An attack signature model to computer security intrusion detection

Internal and external computer network attacks or security threats occur according to standards and follow a set of subsequent steps, allowing to establish profiles or patterns. This well-known behavior is the basis of signature analysis intrusion detection systems. This work presents a new attack signature model to be applied on network-based intrusion detection systems engines. The AISF (ACME! Intrusion Signature Format) model is built upon XML technology and works on intrusion signatures handling and analysis, from storage to manipulation. Using this new model, the process of storing and analyzing information about intrusion signatures for further use by an IDS become a less difficult and standardized process.

Fluorescence spectroscopy for tongue carcinoma detection: Study in an animal model

Fluorescence diagnosis of malignant lesions has been showed as an attractive optical technique due especially to its real-time response and a more objective and quantitative evaluation. Even though the oral cavity allows a direct examination many lesions are diagnosed when it is already in advanced stage, compromising the patient prognosis. In this study, the fluorescence spectroscopy was used to the detection of chemically induced carcinoma at the lateral border of the tongue in a hamster model. Two excitations wavelengths in visible region were applied: 442 and 532 nm. All the spectra results were analyzed comparing with the histopathological diagnosis. The better results were achieved with the 442 nm laser excitation. The spectra from carcinoma showed new emission bands and these were used to determined different ratios for a quantitative analysis. Using the 625-645 nm fluorescence range under 442 nm excitation (A3 coefficient) the percentage of false negative was of 9.1%, however the false positive percentage was of 18.5%. The 532 nm excitation provided a better normal tissue detection compared to 442 nm excitation. The ideal clinical condition is probably the use of multiple wavelengths excitation for a broader tissue fluorescence investigation.

Statistical model applied to NetFlow for network intrusion detection

The computers and network services became presence guaranteed in several places. These characteristics resulted in the growth of illicit events and therefore the computers and networks security has become an essential point in any computing environment. Many methodologies were created to identify these events; however, with increasing of users and services on the Internet, many difficulties are found in trying to monitor a large network environment. This paper proposes a methodology for events detection in large-scale networks. The proposal approaches the anomaly detection using the NetFlow protocol, statistical methods and monitoring the environment in a best time for the application. © 2010 Springer-Verlag Berlin Heidelberg.

Early detection of doxorubicin myocardial injury by ultrasonic tissue characterization in an experimental animal model

In the clinical setting, the early detection of myocardial injury induced by doxorubicin (DXR) is still considered a challenge. To assess whether ultrasonic tissue characterization (UTC) can identify early DXR-related myocardial lesions and their correlation with collagen myocardial percentages, we studied 60 rats at basal status and prospectively after 2mg/Kg/week DXR endovenous infusion. Echocardiographic examinations were conducted at baseline and at 8,10,12,14 and 16 mg/Kg DXR cumulative dose. The left ventricle ejection fraction (LVEF), shortening fraction (SF), and the UTC indices: corrected coefficient of integrated backscatter (IBS) (tissue IBS intensity/phantom IBS intensity) (CC-IBS) and the cyclic variation magnitude of this intensity curve (MCV) were measured. The variation of each parameter of study through DXR dose was expressed by the average and standard error at specific DXR dosages and those at baseline. The collagen percent (%) was calculated in six control group animals and 24 DXR group animals. CC-IBS increased (1.29 +/- 0.27 x 1.1 +/- 0.26-basal; p=0.005) and MCV decreased (9.1 +/- 2.8 x 11.02 +/- 2.6-basal; p=0.006) from 8 mg/Kg to 16mg/Kg DXR. LVEF presented only a slight but significant decrease (80.4 +/- 6.9% x 85.3 +/- 6.9%-basal, p=0.005) from 8 mg/Kg to 16 mg/Kg DXR. CC-IBS was 72.2% sensitive and 83.3% specific to detect collagen deposition of 4.24%(AUC=0.76). LVEF was not accurate to detect initial collagen deposition (AUC=0.54). In conclusion: UTC was able to early identify the DXR myocardial lesion when compared to LVEF, showing good accuracy to detect the initial collagen deposition in this experimental animal model.

