Proteins of Leishmania (Viannia) shawi confer protection associated with Th1 immune response and memory generation

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Proteins of Leishmania (Viannia) shawi confer protection associated with Th1 immune response and memory generation

Background: Leishmania (Viannia) shawi parasite was first characterized in 1989. Recently the protective effects of soluble leishmanial antigen (SLA) from L. (V.) shawi promastigotes were demonstrated using BALB/c mice, the susceptibility model for this parasite. In order to identify protective fractions, SLA was fractionated by reverse phase HPLC and five antigenic fractions were obtained. Methods: F1 fraction was purified from L. (V.) shawi parasite extract by reverse phase HPLC. BALB/c mice were immunized once a week for two consecutive weeks by subcutaneous routes in the rump, using 25 mu g of F1. After 1 and 16 weeks of last immunization, groups were challenged in the footpad with L. (V.) shawi promastigotes. After 2 months, those same mice were sacrificed and parasite burden, cellular and humoral immune responses were evaluated. Results: The F1 fraction induced a high degree of protection associated with an increase in IFN-gamma, a decrease in IL-4, increased cell proliferation and activation of CD8(+)T lymphocytes. Long-term protection was acquired in F1-immunized mice, associated with increased CD4(+) central memory T lymphocytes and activation of both CD4+ and CD8(+) T cells. In addition, F1-immunized groups showed an increase in IgG2a levels. Conclusions: The inductor capability of antigens to generate memory lymphocytes that can proliferate and secrete beneficial cytokines upon infection could be an important factor in the development of vaccine candidates against American Tegumentary Leishmaniasis.

Current perspectives in avian salmonellosis: Vaccines and immune mechanisms of protection

Salmonellosis is one of the most prevalent foodborne diseases worldwide. Food animals have been identified as reservoirs for nontyphoid Salmonella infections. in poultry, host-specific Salmonella infections cause fowl typhoid and pullorum diseases that produce economic losses in different parts of the world. Several measures have been used to prevent and control Salmonella infections in poultry, and vaccination is the most practical measure because it avoids contamination of poultry products and by-products and prevents disease in humans. Salmonella vaccines can decrease public health risk by reducing colonization and organ invasion, including invasion of reproductive tissues, and by diminishing fecal shedding and environmental contamination. We review available information on the host-specific and non-host-specific Salmonella serotypes found in poultry and the improved understanding of the pathogenesis of and immune responses to infection. We also include some approaches based on updated publications regarding killed and live attenuated vaccines and their immune mechanisms of protection.

Immune response deviation and enhanced expression of chemokine receptor CCR4 in TBI patients due to unknown serum factors

BACKGROUND: Severe brain trauma leads to an activation of the immune system. To this date, neither the exact perturbation of the specific immune reaction induced by the traumatic brain injury (TBI), nor the interactions leading to the infiltration of peripheral immune cells into the brain are fully understood. PATIENTS AND METHODS: Serum was collected from 17 patients with TBI and a long bone fracture, 24 patients with an isolated long bone fracture and from healthy individuals. The effect of the serum on normal human monocytes and T-lymphocytes was tested in vitro by assessing proliferation and expression of surface markers, chemokine receptors and cytokines. RESULTS: Serum collected from patients with a TBI and a long bone fracture increased the expression of the chemokine receptor CCR4 in monocytes when compared to patients with an isolated long bone fracture. Extending this comparison to T-lymphocytes, the serum from TBI patients induced lower proliferation rates and decreased expression of the pro-inflammatory cytokine TNF-alpha, while simultaneously increasing the secretion of immune-modulatory cytokines (IL-4, IL-10 and TGF-beta) (p<0.05). CONCLUSION: Patients with a TBI release currently unknown soluble factors into the circulating blood that up regulate expression of chemokine receptor CCR4 in peripheral blood monocytes whilst concurrently inducing expression of immunosuppressive cytokines by activated T-lymphocytes.

IL-33 promotes an innate immune pathway of intestinal tissue protection dependent on amphiregulin-EGFR interactions

The barrier surfaces of the skin, lung, and intestine are constantly exposed to environmental stimuli that can result in inflammation and tissue damage. Interleukin (IL)-33-dependent group 2 innate lymphoid cells (ILC2s) are enriched at barrier surfaces and have been implicated in promoting inflammation; however, the mechanisms underlying the tissue-protective roles of IL-33 or ILC2s at surfaces such as the intestine remain poorly defined. Here we demonstrate that, following activation with IL-33, expression of the growth factor amphiregulin (AREG) is a dominant functional signature of gut-associated ILC2s. In the context of a murine model of intestinal damage and inflammation, the frequency and number of AREG-expressing ILC2s increases following intestinal injury and genetic disruption of the endogenous AREG-epidermal growth factor receptor (EGFR) pathway exacerbated disease. Administration of exogenous AREG limited intestinal inflammation and decreased disease severity in both lymphocyte-sufficient and lymphocyte-deficient mice, revealing a previously unrecognized innate immune mechanism of intestinal tissue protection. Furthermore, treatment with IL-33 or transfer of ILC2s ameliorated intestinal disease severity in an AREG-dependent manner. Collectively, these data reveal a critical feedback loop in which cytokine cues from damaged epithelia activate innate immune cells to express growth factors essential for ILC-dependent restoration of epithelial barrier function and maintenance of tissue homeostasis.

