An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

Isolation of culturable yeasts from market wines and evaluation of the 5 center dot 8S-ITS rDNA sequence analysis for identification purposes

Aims: To test the possibility that wines available in the marketplace may contain culturable yeasts and to evaluate the 5.8S-ITS rDNA sequence analysis as adequate means for the identification of isolates. Methods and Results: As a case study, typical Greek wines were surveyed. Sequence analysis of the 5.8S-ITS rDNA was tested for its robustness in species or strain identification. Sixteen isolates could be assigned into the species Brettanomyces bruxellensis, Saccharomyces cerevisiae and Rhodotorula pinicola, whereas four isolates could not be safely identified. B. bruxellensis was the dominant species present in house wines, while non-Saccharomyces sp. were viable in aged wines of high alcohol content. Conclusions: Yeast population depends on postfermentation procedures or storage conditions. Although 5.8S-ITS rDNA sequence analysis is generally a rapid method to identify wine yeast isolates at the species level, or even below that, it may not be sufficient for some genera. Significance and Impact of the Study: This is the first report to show that commercial wines may possess diverse and potentially harmful yeast populations. The knowledge of yeasts able to reside in this niche environment is essential towards integrated quality assurance programmes. For selected species, the 5.8S-ITS rDNA sequence analysis is a rapid and accurate means.

Sequence analysis and distribution of an IS3-like insertion element isolated from Salmonella enteritidis

The nucleotide sequence of a 3 kb region immediately upstream of the sef operon operon of Salmonella enteritidis was determined. A 1230 base pair insertion sequence which shared sequence identity (> 75%) with members of the IS3 family was revealed. This element, designated IS1230, had almost identical (90% identity) terminal inverted repeats to Escherichia coli IS3 but unlike other IS3-like sequences lacked the two characteristic open reading frames which encode the putative transposase. S. enteritidis possessed only one copy of this insertion sequence although Southern hybridisation analysis of restriction digests of genomic DNA revealed another fragment located in a region different from the sef operon which hybridised weakly which suggested the presence of an IS1230 homologue. The distribution of IS1230 and IS1230-like elements was shown to be widespread amongst salmonellas and the patterns of restriction fragments which hybridised differed significantly between Salmonella serotypes and it is suggested that IS1230 has potential for development as a differential diagnostic tool.

Sequence analysis and distribution in Salmonella enterica serovars of IS3-like elements

The genome of Salmonella enterica serovar Enteritidis was shown to possess three IS3-like insertion elements, designated IS1230A, B and C, and each was cloned and their respective deoxynucleotide sequences determined. Mutations in elements IS1230A and B resulted in frameshifts in the open reading frames that encoded a putative transposase to be inactive. IS1230C was truncated at nucleotide 774 relative to IS1230B and therefore did not possess the 3' terminal inverted repeat. The three IS1230 derivatives were closely related to each other based on nucleotide sequence similarity. IS1230A was located adjacent to the sef operon encoding SEF14 fimbriae located at minute 97 of the genome of S. Enteritidis. IS1230B was located adjacent to the umuDC operon at minute 42.5 on the genome, itself located near to one terminus of an 815-kb genome inversion of S. Enteritidis relative to S. Typhimurium. IS1230C was located next to attB, the bacteriophage P22 attachment site, and proB, encoding gamma-glutamyl phosphate reductase. A truncated 3' remnant of IS1230, designated IS1230T, was identified in a clinical isolate of S. Typhimurium DT193 strain 2391. This element was located next to attB adjacent to which were bacteriophage P22-like sequences. Southern hybridisation of total genomic DNA from eighteen phage types of S. Enteritidis and eighteen definitive types of S. Typhimurium showed similar, if not identical, restriction fragment profiles in the respective serovars when probed with IS1230A.

