performance of these algorithms are compared with accuracy, error rate and average cost on modified versions of NSL-KDD train and test dataset where the instances are classified into normal and four cyber-attack categories: DoS, Probing, R2L and U2R. Additionally the most important features to detect cyber-attacks in all categories and in each category are evaluated with Weka’s Attribute Evaluator and ranked according to Information Gain. The results show that the classification algorithm with best performance on the dataset is the k-NN algorithm. The most important features to detect cyber-attacks are basic features such as the number of seconds of a network connection, the protocol used for the connection, the network service used, normal or error status of the connection and the number of data bytes sent. The most important features to detect DoS, Probing and R2L attacks are basic features and the least important features are content features. Unlike U2R attacks, where the content features are the most important features to detect attacks.

Pileated Woodpecker Occupancy and the Occurrence and Recruitment of Key Habitat Attributes in a Managed Forest

Thesis (Master's)--University of Washington, 2016-08

The role of context in image annotation and recommendation

With the rise of smart phones, lifelogging devices (e.g. Google Glass) and popularity of image sharing websites (e.g. Flickr), users are capturing and sharing every aspect of their life online producing a wealth of visual content. Of these uploaded images, the majority are poorly annotated or exist in complete semantic isolation making the process of building retrieval systems difficult as one must firstly understand the meaning of an image in order to retrieve it. To alleviate this problem, many image sharing websites offer manual annotation tools which allow the user to “tag” their photos, however, these techniques are laborious and as a result have been poorly adopted; Sigurbjörnsson and van Zwol (2008) showed that 64% of images uploaded to Flickr are annotated with < 4 tags. Due to this, an entire body of research has focused on the automatic annotation of images (Hanbury, 2008; Smeulders et al., 2000; Zhang et al., 2012a) where one attempts to bridge the semantic gap between an image’s appearance and meaning e.g. the objects present. Despite two decades of research the semantic gap still largely exists and as a result automatic annotation models often offer unsatisfactory performance for industrial implementation. Further, these techniques can only annotate what they see, thus ignoring the “bigger picture” surrounding an image (e.g. its location, the event, the people present etc). Much work has therefore focused on building photo tag recommendation (PTR) methods which aid the user in the annotation process by suggesting tags related to those already present. These works have mainly focused on computing relationships between tags based on historical images e.g. that NY and timessquare co-exist in many images and are therefore highly correlated. However, tags are inherently noisy, sparse and ill-defined often resulting in poor PTR accuracy e.g. does NY refer to New York or New Year? This thesis proposes the exploitation of an image’s context which, unlike textual evidences, is always present, in order to alleviate this ambiguity in the tag recommendation process. Specifically we exploit the “what, who, where, when and how” of the image capture process in order to complement textual evidences in various photo tag recommendation and retrieval scenarios. In part II, we combine text, content-based (e.g. # of faces present) and contextual (e.g. day-of-the-week taken) signals for tag recommendation purposes, achieving up to a 75% improvement to precision@5 in comparison to a text-only TF-IDF baseline. We then consider external knowledge sources (i.e. Wikipedia & Twitter) as an alternative to (slower moving) Flickr in order to build recommendation models on, showing that similar accuracy could be achieved on these faster moving, yet entirely textual, datasets. In part II, we also highlight the merits of diversifying tag recommendation lists before discussing at length various problems with existing automatic image annotation and photo tag recommendation evaluation collections. In part III, we propose three new image retrieval scenarios, namely “visual event summarisation”, “image popularity prediction” and “lifelog summarisation”. In the first scenario, we attempt to produce a rank of relevant and diverse images for various news events by (i) removing irrelevant images such memes and visual duplicates (ii) before semantically clustering images based on the tweets in which they were originally posted. Using this approach, we were able to achieve over 50% precision for images in the top 5 ranks. In the second retrieval scenario, we show that by combining contextual and content-based features from images, we are able to predict if it will become “popular” (or not) with 74% accuracy, using an SVM classifier. Finally, in chapter 9 we employ blur detection and perceptual-hash clustering in order to remove noisy images from lifelogs, before combining visual and geo-temporal signals in order to capture a user’s “key moments” within their day. We believe that the results of this thesis show an important step towards building effective image retrieval models when there lacks sufficient textual content (i.e. a cold start).