Nonlinear three-dimensional noise filter with low-dose CT angiography: effect on the detection of small high-contrast objects in a phantom model

To study the effect of a nonlinear noise filter on the detection of simulated endoleaks in a phantom with 80- and 100-kVp multidetector computed tomographic (CT) angiography.

Early detection of subclinical organ dysfunction by microdialysis of the rectus abdominis muscle in a porcine model of critical intra-abdominal hypertension

The aim of this study was to evaluate microdialysis of the rectus abdominis muscle (RAM) for early detection of subclinical organ dysfunction in a porcine model of critical intra-abdominal hypertension (IAH). Microdialysis catheters for analyses of lactate, pyruvate, and glycerol levels were placed in cervical muscles (control), gastric and jejunal wall, liver, kidney, and RAM of 30 anesthetized mechanically ventilated pigs. Catheters for venous lactate and interleukin 6 samples were placed in the jugular, portal, and femoral vein. Intra-abdominal pressure (IAP) was increased to 20 mmHg (IAH20 group, n = 10) and 30 mmHg (IAH30, n = 10) for 6 h by controlled CO2 insufflation, whereas sham animals (n = 10) exhibited a physiological IAP. In contrast to 20 mmHg, an IAH of 30 mmHg induced pathophysiological alterations consistent with an abdominal compartment syndrome. Microdialysis showed significant increase in the lactate/pyruvate ratio in the RAM of the IAH20 group after 6 h. In the IAH30 group, the strongest increase in lactate/pyruvate ratio was detected in the RAM and less pronounced in the liver and gastric wall. Glycerol increased in the RAM only. After 6 h, there was a significant increase in venous interleukin 6 of the IAH30 group compared with baseline. Venous lactate was increased compared with baseline and shams in the femoral vein of the IAH30 group only. Intra-abdominal pressure-induced ischemic metabolic changes are detected more rapidly and pronounced by microdialysis of the RAM when compared with intra-abdominal organs. Thus, the RAM represents an important and easily accessible site for the early detection of subclinical organ dysfunction during critical IAH.

Early detection of action potential duration alternans using an autoregressive model

Annual Meeting of the Biophysical Society, San Diego, USA

Using an adaptive autoregressive model for the early detection of action potential duration alternans

Cardiostim 2012, Nice, France

Dynamic contrast-enhanced and diffusion-weighted MRI for early detection of tumoral changes in single-dose and fractionated radiotherapy: evaluation in a rat rhabdomyosarcoma model

We aimed to examine different intratumoral changes after single-dose and fractionated radiotherapy, using diffusion-weighted (DW) and dynamic contrast-enhanced (DCE) MRI in a rat rhabdomyosarcoma model. Four WAG/Rij rats with rhabdomyosarcomas in the flanks received single-dose radiotherapy of 8 Gy, and four others underwent fractionated radiotherapy (five times 3 Gy). In rats receiving single-dose radiotherapy, a significant perfusion decrease was found in the first 2 days post-treatment, with slow recuperation afterwards. No substantial diffusion changes could be seen; tumor growth delay was 12 days. The rats undergoing fractionated radiotherapy showed a similar perfusion decrease early after the treatment. However, a very strong increase in apparent diffusion coefficient occurred in the first 10 days; growth delay was 18 days. DW-MRI and DCE-MRI can be used to show early tumoral changes induced by radiotherapy. Single-dose and fractionated radiotherapy induce an immediate perfusion effect, while the latter induces more intratumoral necrosis.

Detection and sequence analysis of a nickel-induced mutation in a retroviral model system

We have developed a novel way to assess the mutagenicity of environmentally important metal carcinogens, such as nickel, by creating a positive selection system based upon the conditional expression of a retroviral transforming gene. The target gene is the v-mos gene in MuSVts110, a murine retrovirus possessing a growth temperature dependent defect in expression of the transforming gene due to viral RNA splicing. In normal rat kidney cells infected with MuSVts110 (6m2 cells), splicing of the MuSVts110 RNA to form the mRNA from which the transforming protein, p85$\sp{\rm gag-mos}$, is translated is growth-temperature dependent, occurring at 33 C and below but not at 39 C and above. This splicing "defect" is mediated by cis-acting viral sequences. Nickel chloride treatment of 6m2 cells followed by growth at 39 C, allowed the selection of "revertant" cells which constitutively express p85$\sp{\rm gag-mos}$ due to stable changes in the viral RNA splicing phenotype, suggesting that nickel, a carcinogen whose mutagenicity has not been well established, could induce mutations in mammalian genes. We also show by direct sequencing of PCR-amplified integrated MuSVts110 DNA from a 6m2 nickel-revertant cell line that the nickel-induced mutation affecting the splicing phenotype is a cis-acting 70-base duplication of a region of the viral DNA surrounding the 3$\sp\prime$ splice site. These findings provide the first example of the molecular basis for a nickel-induced DNA lesion and establish the mutagenicity of this potent carcinogen. ^