Sequence analysis of a CTX-M-1 IncI1 plasmid found in Salmonella enterica 4,5,12,i:-, Escherichia coli and Klebsiella pneumoniae on a single UK pig farm

OBJECTIVES: In 2009, CTX-M Enterobacteriaceae and Salmonella isolates were recovered from a UK pig farm, prompting studies into the dissemination of the resistance and to establish any relationships between the isolates. METHODS: PFGE was used to elucidate clonal relationships between isolates whilst plasmid profiling, restriction analysis, sequencing and PCR were used to characterize the CTX-M-harbouring plasmids. RESULTS: Escherichia coli, Klebsiella pneumoniae and Salmonella 4,5,12:i:- and Bovismorbificans resistant to cefotaxime (n = 65) were recovered and 63 were shown by PCR to harbour a group 1 CTX-M gene. The harbouring hosts were diverse, but the group 1 CTX-M plasmids were common. Three sequenced CTX-M plasmids from E. coli, K. pneumoniae and Salmonella enterica serotype 4,5,12:i:- were identical except for seven mutations and highly similar to IncI1 plasmid ColIb-P9. Two antimicrobial resistance regions were identified: one inserted upstream of yacABC harbouring ISCR2 transposases, sul2 and floR; and the other inserted within shfB of the pilV shufflon harbouring the ISEcp1 transposase followed by blaCTX-M-1. CONCLUSIONS: These data suggest that an ST108 IncI1 plasmid encoding a blaCTX-M-1 gene had disseminated across multiple genera on this farm, an example of horizontal gene transfer of the blaCTX-M-1 gene.

Support vector machine (SVM) based multiclass prediction with basic statistical analysis of plasminogen activators

Plasminogen (Pg), the precursor of the proteolytic and fibrinolytic enzyme of blood, is converted to the active enzyme plasmin (Pm) by different plasminogen activators (tissue plasminogen activators and urokinase), including the bacterial activators streptokinase and staphylokinase, which activate Pg to Pm and thus are used clinically for thrombolysis. The identification of Pg-activators is therefore an important step in understanding their functional mechanism and derives new therapies.

Molecular approaches for structural characterization of Bothrops L-amino acid oxidases with antiprotozoal activity: cDNA cloning, comparative sequence analysis, and molecular modeling

Two L-amino acid oxidases (LAAOs) were identified by random sequencing of cDNA libraries from the venom glands of Bothrops moojeni (BmooLAAO) and Bothrops jararacussu (Bjussu LAAO). Phylogenetic analysis involving other SV-LAAOs showed sequence identities within the range 83-87% being closely related to those from Agkistrodon and Trimeresurus. Molecular modeling experiments indicated the FAD-binding, substrate-binding, and helical domains of Bmoo and Bjussu LAAOs. The RMS deviations obtained by the superposition of those domains and that from Calloselasma rhodostoma LAAO crystal structure confirm the high degree of structural similarity between these enzymes. Purified BjussuLAAO-I and BmooLAAO-I exhibited antiprotozoal activities which were demonstrated to be hydrogen-peroxide mediated. This is the first report on the isolation and identification of cDNAs encoding LAAOs from Bothrops venom. The findings here reported contribute to the overall structural elucidation of SV-LAAOs and will advance the understanding on their mode of action. (c) 2006 Elsevier B.V. All rights reserved.

5S rDNA chromosomal mapping and COI sequence analysis reveal differentiation among distinct populations of a characid fish Serrapinnus notomelas

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Partial cDNA sequence analysis of myosin Va from rainbow trout (Oncorhynchus mykiss) and its relationship to myosin v isoforms from other vertebrates.

Partial cDNA sequences of myosin V from rainbow trout Oncorhynchus mykiss were analyzed and showed high similarity to MVa from other vertebrates. Phylogenetic analysis has shown that events resulting in the formation of paralogous copies of myosin Va, Vb, and Vc occurred before the divergence of vertebrates into different classes. Expression analysis of myosin Va, Vb, and Vc in different O. mykiss tissues revealed MVa exclusively expressed in hypophysis and brain whereas Vb and Vc were expressed in practically all tissues analyzed. The nucleotide sequence for myosin V was explored in a fish species for the first time and these results represent an important start in understanding the organization, evolution, and expression of myosins in early vertebrates. The data presented here represent contributions to the knowledge of rainbow trout genome. A better understanding of this economically important species could assist in development of improved strains of this fish for aquaculture.