Quantum Gate and Quantum State Preparation through Neighboring Optimal Control

Successful implementation of fault-tolerant quantum computation on a system of qubits places severe demands on the hardware used to control the many-qubit state. It is known that an accuracy threshold Pa exists for any quantum gate that is to be used for such a computation to be able to continue for an unlimited number of steps. Specifically, the error probability Pe for such a gate must fall below the accuracy threshold: Pe < Pa. Estimates of Pa vary widely, though Pa ∼ 10−4 has emerged as a challenging target for hardware designers. I present a theoretical framework based on neighboring optimal control that takes as input a good quantum gate and returns a new gate with better performance. I illustrate this approach by applying it to a universal set of quantum gates produced using non-adiabatic rapid passage. Performance improvements are substantial comparing to the original (unimproved) gates, both for ideal and non-ideal controls. Under suitable conditions detailed below, all gate error probabilities fall by 1 to 4 orders of magnitude below the target threshold of 10−4. After applying the neighboring optimal control theory to improve the performance of quantum gates in a universal set, I further apply the general control theory in a two-step procedure for fault-tolerant logical state preparation, and I illustrate this procedure by preparing a logical Bell state fault-tolerantly. The two-step preparation procedure is as follow: Step 1 provides a one-shot procedure using neighboring optimal control theory to prepare a physical qubit state which is a high-fidelity approximation to the Bell state |β01⟩ = 1/√2(|01⟩ + |10⟩). I show that for ideal (non-ideal) control, an approximate |β01⟩ state could be prepared with error probability ϵ ∼ 10−6 (10−5) with one-shot local operations. Step 2 then takes a block of p pairs of physical qubits, each prepared in |β01⟩ state using Step 1, and fault-tolerantly prepares the logical Bell state for the C4 quantum error detection code.

Sensing parasites: proteomic and advanced bio-detection alternatives

[EN] Parasitic diseases have a great impact in human and animal health. The gold standard for the diagnosis of the majority of parasitic infections is still conventional microscopy, which presents important limitations in terms of sensitivity and specificity and commonly requires highly trained technicians. More accurate molecular-based diagnostic tools are needed for the implementation of early detection, effective treatments and massive screenings with high-throughput capacities. In this respect, sensitive and affordable devices could greatly impact on sustainable control programmes which exist against parasitic diseases, especially in low income settings. Proteomics and nanotechnology approaches are valuable tools for sensing pathogens and host alteration signatures within micro fluidic detection platforms. These new devices might provide novel solutions to fight parasitic diseases. Newly described specific parasite derived products with immune-modulatory properties have been postulated as the best candidates for the early and accurate detection of parasitic infections as well as for the blockage of parasite development. This review provides the most recent methodological and technological advances with great potential for biosensing parasites in their hosts, showing the newest opportunities offered by modern “-omics” and platforms for parasite detection and control.

Optical redox ratio and endogenous porphyrins in the detection of urinary bladder cancer:a patient biopsy analysis

Bladder cancer is among the most common cancers in the UK and conventional detection techniques suffer from low sensitivity, low specificity, or both. Recent attempts to address the disparity have led to progress in the field of autofluorescence as a means to diagnose the disease with high efficiency, however there is still a lot not known about autofluorescence profiles in the disease. The multi-functional diagnostic system "LAKK-M" was used to assess autofluorescence profiles of healthy and cancerous bladder tissue to identify novel biomarkers of the disease. Statistically significant differences were observed in the optical redox ratio (a measure of tissue metabolic activity), the amplitude of endogenous porphyrins and the NADH/porphyrin ratio between tissue types. These findings could advance understanding of bladder cancer and aid in the development of new techniques for detection and surveillance.

Detection of African Swine Fever Virus Antibodies in Serum and Oral Fluid Specimens Using a Recombinant Protein 30 (p30) Dual Matrix Indirect ELISA

In the absence of effective vaccine(s), control of African swine fever caused by African swine fever virus (ASFV) must be based on early, efficient, cost-effective detection and strict control and elimination strategies. For this purpose, we developed an indirect ELISA capable of detecting ASFV antibodies in either serum or oral fluid specimens. The recombinant protein used in the ELISA was selected by comparing the early serum antibody response of ASFV-infected pigs (NHV-p68 isolate) to three major recombinant polypeptides (p30, p54, p72) using a multiplex fluorescent microbead-based immunoassay (FMIA). Non-hazardous (non-infectious) antibody-positive serum for use as plate positive controls and for the calculation of sample-to-positive (S:P) ratios was produced by inoculating pigs with a replicon particle (RP) vaccine expressing the ASFV p30 gene. The optimized ELISA detected anti-p30 antibodies in serum and/or oral fluid samples from pigs inoculated with ASFV under experimental conditions beginning 8 to 12 days post inoculation. Tests on serum (n = 200) and oral fluid (n = 200) field samples from an ASFV-free population demonstrated that the assay was highly diagnostically specific. The convenience and diagnostic utility of oral fluid sampling combined with the flexibility to test either serum or oral fluid on the same platform suggests that this assay will be highly useful under the conditions for which OIE recommends ASFV antibody surveillance, i.e., in ASFV-endemic areas and for the detection of infections with ASFV isolates of low virulence.