Side-Channel Attack Protection Techniques in FPGA Systems using Enhanced Dual-Rail Solutions

Esta tesis doctoral se centra principalmente en técnicas de ataque y contramedidas relacionadas con ataques de canal lateral (SCA por sus siglas en inglés), que han sido propuestas dentro del campo de investigación académica desde hace 17 años. Las investigaciones relacionadas han experimentado un notable crecimiento en las últimas décadas, mientras que los diseños enfocados en la protección sólida y eficaz contra dichos ataques aún se mantienen como un tema de investigación abierto, en el que se necesitan iniciativas más confiables para la protección de la información persona de empresa y de datos nacionales. El primer uso documentado de codificación secreta se remonta a alrededor de 1700 B.C., cuando los jeroglíficos del antiguo Egipto eran descritos en las inscripciones. La seguridad de la información siempre ha supuesto un factor clave en la transmisión de datos relacionados con inteligencia diplomática o militar. Debido a la evolución rápida de las técnicas modernas de comunicación, soluciones de cifrado se incorporaron por primera vez para garantizar la seguridad, integridad y confidencialidad de los contextos de transmisión a través de cables sin seguridad o medios inalámbricos. Debido a las restricciones de potencia de cálculo antes de la era del ordenador, la técnica de cifrado simple era un método más que suficiente para ocultar la información. Sin embargo, algunas vulnerabilidades algorítmicas pueden ser explotadas para restaurar la regla de codificación sin mucho esfuerzo. Esto ha motivado nuevas investigaciones en el área de la criptografía, con el fin de proteger el sistema de información ante sofisticados algoritmos. Con la invención de los ordenadores se ha acelerado en gran medida la implementación de criptografía segura, que ofrece resistencia eficiente encaminada a obtener mayores capacidades de computación altamente reforzadas. Igualmente, sofisticados cripto-análisis han impulsado las tecnologías de computación. Hoy en día, el mundo de la información ha estado involucrado con el campo de la criptografía, enfocada a proteger cualquier campo a través de diversas soluciones de cifrado. Estos enfoques se han fortalecido debido a la unificación optimizada de teorías matemáticas modernas y prácticas eficaces de hardware, siendo posible su implementación en varias plataformas (microprocesador, ASIC, FPGA, etc.). Las necesidades y requisitos de seguridad en la industria son las principales métricas de conducción en el diseño electrónico, con el objetivo de promover la fabricación de productos de gran alcance sin sacrificar la seguridad de los clientes. Sin embargo, una vulnerabilidad en la implementación práctica encontrada por el Prof. Paul Kocher, et al en 1996 implica que un circuito digital es inherentemente vulnerable a un ataque no convencional, lo cual fue nombrado posteriormente como ataque de canal lateral, debido a su fuente de análisis. Sin embargo, algunas críticas sobre los algoritmos criptográficos teóricamente seguros surgieron casi inmediatamente después de este descubrimiento. En este sentido, los circuitos digitales consisten típicamente en un gran número de celdas lógicas fundamentales (como MOS - Metal Oxide Semiconductor), construido sobre un sustrato de silicio durante la fabricación. La lógica de los circuitos se realiza en función de las innumerables conmutaciones de estas células. Este mecanismo provoca inevitablemente cierta emanación física especial que puede ser medida y correlacionada con el comportamiento interno del circuito. SCA se puede utilizar para revelar datos confidenciales (por ejemplo, la criptografía de claves), analizar la arquitectura lógica, el tiempo e incluso inyectar fallos malintencionados a los circuitos que se implementan en sistemas embebidos, como FPGAs, ASICs, o tarjetas inteligentes. Mediante el uso de la comparación de correlación entre la cantidad de fuga estimada y las fugas medidas de forma real, información confidencial puede ser reconstruida en mucho menos tiempo y computación. Para ser precisos, SCA básicamente cubre una amplia gama de tipos de ataques, como los análisis de consumo de energía y radiación ElectroMagnética (EM). Ambos se basan en análisis estadístico y, por lo tanto, requieren numerosas muestras. Los algoritmos de cifrado no están intrínsecamente preparados para ser resistentes ante SCA. Es por ello que se hace necesario durante la implementación de circuitos integrar medidas que permitan camuflar las fugas a través de "canales laterales". Las medidas contra SCA están evolucionando junto con el desarrollo de nuevas técnicas de ataque, así como la continua mejora de los dispositivos electrónicos. Las características físicas requieren contramedidas sobre la capa física, que generalmente se pueden clasificar en soluciones intrínsecas y extrínsecas. Contramedidas extrínsecas se ejecutan para confundir la fuente de ataque mediante la integración de ruido o mala alineación de la actividad interna. Comparativamente, las contramedidas intrínsecas están integradas en el propio algoritmo, para modificar la aplicación con el fin de minimizar las fugas medibles, o incluso hacer que dichas fugas no puedan ser medibles. Ocultación y Enmascaramiento son dos técnicas típicas incluidas en esta categoría. Concretamente, el enmascaramiento se aplica a nivel algorítmico, para alterar los datos intermedios sensibles con una máscara de manera reversible. A diferencia del enmascaramiento lineal, las operaciones no lineales que ampliamente existen en criptografías modernas son difíciles de enmascarar. Dicho método de ocultación, que ha sido verificado como una solución efectiva, comprende principalmente la codificación en doble carril, que está ideado especialmente para aplanar o eliminar la fuga dependiente de dato en potencia o en EM. En esta tesis doctoral, además de la descripción de las metodologías de ataque, se han dedicado grandes esfuerzos sobre la estructura del prototipo de la lógica propuesta, con el fin de realizar investigaciones enfocadas a la seguridad sobre contramedidas de arquitectura a nivel lógico. Una característica de SCA reside en el formato de las fuentes de fugas. Un típico ataque de canal lateral se refiere al análisis basado en la potencia, donde la capacidad fundamental del transistor MOS y otras capacidades parásitas son las fuentes esenciales de fugas. Por lo tanto, una lógica robusta resistente a SCA debe eliminar o mitigar las fugas de estas micro-unidades, como las puertas lógicas básicas, los puertos I/O y las rutas. Las herramientas EDA proporcionadas por los vendedores manipulan la lógica desde un nivel más alto, en lugar de realizarlo desde el nivel de puerta, donde las fugas de canal lateral se manifiestan. Por lo tanto, las implementaciones clásicas apenas satisfacen estas necesidades e inevitablemente atrofian el prototipo. Por todo ello, la implementación de un esquema de diseño personalizado y flexible ha de ser tomado en cuenta. En esta tesis se presenta el diseño y la implementación de una lógica innovadora para contrarrestar SCA, en la que se abordan 3 aspectos fundamentales: I. Se basa en ocultar la estrategia sobre el circuito en doble carril a nivel de puerta para obtener dinámicamente el equilibrio de las fugas en las capas inferiores; II. Esta lógica explota las características de la arquitectura de las FPGAs, para reducir al mínimo el gasto de recursos en la implementación; III. Se apoya en un conjunto de herramientas asistentes personalizadas, incorporadas al flujo genérico de diseño sobre FPGAs, con el fin de manipular los circuitos de forma automática. El kit de herramientas de diseño automático es compatible con la lógica de doble carril propuesta, para facilitar la aplicación práctica sobre la familia de FPGA del fabricante Xilinx. En este sentido, la metodología y las herramientas son flexibles para ser extendido a una amplia gama de aplicaciones en las que se desean obtener restricciones mucho más rígidas y sofisticadas a nivel de puerta o rutado. En esta tesis se realiza un gran esfuerzo para facilitar el proceso de implementación y reparación de lógica de doble carril genérica. La viabilidad de las soluciones propuestas es validada mediante la selección de algoritmos criptográficos ampliamente utilizados, y su evaluación exhaustiva en comparación con soluciones anteriores. Todas las propuestas están respaldadas eficazmente a través de ataques experimentales con el fin de validar las ventajas de seguridad del sistema. El presente trabajo de investigación tiene la intención de cerrar la brecha entre las barreras de implementación y la aplicación efectiva de lógica de doble carril. En esencia, a lo largo de esta tesis se describirá un conjunto de herramientas de implementación para FPGAs que se han desarrollado para trabajar junto con el flujo de diseño genérico de las mismas, con el fin de lograr crear de forma innovadora la lógica de doble carril. Un nuevo enfoque en el ámbito de la seguridad en el cifrado se propone para obtener personalización, automatización y flexibilidad en el prototipo de circuito de bajo nivel con granularidad fina. Las principales contribuciones del presente trabajo de investigación se resumen brevemente a continuación: Lógica de Precharge Absorbed-DPL logic: El uso de la conversión de netlist para reservar LUTs libres para ejecutar la señal de precharge y Ex en una lógica DPL. Posicionamiento entrelazado Row-crossed con pares idénticos de rutado en redes de doble carril, lo que ayuda a aumentar la resistencia frente a la medición EM selectiva y mitigar los impactos de las variaciones de proceso. Ejecución personalizada y herramientas de conversión automática para la generación de redes idénticas para la lógica de doble carril propuesta. (a) Para detectar y reparar conflictos en las conexiones; (b) Detectar y reparar las rutas asimétricas. (c) Para ser utilizado en otras lógicas donde se requiere un control estricto de las interconexiones en aplicaciones basadas en Xilinx. Plataforma CPA de pruebas personalizadas para el análisis de EM y potencia, incluyendo la construcción de dicha plataforma, el método de medición y análisis de los ataques. Análisis de tiempos para cuantificar los niveles de seguridad. División de Seguridad en la conversión parcial de un sistema de cifrado complejo para reducir los costes