An Alternative Approach To Computer System Security Monitoring And Enhancement Through System Call Sequence Analysis

Modern computer systems are plagued with stability and security problems: applications lose data, web servers are hacked, and systems crash under heavy load. Many of these problems or anomalies arise from rare program behavior caused by attacks or errors. A substantial percentage of the web-based attacks are due to buffer overflows. Many methods have been devised to detect and prevent anomalous situations that arise from buffer overflows. The current state-of-art of anomaly detection systems is relatively primitive and mainly depend on static code checking to take care of buffer overflow attacks. For protection, Stack Guards and I-leap Guards are also used in wide varieties.This dissertation proposes an anomaly detection system, based on frequencies of system calls in the system call trace. System call traces represented as frequency sequences are profiled using sequence sets. A sequence set is identified by the starting sequence and frequencies of specific system calls. The deviations of the current input sequence from the corresponding normal profile in the frequency pattern of system calls is computed and expressed as an anomaly score. A simple Bayesian model is used for an accurate detection.Experimental results are reported which show that frequency of system calls represented using sequence sets, captures the normal behavior of programs under normal conditions of usage. This captured behavior allows the system to detect anomalies with a low rate of false positives. Data are presented which show that Bayesian Network on frequency variations responds effectively to induced buffer overflows. It can also help administrators to detect deviations in program flow introduced due to errors.

AURA : a hybrid approach to identify framework evolution

Les cadriciels et les bibliothèques sont indispensables aux systèmes logiciels d'aujourd'hui. Quand ils évoluent, il est souvent fastidieux et coûteux pour les développeurs de faire la mise à jour de leur code. Par conséquent, des approches ont été proposées pour aider les développeurs à migrer leur code. Généralement, ces approches ne peuvent identifier automatiquement les règles de modification une-remplacée-par-plusieurs méthodes et plusieurs-remplacées-par-une méthode. De plus, elles font souvent un compromis entre rappel et précision dans leur résultats en utilisant un ou plusieurs seuils expérimentaux. Nous présentons AURA (AUtomatic change Rule Assistant), une nouvelle approche hybride qui combine call dependency analysis et text similarity analysis pour surmonter ces limitations. Nous avons implanté AURA en Java et comparé ses résultats sur cinq cadriciels avec trois approches précédentes par Dagenais et Robillard, M. Kim et al., et Schäfer et al. Les résultats de cette comparaison montrent que, en moyenne, le rappel de AURA est 53,07% plus que celui des autre approches avec une précision similaire (0,10% en moins).

Bioacoustic analysis of advertisement call in Hyla nana and Hyla sanborni (Anura, Hylidae) in Botucatu, São Paulo, Brazil

As características relacionadas à comunicação sonora em duas espécies aparentadas, Hyla nana e H. sanborni, pertencentes ao grupo nana de espécies, foram estudadas, entre agosto de 1997 e junho de 1999, em duas poças permanentes de grande porte em área aberta na região de Botucatu, Estado de São Paulo. Foram obtidas gravações de 131 exemplares, 71 indivíduos de H. nana e 58 de H. sanborni, durante início de atividade de vocalização e atividade de vocalização em coro. Houve diferença nos ritmos de emissão de notas dos cantos entre o início das atividades e durante os coros. O canto de anúncio das espécies consiste na emissão de séries consecutivas de notas simples, pulsadas, com taxa de repetição rápida. Hyla nana e H. sanborni apresentam dois tipos de notas em seu canto de anúncio, denominados aqui como tipos A e B. Notas do tipo A, introdutórias, apresentam maior duração e número de pulsos, e suas emissões foram mais freqüentes durante o início das atividades de vocalização. As notas introdutórias são as primeiras da série emitida em atividade de coro. As notas do tipo B, secundárias, são curtas e com menor número de pulsos, sendo emitidas durante as vocalizações em coro. Os dois tipos de notas encontrados diferem significativamente em sua estrutura temporal. As duas espécies apresentaram segregação acústica tanto na estrutura espectral como na temporal de seus cantos de anúncio.

Example Based Image Analysis and Synthesis

Image analysis and graphics synthesis can be achieved with learning techniques using directly image examples without physically-based, 3D models. In our technique: -- the mapping from novel images to a vector of "pose" and "expression" parameters can be learned from a small set of example images using a function approximation technique that we call an analysis network; -- the inverse mapping from input "pose" and "expression" parameters to output images can be synthesized from a small set of example images and used to produce new images using a similar synthesis network. The techniques described here have several applications in computer graphics, special effects, interactive multimedia and very low bandwidth teleconferencing.