DETECTION OF SPORES AND HYPHAE OF ARTWORKS’ BIODETERIOGENIC FILAMENTOUS FUNGI BY RNA-FISH

Filamentous fungi are a threat to the conservation of Cultural Heritage. Thus, detection and identification of viable filamentous fungi are crucial for applying adequate Safeguard measures. RNA-FISH protocols have been previously applied with this aim in Cultural Heritage samples. However, only hyphae detection was reported in the literature, even if spores and conidia are not only a potential risk to Cultural Heritage but can also be harmful for the health of visitors, curators and restorers. Thus, the aim of this work was to evaluate various permeabilizing strategies for their application in the detection of spores/conidia and hyphae of artworks’ biodeteriogenic filamentous fungi by RNA-FISH. Besides of this, the influence of cell aging on the success of the technique and on the development of fungal autofluorescence (that could hamper the RNA-FISH signal detection) were also investigated. Five common biodeteriogenic filamentous fungi species isolated from biodegradated artworks were used as biological model: Aspergillus niger, Cladosporium sp, Fusarium sp, Penicillium sp. and Exophialia sp. Fungal autofluorescence was only detected in cells harvested from Fusarium sp, and Exophialia sp. old cultures, being aging-dependent. However, it was weak enough to allow autofluorescence/RNA-FISH signals distinction. Thus, autofluorescence was not a limitation for the application of RNA-FISH for detection of the taxa investigated. All the permeabilization strategies tested allowed to detect fungal cells from young cultures by RNA-FISH. However, only the combination of paraformaldehyde with Triton X-100 allowed the detection of conidia/spores and hyphae of old filamentous fungi. All the permeabilization strategies failed in the Aspergillus niger conidia/spores staining, which are known to be particularly difficult to permeabilize. But, even in spite of this, the application of this permeabilization method increased the analytical potential of RNA FISH in Cultural Heritage biodeterioration. Whereas much work is required to validate this RNA-FISH approach for its application in real samples from Cultural Heritage it could represent an important advance for the detection, not only of hyphae but also of spores and conidia of various filamentous fungi taxa by RNA-FISH.

Detection of ochratoxin A in tropical wine and grape juice from Brazil.

Ochratoxin A (OTA) is the main mycotoxin found in grapes, wines and grape juices and is considered one of the most harmful contaminants to human health. In this study, samples of tropical wines and grape juices from different grape varieties grown in Brazil were analysed for their OTA content by high-performance liquid chromatography. The detection and quantification limits for OTA were 0.01 and 0.03 ?g L?1 respectively. OTA was detected in 13 (38.24%) of the samples analysed, with concentrations ranging from <0.03 to 0.62 micron g L-1. OTA was not detected in any of the grape juice samples. Most of the red wine samples proved to be contaminated with OTA (75%), while only one white wine sample was contaminated. However, the OTA levels detected in all samples were well below the maximum tolerable limit (2 micron g L-1) in wine and grape juice established by the European Community and Brazilian legislature. The results of this study indicate a low risk of exposure to OTA by consumption of tropical wines and grape juices from Brazil.

A Rapid And Simple Capillary Electrophoresis Method For Indirect Determination Of The Biocide 2,2-dibromo-3-nitrilo-propionamide (dbnpa) In Cooling Waters.

A capillary zone electrophoresis (CE) method was developed for the determination of the biocide 2,2-dibromo-3-nitrilo-propionamide (DBNPA) in water used in cooling systems. The biocide is indirectly determined by CE measurement of the concentration of bromide ions produced by the reaction between the DBNPA and bisulfite. The relationship between the bromide peak areas and the DBNPA concentrations showed a good linearity and a coefficient of determination (R(2)) of 0.9997 in the evaluated concentration range of 0-75 μmol L(-1). The detection and quantification limits for DBNPA were 0.23 and 0.75 μmol L(-1), respectively. The proposed CE method was successfully applied for the analysis of samples of tap water and cooling water spiked with DBNPA. The intra-day and inter-day (intermediary) precisions were lower than 2.8 and 6.2%, respectively. The DBNPA concentrations measured by the CE method were compared to the values obtained by a spectrophotometric method and were found to agree well.

The academic plagiarism and its punishments - a review

Currently there is an increase in the occurrence of plagiarism in varied types of academic texts. Therefore, in agreement with the Brazilian Coordination of Improvement of Higher Education Personnel (CAPES) policies, Brazilian higher education institutions should establish guidelines for the detection and inhibition of academic plagiarism. However, the notion of plagiarism is extremely complex, since the ability of textual construction acquired during education is also developed using others' words. Thus, it is necessary to better know the concept of plagiarism and its implications, as well as the consequences of plagiarism and the punishments that may result from it. Consequently, rules and policies to be established will be better founded in order to address the problem of plagiarism in academic texts in a comprehensive and consistent way, not only to inhibit plagiarism but also to promote education on how is possible to create texts in an original fashion.