de la protección. Prueba de concepto de un sistema de calefacción auto-adaptativo para mitigar los impactos eléctricos debido a la variación del proceso de silicio de manera dinámica. La presente tesis doctoral se encuentra organizada tal y como se detalla a continuación: En el capítulo 1 se abordan los fundamentos de los ataques de canal lateral, que abarca desde conceptos básicos de teoría de modelos de análisis, además de la implementación de la plataforma y la ejecución de los ataques. En el capítulo 2 se incluyen las estrategias de resistencia SCA contra los ataques de potencia diferencial y de EM. Además de ello, en este capítulo se propone una lógica en doble carril compacta y segura como contribución de gran relevancia, así como también se presentará la transformación lógica basada en un diseño a nivel de puerta. Por otra parte, en el Capítulo 3 se abordan los desafíos relacionados con la implementación de lógica en doble carril genérica. Así mismo, se describirá un flujo de diseño personalizado para resolver los problemas de aplicación junto con una herramienta de desarrollo automático de aplicaciones propuesta, para mitigar las barreras de diseño y facilitar los procesos. En el capítulo 4 se describe de forma detallada la elaboración e implementación de las herramientas propuestas. Por otra parte, la verificación y validaciones de seguridad de la lógica propuesta, así como un sofisticado experimento de verificación de la seguridad del rutado, se describen en el capítulo 5. Por último, un resumen de las conclusiones de la tesis y las perspectivas como líneas futuras se incluyen en el capítulo 6. Con el fin de profundizar en el contenido de la tesis doctoral, cada capítulo se describe de forma más detallada a continuación: En el capítulo 1 se introduce plataforma de implementación hardware además las teorías básicas de ataque de canal lateral, y contiene principalmente: (a) La arquitectura genérica y las características de la FPGA a utilizar, en particular la Xilinx Virtex-5; (b) El algoritmo de cifrado seleccionado (un módulo comercial Advanced Encryption Standard (AES)); (c) Los elementos esenciales de los métodos de canal lateral, que permiten revelar las fugas de disipación correlacionadas con los comportamientos internos; y el método para recuperar esta relación entre las fluctuaciones físicas en los rastros de canal lateral y los datos internos procesados; (d) Las configuraciones de las plataformas de pruebas de potencia / EM abarcadas dentro de la presente tesis. El contenido de esta tesis se amplia y profundiza a partir del capítulo 2, en el cual se abordan varios aspectos claves. En primer lugar, el principio de protección de la compensación dinámica de la lógica genérica de precarga de doble carril (Dual-rail Precharge Logic-DPL) se explica mediante la descripción de los elementos compensados a nivel de puerta. En segundo lugar, la lógica PA-DPL es propuesta como aportación original, detallando el protocolo de la lógica y un caso de aplicación. En tercer lugar, dos flujos de diseño personalizados se muestran para realizar la conversión de doble carril. Junto con ello, se aclaran las definiciones técnicas relacionadas con la manipulación por encima de la netlist a nivel de LUT. Finalmente, una breve discusión sobre el proceso global se aborda en la parte final del capítulo. El Capítulo 3 estudia los principales retos durante la implementación de DPLs en FPGAs. El nivel de seguridad de las soluciones de resistencia a SCA encontradas en el estado del arte se ha degenerado debido a las barreras de implantación a través de herramientas EDA convencionales. En el escenario de la arquitectura FPGA estudiada, se discuten los problemas de los formatos de doble carril, impactos parásitos, sesgo tecnológico y la viabilidad de implementación. De acuerdo con estas elaboraciones, se plantean dos problemas: Cómo implementar la lógica propuesta sin penalizar los niveles de seguridad, y cómo manipular un gran número de celdas y automatizar el proceso. El PA-DPL propuesto en el capítulo 2 se valida con una serie de iniciativas, desde características estructurales como doble carril entrelazado o redes de rutado clonadas, hasta los métodos de aplicación tales como las herramientas de personalización y automatización de EDA. Por otra parte, un sistema de calefacción auto-adaptativo es representado y aplicado a una lógica de doble núcleo, con el fin de ajustar alternativamente la temperatura local para equilibrar los impactos negativos de la variación del proceso durante la operación en tiempo real. El capítulo 4 se centra en los detalles de la implementación del kit de herramientas. Desarrollado sobre una API third-party, el kit de herramientas personalizado es capaz de manipular los elementos de la lógica de circuito post P&R ncd (una versión binaria ilegible del xdl) convertido al formato XDL Xilinx. El mecanismo y razón de ser del conjunto de instrumentos propuestos son cuidadosamente descritos, que cubre la detección de enrutamiento y los enfoques para la reparación. El conjunto de herramientas desarrollado tiene como objetivo lograr redes de enrutamiento estrictamente idénticos para la lógica de doble carril, tanto para posicionamiento separado como para el entrelazado. Este capítulo particularmente especifica las bases técnicas para apoyar las implementaciones en los dispositivos de Xilinx y su flexibilidad para ser utilizado sobre otras aplicaciones. El capítulo 5 se enfoca en la aplicación de los casos de estudio para la validación de los grados de seguridad de la lógica propuesta. Se discuten los problemas técnicos detallados durante la ejecución y algunas nuevas técnicas de implementación. (a) Se discute el impacto en el proceso de posicionamiento de la lógica utilizando el kit de herramientas propuesto. Diferentes esquemas de implementación, tomando en cuenta la optimización global en seguridad y coste, se verifican con los experimentos con el fin de encontrar los planes de posicionamiento y reparación optimizados; (b) las validaciones de seguridad se realizan con los métodos de correlación y análisis de tiempo; (c) Una táctica asintótica se aplica a un núcleo AES sobre BCDL estructurado para validar de forma sofisticada el impacto de enrutamiento sobre métricas de seguridad; (d) Los resultados preliminares utilizando el sistema de calefacción auto-adaptativa sobre la variación del proceso son mostrados; (e) Se introduce una aplicación práctica de las herramientas para un diseño de cifrado completa. Capítulo 6 incluye el resumen general del trabajo presentado dentro de esta tesis doctoral. Por último, una breve perspectiva del trabajo futuro se expone, lo que puede ampliar el potencial de utilización de las contribuciones de esta tesis a un alcance más allá de los dominios de la criptografía en FPGAs. ABSTRACT This PhD thesis mainly concentrates on countermeasure techniques related to the Side Channel Attack (SCA), which has been put forward to academic exploitations since 17 years ago. The related research has seen a remarkable growth in the past decades, while the design of solid and efficient protection still curiously remain as an open research topic where more reliable initiatives are required for personal information privacy, enterprise and national data protections. The earliest documented usage of secret code can be traced back to around 1700 B.C., when the hieroglyphs in ancient Egypt are scribed in inscriptions. Information security always gained serious attention from diplomatic or military intelligence transmission. Due to the rapid evolvement of modern communication technique, crypto solution was first incorporated by electronic signal to ensure the confidentiality, integrity, availability, authenticity and non-repudiation of the transmitted contexts over unsecure cable or wireless channels. Restricted to the computation power before computer era, simple encryption tricks were practically sufficient to conceal information. However, algorithmic vulnerabilities can be excavated to restore the encoding rules with affordable efforts. This fact motivated the development of modern cryptography, aiming at guarding information system by complex and advanced algorithms. The appearance of computers has greatly pushed forward the invention of robust cryptographies, which efficiently offers resistance relying on highly strengthened computing capabilities. Likewise, advanced cryptanalysis has greatly driven the computing technologies in turn. Nowadays, the information world has been involved into a crypto world, protecting any fields by pervasive crypto solutions. These approaches are strong because of the optimized mergence between modern mathematical theories and effective hardware practices, being capable of implement crypto theories into various platforms (microprocessor, ASIC, FPGA, etc). Security needs from industries are actually the major driving metrics in electronic design, aiming at promoting the construction of systems with high performance without sacrificing security. Yet a vulnerability in practical implementation found by Prof. Paul Kocher, et al in 1996 implies that modern digital circuits are inherently vulnerable to an unconventional attack approach, which was named as side-channel attack since then from its analysis source. Critical suspicions to theoretically sound modern crypto algorithms surfaced almost immediately after this discovery. To be specifically, digital circuits typically consist of a great number of essential logic elements (as MOS - Metal Oxide Semiconductor), built upon a silicon substrate during the fabrication. Circuit logic is realized relying on the countless switch actions of these cells. This mechanism inevitably results in featured physical emanation that can be properly measured and correlated with internal circuit behaviors. SCAs can be used to reveal the confidential data (e.g. crypto-key), analyze the logic architecture, timing and even inject malicious faults to the circuits that are implemented in hardware system, like FPGA, ASIC, smart Card. Using various comparison solutions between the predicted leakage quantity and the measured leakage, secrets can be reconstructed at much less expense of time and computation. To be precisely, SCA basically encloses a wide range of attack types, typically as the analyses of power consumption or electromagnetic (EM) radiation. Both of them rely on