Landmark Detection for Fusion of Fundus and MRI Towards a Patient-Specific Multi-Modal Eye Model

Ophthalmologists typically acquire different image modalities to diagnose eye pathologies. They comprise e.g., Fundus photography, Optical Coherence Tomography (OCT), Computed Tomography (CT) and Magnetic Resonance Imaging (MRI). Yet, these images are often complementary and do express the same pathologies in a different way. Some pathologies are only visible in a particular modality. Thus, it is beneficial for the ophthalmologist to have these modalities fused into a single patient-specific model. The presented article’s goal is a fusion of Fundus photography with segmented MRI volumes. This adds information to MRI which was not visible before like vessels and the macula. This article’s contributions include automatic detection of the optic disc, the fovea, the optic axis and an automatic segmentation of the vitreous humor of the eye.

An ecological approach to anomaly detection: the EIA Model.

The presented work proposes a new approach for anomaly detection. This approach is based on changes in a population of evolving agents under stress. If conditions are appropriate, changes in the population (modeled by the bioindicators) are representative of the alterations to the environment. This approach, based on an ecological view, improves functionally traditional approaches to the detection of anomalies. To verify this assertion, experiments based on Network Intrussion Detection Systems are presented. The results are compared with the behaviour of other bioinspired approaches and machine learning techniques.

Multi-resolution model-based traffic sign detection and tracking

In this paper we propose an innovative approach to tackle the problem of traffic sign detection using a computer vision algorithm and taking into account real-time operation constraints, trying to establish intelligent strategies to simplify as much as possible the algorithm complexity and to speed up the process. Firstly, a set of candidates is generated according to a color segmentation stage, followed by a region analysis strategy, where spatial characteristic of previously detected objects are taken into account. Finally, temporal coherence is introduced by means of a tracking scheme, performed using a Kalman filter for each potential candidate. Taking into consideration time constraints, efficiency is achieved two-fold: on the one side, a multi-resolution strategy is adopted for segmentation, where global operation will be applied only to low-resolution images, increasing the resolution to the maximum only when a potential road sign is being tracked. On the other side, we take advantage of the expected spacing between traffic signs. Namely, the tracking of objects of interest allows to generate inhibition areas, which are those ones where no new traffic signs are expected to appear due to the existence of a TS in the neighborhood. The proposed solution has been tested with real sequences in both urban areas and highways, and proved to achieve higher computational efficiency, especially as a result of the multi-resolution approach.

Debonding detection of FRP strengthened concrete beams by using impedance measurements and an ensemble PSO adaptive spectral model

An impedance-based midspan debonding identification method for RC beams strengthened with FRP strips is presented in this paper using piezoelectric ceramic (PZT) sensor?actuators. To reach this purpose, firstly, a two-dimensional electromechanical impedance model is proposed to predict the electrical admittance of the PZT transducer bonded to the FRP strips of an RC beam. Considering the impedance is measured in high frequencies, a spectral element model of the bonded-PZT?FRP strengthened beam is developed. This model, in conjunction with experimental measurements of PZT transducers, is used to present an updating methodology to quantitatively detect interfacial debonding of these kinds of structures. To improve the performance and accuracy of the detection algorithm in a challenging problem such as ours, the structural health monitoring approach is solved with an ensemble process based on particle of swarm. An adaptive mesh scheme has also been developed to increase the reliability in locating the area in which debonding initiates. Predictions carried out with experimental results have showed the effectiveness and potential of the proposed method to detect prematurely at its earliest stages a critical failure mode such as that due to midspan debonding of the FRP strip.