On-line identification of minor flavones from sugarcane juice by LC/UV/MS and post-column derivatization

This work describes the on-line characterization of minor flavones from sugarcane (Saccharum officinarum) juice by high-performance liquid chromatography coupled to diode array UV detection and mass spectrometry (LC/UV/MS) using atmospheric pressure chemical ionization-collision-induced dissociation (APCI-CID-MS/MS) and post-column derivatization using UV shift reagents. HPLC-UV analysis with shift reagents provided information about the substitution pattern in the flavonoid skeleton and, combined with MS data, these techniques allowed for the on-line identification of five "garapa" flavones: luteolin-8-C-glucosyl-7-O-glucuronide; tricin-7-O-neohesperoside-4'-O-rhamnoside; tricin-7-O-methylglucuronate-4'-O-rhamnoside; tricin-7-O-methylglucuronide; swertisin, while four other compounds were partially identified as glycosylflavones. Only swertisin (7-O-methylapigenin-6-C-glucoside) was reported previously in sugarcane molasses.

Development and validation of a simple and rapid capillary zone electrophoresis method for determination of nnrti nevirapine in pharmaceutical formulations

A simple and fast capillary zone electrophoresis (CZE) method has been developed and validated for quantification of a non-nucleoside reverse transcriptase inhibitor (NNRTI) nevirapine, in pharmaceuticals. The analysis was optimized using 10 mmol L-1 sodium phosphate buffer pH 2.5, +25 kV applied voltage, hydrodynamic injection 0.5 psi for 5 s and direct UV detection at 200 µm. Diazepam (50.0 µg mL-1) was used as internal standard. Under these conditions, nevirapine was analyzed in approximately less than 2.5 min. The analytical curve presented a coefficient of correlation of 0.9994. Limits of detection and quantification were 1.4 µg mL-1 and 4.3 µg mL-1, respectively. Intra- and inter-day precision expressed as relative standard deviations were 1.4% and 1.3%, respectively and the mean recovery was 100.81%. The active pharmaceutical ingredient was subjected to hydrolysis (acid, basic and neutral) and oxidative stress conditions. No interference of degradation products and tablet excipients were observed. This method showed to be rapid, simple, precise, accurate and economical for determination of nevirapine in pharmaceuticals and it is suitable for routine quality control analysis since CE offers benefits in terms of quicker method development and significantly reduced operating costs.

Determination of picloram in waters by sequential injection chromatography with UV detection

This paper describes a sequential injection chromatography procedure for determination of picloram in waters exploring the low backpressure of a 2.5 cm long monolithic C18 column. Separation of the analyte from the matrix was achieved in less than 60 s using a mobile phase composed by 20:80 (v v-1) acetonitrile:5.0 mmol L-1 H3PO4 and flow rate of 30 μL s-1. Detection was made at 223 nm with a 40 mm optical path length cell. The limits of detection and quantification were 33 and 137 μg L-1, respectively. The proposed method is sensitive enough to monitor the maximum concentration level for picloram in drinking water (500 μg L-1). The sampling frequency is 60 analyses per hour, consuming only 300 μL of acetonitrile per analysis. The proposed methodology was applied to spiked river water samples and no statistically significant differences were observed in comparison to a conventional HPLC-UV method.

Gene expression relationship between prostate cancer cells of Gleason 3, 4 and normal epithelial cells as revealed by cell type-specific transcriptomes

Background: Prostate cancer cells in primary tumors have been typed CD10(-)/CD13(-)/CD24(hi)/CD26(+)/CD38(lo)/CD44(-)/CD104(-). This CD phenotype suggests a lineage relationship between cancer cells and luminal cells. The Gleason grade of tumors is a descriptive of tumor glandular differentiation. Higher Gleason scores are associated with treatment failure. Methods: CD26(+) cancer cells were isolated from Gleason 3+3 (G3) and Gleason 4+4 (G4) tumors by cell sorting, and their gene expression or transcriptome was determined by Affymetrix DNA array analysis. Dataset analysis was used to determine gene expression similarities and differences between G3 and G4 as well as to prostate cancer cell lines and histologically normal prostate luminal cells. Results: The G3 and G4 transcriptomes were compared to those of prostatic cell types of non-cancer, which included luminal, basal, stromal fibromuscular, and endothelial. A principal components analysis of the various transcriptome datasets indicated a closer relationship between luminal and G3 than luminal and G4. Dataset comparison also showed that the cancer transcriptomes differed substantially from those of prostate cancer cell lines. Conclusions: Genes differentially expressed in cancer are potential biomarkers for cancer detection, and those differentially expressed between G3 and G4 are potential biomarkers for disease stratification given that G4 cancer is associated with poor outcomes. Differentially expressed genes likely contribute to the prostate cancer phenotype and constitute the signatures of these particular cancer cell types.