statistical analyses, and hence require a number of samples. The crypto algorithms are not intrinsically fortified with SCA-resistance. Because of the severity, much attention has to be taken into the implementation so as to assemble countermeasures to camouflage the leakages via "side channels". Countermeasures against SCA are evolving along with the development of attack techniques. The physical characteristics requires countermeasures over physical layer, which can be generally classified into intrinsic and extrinsic vectors. Extrinsic countermeasures are executed to confuse the attacker by integrating noise, misalignment to the intra activities. Comparatively, intrinsic countermeasures are built into the algorithm itself, to modify the implementation for minimizing the measurable leakage, or making them not sensitive any more. Hiding and Masking are two typical techniques in this category. Concretely, masking applies to the algorithmic level, to alter the sensitive intermediate values with a mask in reversible ways. Unlike the linear masking, non-linear operations that widely exist in modern cryptographies are difficult to be masked. Approved to be an effective counter solution, hiding method mainly mentions dual-rail logic, which is specially devised for flattening or removing the data-dependent leakage in power or EM signatures. In this thesis, apart from the context describing the attack methodologies, efforts have also been dedicated to logic prototype, to mount extensive security investigations to countermeasures on logic-level. A characteristic of SCA resides on the format of leak sources. Typical side-channel attack concerns the power based analysis, where the fundamental capacitance from MOS transistors and other parasitic capacitances are the essential leak sources. Hence, a robust SCA-resistant logic must eliminate or mitigate the leakages from these micro units, such as basic logic gates, I/O ports and routings. The vendor provided EDA tools manipulate the logic from a higher behavioral-level, rather than the lower gate-level where side-channel leakage is generated. So, the classical implementations barely satisfy these needs and inevitably stunt the prototype. In this case, a customized and flexible design scheme is appealing to be devised. This thesis profiles an innovative logic style to counter SCA, which mainly addresses three major aspects: I. The proposed logic is based on the hiding strategy over gate-level dual-rail style to dynamically overbalance side-channel leakage from lower circuit layer; II. This logic exploits architectural features of modern FPGAs, to minimize the implementation expenses; III. It is supported by a set of assistant custom tools, incorporated by the generic FPGA design flow, to have circuit manipulations in an automatic manner. The automatic design toolkit supports the proposed dual-rail logic, facilitating the practical implementation on Xilinx FPGA families. While the methodologies and the tools are flexible to be expanded to a wide range of applications where rigid and sophisticated gate- or routing- constraints are desired. In this thesis a great effort is done to streamline the implementation workflow of generic dual-rail logic. The feasibility of the proposed solutions is validated by selected and widely used crypto algorithm, for thorough and fair evaluation w.r.t. prior solutions. All the proposals are effectively verified by security experiments. The presented research work attempts to solve the implementation troubles. The essence that will be formalized along this thesis is that a customized execution toolkit for modern FPGA systems is developed to work together with the generic FPGA design flow for creating innovative dual-rail logic. A method in crypto security area is constructed to obtain customization, automation and flexibility in low-level circuit prototype with fine-granularity in intractable routings. Main contributions of the presented work are summarized next: Precharge Absorbed-DPL logic: Using the netlist conversion to reserve free LUT inputs to execute the Precharge and Ex signal in a dual-rail logic style. A row-crossed interleaved placement method with identical routing pairs in dual-rail networks, which helps to increase the resistance against selective EM measurement and mitigate the impacts from process variations. Customized execution and automatic transformation tools for producing identical networks for the proposed dual-rail logic. (a) To detect and repair the conflict nets; (b) To detect and repair the asymmetric nets. (c) To be used in other logics where strict network control is required in Xilinx scenario. Customized correlation analysis testbed for EM and power attacks, including the platform construction, measurement method and attack analysis. A timing analysis based method for quantifying the security grades. A methodology of security partitions of complex crypto systems for reducing the protection cost. A proof-of-concept self-adaptive heating system to mitigate electrical impacts over process variations in dynamic dual-rail compensation manner. The thesis chapters are organized as follows: Chapter 1 discusses the side-channel attack fundamentals, which covers from theoretic basics to analysis models, and further to platform setup and attack execution. Chapter 2 centers to SCA-resistant strategies against generic power and EM attacks. In this chapter, a major contribution, a compact and secure dual-rail logic style, will be originally proposed. The logic transformation based on bottom-layer design will be presented. Chapter 3 is scheduled to elaborate the implementation challenges of generic dual-rail styles. A customized design flow to solve the implementation problems will be described along with a self-developed automatic implementation toolkit, for mitigating the design barriers and facilitating the processes. Chapter 4 will originally elaborate the tool specifics and construction details. The implementation case studies and security validations for the proposed logic style, as well as a sophisticated routing verification experiment, will be described in Chapter 5. Finally, a summary of thesis conclusions and perspectives for future work are included in Chapter 5. To better exhibit the thesis contents, each chapter is further described next: Chapter 1 provides the introduction of hardware implementation testbed and side-channel attack fundamentals, and mainly contains: (a) The FPGA generic architecture and device features, particularly of Virtex-5 FPGA; (b) The selected crypto algorithm - a commercially and extensively used Advanced Encryption Standard (AES) module - is detailed; (c) The essentials of Side-Channel methods are profiled. It reveals the correlated dissipation leakage to the internal behaviors, and the method to recover this relationship between the physical fluctuations in side-channel traces and the intra processed data; (d) The setups of the power/EM testing platforms enclosed inside the thesis work are given. The content of this thesis is expanded and deepened from chapter 2, which is divided into several aspects. First, the protection principle of dynamic compensation of the generic dual-rail precharge logic is explained by describing the compensated gate-level elements. Second, the novel DPL is originally proposed by detailing the logic protocol and an implementation case study. Third, a couple of custom workflows are shown next for realizing the rail conversion. Meanwhile, the technical definitions that are about to be manipulated above LUT-level netlist are clarified. A brief discussion about the batched process is given in the final part. Chapter 3 studies the implementation challenges of DPLs in FPGAs. The security level of state-of-the-art SCA-resistant solutions are decreased due to the implementation barriers using conventional EDA tools. In the studied FPGA scenario, problems are discussed from dual-rail format, parasitic impact, technological bias and implementation feasibility. According to these elaborations, two problems arise: How to implement the proposed logic without crippling the security level; and How to manipulate a large number of cells and automate the transformation. The proposed PA-DPL in chapter 2 is legalized with a series of initiatives, from structures to implementation methods. Furthermore, a self-adaptive heating system is depicted and implemented to a dual-core logic, assumed to alternatively adjust local temperature for balancing the negative impacts from silicon technological biases on real-time. Chapter 4 centers to the toolkit system. Built upon a third-party Application Program Interface (API) library, the customized toolkit is able to manipulate the logic elements from post P&R circuit (an unreadable binary version of the xdl one) converted to Xilinx xdl format. The mechanism and rationale of the proposed toolkit are carefully convoyed, covering the routing detection and repairing approaches. The developed toolkit aims to achieve very strictly identical routing networks for dual-rail logic both for separate and interleaved placement. This chapter particularly specifies the technical essentials to support the implementations in Xilinx devices and the flexibility to be expanded to other applications. Chapter 5 focuses on the implementation of the case studies for validating the security grades of the proposed logic style from the proposed toolkit. Comprehensive implementation techniques are discussed. (a) The placement impacts using the proposed toolkit are discussed. Different execution schemes, considering the global optimization in security and cost, are verified with experiments so as to find the optimized placement and repair schemes; (b) Security validations are realized with correlation, timing methods; (c) A systematic method is applied to a BCDL structured module to validate the routing impact over security metric; (d) The preliminary results using the self-adaptive heating system over process variation is given; (e) A practical implementation of the proposed toolkit to a large design is introduced. Chapter 6 includes the general summary of the complete work presented inside this thesis. Finally, a brief perspective for the future work is drawn which might expand the potential utilization of the thesis contributions to a wider range of implementation domains beyond cryptography on FPGAs.