Identification of bacteria in endodontic infections by sequence analysis of 16S rDNA clone libraries

A significant proportion of oral bacteria are unable to undergo cultivation by existing techniques. In this regard, the microbiota from root canals still requires complementary characterization. The present study aimed at the identification of bacteria by sequence analysis of 16S rDNA clone libraries from seven endodontically infected teeth. Samples were collected from the root canals, subjected to the PCR with universal 16S rDNA primers, cloned and partially sequenced. Clones were clustered into groups of closely related sequences (phylotypes) and identification to the species level was performed by comparative analysis with the GenBank, EMBL and DDBJ databases, according to a 98 % minimum identity. All samples were positive for bacteria and the number of phylotypes detected per subject varied from two to 14. The majority of taxa (65(.)2 %) belonged to the phylum Firmicutes of the Gram-positive bacteria, followed by Proteobacteria (10(.)9 %), Spirochaetes (4(.)3 %), Bacteroidetes (6(.)5 %), Actinobacteria (2(.)2 %) and Deferribacteres (2(.)2 %). A total of 46 distinct taxonomic units was identified. Four clones with low similarity to sequences previously deposited in the databases were sequenced to nearly full extent and were classified taxonomically as novel representatives of the order Clostridiales, including a putative novel species of Mogibacterium. The identification of novel phylotypes associated with endodontic infections suggests that the endodontium may still harbour a relevant proportion of uncharacterized taxa.

Phylogeography of the Solanaceae-infecting Basidiomycota fungus Rhizoctonia solani AG-3 based on sequence analysis of two nuclear DNA loci

Background: the soil fungus Rhizoctonia solani anastomosis group 3 (AG-3) is an important pathogen of cultivated plants in the family Solanaceae. Isolates of R. solani AG-3 are taxonomically related based on the composition of cellular fatty acids, phylogenetic analysis of nuclear ribosomal DNA (rDNA) and beta-tubulin gene sequences, and somatic hyphal interactions. Despite the close genetic relationship among isolates of R. solani AG-3, field populations from potato and tobacco exhibit comparative differences in their disease biology, dispersal ecology, host specialization, genetic diversity and population structure. However, little information is available on how field populations of R. solani AG-3 on potato and tobacco are shaped by population genetic processes. In this study, two field populations of R. solani AG-3 from potato in North Carolina (NC) and the Northern USA; and two field populations from tobacco in NC and Southern Brazil were examined using sequence analysis of two cloned regions of nuclear DNA (pP42F and pP89).Results: Populations of R. solani AG-3 from potato were genetically diverse with a high frequency of heterozygosity, while limited or no genetic diversity was observed within the highly homozygous tobacco populations from NC and Brazil. Except for one isolate (TBR24), all NC and Brazilian isolates from tobacco shared the same alleles. No alleles were shared between potato and tobacco populations of R. solani AG-3, indicating no gene flow between them. To infer historical events that influenced current geographical patterns observed for populations of R. solani AG-3 from potato, we performed an analysis of molecular variance (AMOVA) and a nested clade analysis (NCA). Population differentiation was detected for locus pP89 (Phi(ST) = 0.257, significant at P < 0.05) but not for locus pP42F (Phi(ST) = 0.034, not significant). Results based on NCA of the pP89 locus suggest that historical restricted gene flow is a plausible explanation for the geographical association of clades. Coalescent-based simulations of genealogical relationships between populations of R. solani AG-3 from potato and tobacco were used to estimate the amount and directionality of historical migration patterns in time, and the ages of mutations of populations. Low rates of historical movement of genes were observed between the potato and tobacco populations of R. solani AG-3.Conclusion: the two sisters populations of the basidiomycete fungus R. solani AG-3 from potato and tobacco represent two genetically distinct and historically divergent lineages that have probably evolved within the range of their particular related Solanaceae hosts as sympatric species.