Impact of maternally derived immunity on piglets’ immune response and protection against porcine circovirus type 2 (PCV2) after vaccination against PCV2 at different age

BACKGROUND: This study was aimed at evaluating the clinical protection, the level of Porcine circovirus type 2 (PCV2) viremia and the immune response (antibodies and IFN-γ secreting cells (SC)) in piglets derived from PCV2 vaccinated sows and themselves vaccinated against PCV2 at different age, namely at 4, 6 and 8 weeks. The cohort study has been carried out over three subsequent production cycles (replicates). At the start/enrolment, 46 gilts were considered at first mating, bled and vaccinated. At the first, second and third farrowing, dams were bled and re-vaccinated at the subsequent mating after weaning piglets. Overall 400 piglets at each farrowing (first, second and third) were randomly allocated in three different groups (100 piglets/group) based on the timing of vaccination (4, 6 or 8 weeks of age). A fourth group was kept non-vaccinated (controls). Piglets were vaccinated intramuscularly with one dose (2 mL) of a commercial PCV2a-based subunit vaccine (Porcilis® PCV). Twenty animals per group were bled at weaning and from vaccination to slaughter every 4 weeks for the detection of PCV2 viremia, humoral and cell-mediated immune responses. Clinical signs and individual treatments (morbidity), mortality, and body weight of all piglets were recorded. RESULTS: All vaccination schemes (4, 6 and 8 weeks of age) were able to induce an antibody response and IFN-γ SC. The highest clinical and virological protection sustained by immune reactivity was observed in pigs vaccinated at 6 weeks of age. Overall, repeated PCV2 vaccination in sows at mating and the subsequent higher levels of maternally derived antibodies did not significantly interfere with the induction of both humoral and cell-mediated immunity in their piglets after vaccination. CONCLUSIONS: The combination of vaccination in sows at mating and in piglets at 6 weeks of age was more effective for controlling PCV2 natural infection, than other vaccination schemas, thus sustaining that some interference of MDA with the induction of an efficient immune response could be considered. In conclusion, optimal vaccination strategy needs to balance the levels of passive immunity, the management practices and timing of infection.

Influence of microbial antigen formulation and delivery route on the immune response

Recent technological advances have resulted in the production of safe subunit and synthetic small peptide vaccines. Unfortunately, these vaccines are weakly or non-immunogenic in the absence of an immunological adjuvant (agents that can induce strong immunity to antigens). In addition, in order to prevent and/or control infection at the mucosal surface, stimulation of the mucosal immune system is essential. This may be achieved via the common mucosal immune system by exposure to antigen at a mucosal surface remote from the area of infection. Initial studies investigated the potential of multiple emulsions in effecting oral absorption and the subsequent immune responses to a lipopolysaccharide vaccine (LPS) after immunisation. Nasal delivery of LPS was carried out in parallel work using either aqueous solution or gel formulations. Tetanus toxoid vaccine in simple solution was delivered to guinea pigs as free antigen or entrapped in DSPC liposomes. In addition, adsorbed tetanus toxoid vaccine was delivered nasally free or in an aerosil gel formulation. This work was extended to investigate guinea pigs immunised by various mucosal routes with a herpes simplex virus subunit vaccine prepared from virus infected cells and delivered in gels, multiple emulsions and liposomes. Comparable serum antibody responses resulted but failed to produce enhanced protection against vaginal challenge when compared to subcutaneous immunisation with alhydrogel adjuvanted vaccine. Thus, immunisation of the mucosal surface by these methods may have been inadequate. These studies were extended in an attempt to protect against HSV genital challenge by construction of an attenuated Salmonella typhimurium HWSH aroA mutant expressing a cloned glycoprotein D-l gene fused to the Es-cherichia coli lac z promoter. Preliminary work on the colonisation of guinea pigs with S. typhimurium HWSH aroA mutants were carried out, with the aim of using the guinea pig HSV vaginal model to investigate protection.

Studies on the protective immune response to Plasmodium chabaudi in mice

Inbred strains of C5731 and NIH nice infected with the A/S strain of Plasmodium chaubaudi usually developed high parasitaemias but infections were rarely fatal in immunocompetent mice and in most mice the parasites could be eradicated within 53 days or less. The immune response of C57B1 and NTH mice to infection with the A/S strain of P. chabaudi was studied. The principle method used in this study for investigating the immune response of the mice was to examine the immunity conferred on syngeneic mice, either X-irradiated or non-irradiated, by transferring to them lymphoid cells or serum from immune or semi-immune donors. The lymphoid cell populations examined were unfractionated spleen cells, nylon wool column enriched subpopulations of thymus-derived lymphocytes (T cells) and the so-called bursa-derived lymphocytes (B cells), bone marrow cells and phagocytic cells. In the course of these experiments observations were made on the effect of X-irradiation on the subsequent growth and multiplication of the parasite. In addition, an in vitro assay for antibody-dependent cell mediated cytotoxicity was used to investigate the activity of splenic K cells during malaria infection. K cells are lymphoid cells which may include lymphocytes of an undefined category, but possess receptors for the Fc portion of antibody on their surface and have the ability to non-specifically lyse target cells coated in antibodies. a) The adoptive transfer of immunity to P.chabaudi with immune spleen cells. Spleen cells from mice which had previously been infected with P.chabaudi were able to confer some immunity on syngeneic mice which had been irradiated with 600 or 800 rads. The protection was detected as a shortened patent parasitaemia in immune cell recipients compared to controls. The early experiments indicated the value of using irradiated recipients rather than non-irradiated recipients. In irradiated mice, a) smaller numbers of immune cells were required to promote detectable immunity than in non-irradiated mice, b) there was an amplification of the difference in the duration of primary parasitaemias in recipients of immune cells and normal cells compared to non-irradiated mice and c) as the irradiated host is immunodepressed, the protective effect of donor cells can be examined with a reduced contribution by the hosts own immune system. An initial non-specific resistance to P.chabaudi infection was observed in irradiated mice, although the infection in most of these mice was subsequently more severe than in non-irradiated mice. The non-specific resistance could be reduced or abolished by injecting lymphoid cells into mice shortly after irradiation or by infecting irradiated mice more than 15 days after irradiation. Other workers suggest that following irradiation, the reticulo-endothelial system is stimulated at the time that the non-specific resistance to P.chabaudi was observed. b) the adoptive transfer of immunity in syngeneic mice with enriched subpopulations of splenic immune T cells, B. cells, bone marrow cells and phagocytes. Immunity to P.chabaudi could be adoptively transferred with enriched spleen subpopulations of immune T cells or immune B cells in mice which had been irradiated 600 or 300 rads. The protective effects of unfractionated immune cells was, however, usually better than that of either immune T or F cell subpopulations. In most experiments enriched immune T cell recipients were more likely to suffer relapsing patent parasitaemias than either enriched immune B cell recipients or unfractionated immune cell recipients. In one experiment a comparison was made of the course of P.chabaudi infection in mice which had been irradiated with either 600 rads or 300 rads and which received injections of different immune cells. A dose of 600 rads permits the immune system of mice to recover from the effects of irradiation, but a dose of 800 rads is lethal to mice unless lymphoid cells are injected after irradiation. It was found that in recipients of enriched immune T or B cells, which had been irradiated with 600 rads, the parasitaemia became subpatent before their equivalents irradiated with 800 rads, but that there was little difference in parasitaemias between recipients of unfractionated immune cells given 600 or 800 rads. Experiments in which enriched immune T cells and B cells were recombined and injected into syngeneic mice gave inconclusive results as to whether the immune subpopulations acted synergistically. Similar experiments in which immune subpopulations of lymphoid cells were recombined with normal subpopulations of lymphoid cells demonstrated that the latter cells did not enhance the protective effect of the former cells. Bone marrow cells from immune mice were able to confer some protection on syngeneic recipients, but were not as protective as enriched immune T cells or B cells. The results obtained in adoptive transfer experiments using phagocytic cells from the spleen of immune mice depended on the length of time spleen cells were incubated in petri-dishes at 37° C before harvesting the phagocytes. Using C57B1 mice, phagocytes harvested after 15 hours incubation were as protective as unfractionated immune cells in a cell transfer experiment, but phagocytes harvested after 16 hours incubation were not protective. Examination of NIH phagocytic cells after 2.5 hours incubation at 37°C, which were as protective as unfractionated immune spleen cells in a cell transfer experiment, demonstrated that the petri-dish adherent cells may have contained B lymphocytes. c) The passive transfer of immunity with serum from P.chabaudi infected mice. The passive transfer of serum from C57B1 mice which had been previously infected with P.chabaudi to normal or irradiated syngeneic mice demonstrated that the serum recipients were initially protected from infection. Irradiated mice, however, were delayed longer in the onset of parasitaemia compared to non-irradiated mice. Using NIH mice, sera were collected from unfractionated immune spleen cell recipients, enriched immune T cell recipients and normal spleen recipients on the 11th day of a P.chabaudi infection, just after peak parasitaemia, and also on the 14th day of infection. On day 14, all immune cells recipients and most of the enriched immune T cell recipients had become subpatent but all normal cell recipients still had patent infections. Sera collected from the different spleen cell recipients on the 11th day of infection and passively transferred to irradiated mice demonstrated little protection. Sera collected on the 14th day of infect ion, however, reflected the immune status of the donors in their protective properties in mice infected with P.chabaudi. The serum from unfractionated immune cell recipients was the most protective of the 3 sera when compared to normal NIH serum and the serum from enriched immune T cell recipients was slightly protective, but the serum from normal cell recipients produced an enhanced infection in mice infected with P.chabaudi. d) Antibody-dependent cell-mediated cytotoxicity of spleen cells in P.chabaudi infected mice. In a preliminary investigation of K cell activity in the spleens of P.chabaudi infected mice, it was found that there was an increased activity of K cells collected at around peak parasitaemia compared to the activity of K cells in non-infected mice, and that this increased activity could also be found in mice which had recently become subpatent. As the target cell for antibody-dependent cell-mediated cytotoxicity employed was the thick red blood cell, it is not known whether the K cell is involved in the killing of P.chabaudi parasites. These results suggest that both T cells and B cells and antibody may be important in the immune response to P.chabaudi in mice. Primed T cells may act as helper cells in the production of malarial antibodies, but, as enriched primed T cells could confer protection on immunodepressed mice, it is possible that a cell-mediated mechanism of immunity may also exist.

Partial protection against chlamydial reproductive tract infection by a recombinant major outer membrane protein/CpG/cholera toxin intranasal vaccine in the guinea pig Chlamydia cavaie model

Chlamydia trachomatis is a major cause of sexually transmitted diseases worldwide. There currently is no vaccine to protect against chlamydial infection of the female reproductive tract. Vaccine development has predominantly involved using the murine model, however infection of female guinea pigs with Chlamydia caviae more closely resembles chlamydial infection of the human female reproductive tract, and presents a better model to assess potential human chlamydial vaccines. We immunised female guinea pigs intranasally with recombinant major outer membrane protein (r-MOMP) combined with CpG-10109 and cholera toxin adjuvants. Both systemic and mucosal immune responses were elicited in immunised animals. MOMP-specific IgG and IgA were present in the vaginal mucosae, and high levels of MOMP-specific IgG were detected in the serum of immunised animals. Antibodies from the vaginal mucosae were also shown to be capable of neutralising C. caviae in vitro. Following immunisation, animals were challenged intravaginally with a live C. caviae infection of 102 inclusion forming units. We observed a decrease in duration of infection and a significant (p<0.025) reduction in infection load in r-MOMP immunised animals, compared to animals immunised with adjuvant only. Importantly, we also observed a marked reduction in upper reproductive tract (URT) pathology in r-MOMP immunised animals. Intranasal immunisation of female guinea pigs with r-MOMP was able to provide partial protection against C. caviae infection, not only by reducing chlamydial burden but also URT pathology. This data demonstrates the value of using the guinea pig model to evaluate potential chlamydial vaccines for protection against infection and disease pathology caused by C. trachomatis in the female reproductive tract.

Access to protection for 'Offshore Entry Persons' aka asylum seekers

In 2001, amendments to the Migration Act 1958 (Cth) made possible the offshore processing of protection claims. The same amendments also foreshadowed the processing of claims by ‘offshore entry persons’ in Australia according to non-statutory procedures. After disbanding offshore processing the then Rudd Labor Government commenced processing of protection claims by ‘offshore entry persons’ in Australia under the Refugee Status Assessment process (RSA). The RSA process sought to substitute well established legislative criteria for the grant of a protection visa, as interpreted by the courts, with administrative guidelines and decision-making immune from judicial review. This approach was rejected by the High Court in the cases M61 and M69. This article analyses these developments in light of Australia’s international protection obligations, as well as considering the practical obstacles that continue to confront offshore entry persons as they pursue judicial review of adverse refugee status determinations after the High Court’s decision.

An architecture for enhanced assurance in e-health systems

Notwithstanding the obvious potential advantages of information and communications technology (ICT) in the enhanced provision of healthcare services, there are some concerns associated with integration of and access to electronic health records. A security violation in health records, such as an unauthorised disclosure or unauthorised alteration of an individual's health information, can significantly undermine both healthcare providers' and consumers' confidence and trust in e-health systems. A crisis in confidence in any national level e-health system could seriously degrade the realisation of the system's potential benefits. In response to the privacy and security requirements for the protection of health information, this research project investigated national and international e-health development activities to identify the necessary requirements for the creation of a trusted health information system architecture consistent with legislative and regulatory requirements and relevant health informatics standards. The research examined the appropriateness and sustainability of the current approaches for the protection of health information. It then proposed an architecture to facilitate the viable and sustainable enforcement of privacy and security in health information systems under the project title "Open and Trusted Health Information Systems (OTHIS)". OTHIS addresses necessary security controls to protect sensitive health information when such data is at rest, during processing and in transit with three separate and achievable security function-based concepts and modules: a) Health Informatics Application Security (HIAS); b) Health Informatics Access Control (HIAC); and c) Health Informatics Network Security (HINS). The outcome of this research is a roadmap for a viable and sustainable architecture for providing robust protection and security of health information including elucidations of three achievable security control subsystem requirements within the proposed architecture. The successful completion of two proof-of-concept prototypes demonstrated the comprehensibility, feasibility and practicality of the HIAC and HIAS models for the development and assessment of trusted health systems. Meanwhile, the OTHIS architecture has provided guidance for technical and security design appropriate to the development and implementation of trusted health information systems whilst simultaneously offering guidance for ongoing research projects. The socio-economic implications of this research can be summarised in the fact that this research embraces the need for low cost security strategies against economic realities by using open-source technologies for overall test implementation. This allows the proposed architecture to be publicly accessible, providing a platform for interoperability to meet real-world application security demands. On the whole, the OTHIS architecture sets a high level of security standard for the establishment and maintenance of both current and future health information systems. This thereby increases healthcare providers‘ and consumers‘ trust in the adoption of electronic health records to realise the associated benefits.

HIV-1 sub-type C chimaeric VLPs boost cellular immune responses in mice

Several approaches have been explored to eradicate HIV; however, a multigene vaccine appears to be the best option, given their proven potential to elicit broad, effective responses in animal models. The Pr55 Gagprotein is an excellent vaccine candidate in its own right, given that it can assemble into large, enveloped, virus-like particles (VLPs) which are highly immunogenic, and can moreover be used as a scaffold for the presentation of other large non-structural HIV antigens. In this study, we evaluated the potential of two novel chimaeric HIV-1 Pr55 Gag-based VLP constructs - C-terminal fusions with reverse transcriptase and a Tat::Nef fusion protein, designated GagRT and GagTN respectively - to enhance a cellular response in mice when used as boost components in two types of heterologous prime-boost vaccine strategies. A vaccine regimen consisting of a DNA prime and chimaeric HIV-1 VLP boosts in mice induced strong, broad cellular immune responses at an optimum dose of 100 ng VLPs. The enhanced cellular responses induced by the DNA prime-VLP boost were two- to three-fold greater than two DNA vaccinations. Moreover, a mixture of GagRT and GagTN VLPs also boosted antigen-specific CD8+ and CD4+ T-cell responses, while VLP vaccinations only induced predominantly robust Gag CD4+ T-cell responses. The results demonstrate the promising potential of these chimaeric VLPs as vaccine candidates against HIV-1. © 2010 Pillay et al; licensee BioMed Central Ltd.