eMelanoBase: An online locus-specific variant database for familial melanoma

A proportion of melanoma,prone individuals in both familial and non,familial contexts has been shown to carry inactivating mutations in either CDKN2A or, rarely, CDK4. CDKN2A is a complex locus that encodes two unrelated proteins from alternately spliced transcripts that are read in different frames. The alpha transcript (exons 1a, 2, and 3) produces the p16INK4A cyclin-dependent kinase inhibitor, while the beta transcript (exons 1beta and 2) is translated as p14ARF, a stabilizing factor of p53 levels through binding to MDM2. Mutations in exon 2 can impair both polypeptides and insertions and deletions in exons 1alpha, 1beta, and 2, which can theoretically generate p16INK4A,p14ARF fusion proteins. No online database currently takes into account all the consequences of these genotypes, a situation compounded by some problematic previous annotations of CDKN2A related sequences and descriptions of their mutations. As an initiative of the international Melanoma Genetics Consortium, we have therefore established a database of germline variants observed in all loci implicated in familial melanoma susceptibility. Such a comprehensive, publicly accessible database is an essential foundation for research on melanoma susceptibility and its clinical application. Our database serves two types of data as defined by HUGO. The core dataset includes the nucleotide variants on the genomic and transcript levels, amino acid variants, and citation. The ancillary dataset includes keyword description of events at the transcription and translation levels and epidemiological data. The application that handles users' queries was designed in the model,view. controller architecture and was implemented in Java. The object-relational database schema was deduced using functional dependency analysis. We hereby present our first functional prototype of eMelanoBase. The service is accessible via the URL www.wmi.usyd.e, du.au:8080/melanoma.html.

Accounting and the “Doctor-Manager Relationship”

The adoption of the “new public management” in the hospital sector brought about greater presence and power to professional managers in hospitals, thus increasing the risk of conflict in the doctor-manager relationship. Aiming to enrich the discussion on the factors that could be the bases for this conflict and considering the role of accounting, the study presented here corresponds, basically, to what we call “content analysis” of qualitative studies. The results demonstrate that the Portuguese doctors as the sample studied accept, in essence, the principles of enterprise management and recognize the use of accounting information in the scope of their functions as long as they are called to participate as legitimate actors, and authorities respect their desires to preserve a practice which they consider of quality.

Liiketoimintaprosessien kehittämismenetelmän suunnittelu ja testaus

Tämändiplomityön tavoitteena oli tutkia, miten liiketoimintaprosessissa esiintyviä toimijoiden välisiä riippuvuussuhteita voidaan kehittää, käyttäen juuri tähän tarkoitukseen räätälöityä kehittämismenetelmää ja mitä osia tämäntyyppisen kehittämismenetelmän tulisi sisältää. Työssä ideoitu menetelmä on tarkoitettu jo käytössä olevien liiketoimintaprosessien kehittämiseen. Työ aloitettiin tutkimalla teoriataustaa liiketoimintaprosesseistaja olemassa olevista organisaatioiden sekä liiketoimintaprosessien kehittämismenetelmistä. Kehittämismenetelmän sisällön määrittelyssä hyödynnettiin myös työn tilaajan toimesta aikaisemmin tehtyä menetelmien ja mallien kehittämistyötä. Menetelmän sisältö rajattiin kolmeen vaiheeseen, joita ovat kehittämisprojektin suunnitteluvaihe, prosessin ja toimijoiden välisten yhteistyösuhteiden analysointivaihe sekä kehittämisratkaisujen suunnittelu- ja toteutusvaihe. Menetelmää testattiin kahdessa julkisen sektorin palveluprosessissa, joista saatujen kokemuksien perusteella menetelmää kehitettiin edelleen lopulliseen muotoonsa. Työn varsinaisena tuloksena syntyi sekä käytännössä testattu kehittämismenetelmä että useita potentiaalisia jatkokehityskohteita, jotka koskevat menetelmän yksittäisiä vaiheita. Lisäksi kehittämistyön yhteydessä syntyi myös laajempia kehittämisideoita, jotka koskevat prosessi- ja verkostomallien yhdistämistä, prosessijohtamista ja kehittämishankkeiden koordinointia.

Analyse de dépendance des programmes à objet en utilisant les modèles probabilistes des entrées

La tâche de maintenance ainsi que la compréhension des programmes orientés objet (OO) deviennent de plus en plus coûteuses. L’analyse des liens de dépendance peut être une solution pour faciliter ces tâches d’ingénierie. Cependant, analyser les liens de dépendance est une tâche à la fois importante et difficile. Nous proposons une approche pour l'étude des liens de dépendance internes pour des programmes OO, dans un cadre probabiliste, où les entrées du programme peuvent être modélisées comme un vecteur aléatoire, ou comme une chaîne de Markov. Dans ce cadre, les métriques de couplage deviennent des variables aléatoires dont les distributions de probabilité peuvent être étudiées en utilisant les techniques de simulation Monte-Carlo. Les distributions obtenues constituent un point d’entrée pour comprendre les liens de dépendance internes entre les éléments du programme, ainsi que leur comportement général. Ce travail est valable dans le cas où les valeurs prises par la métrique dépendent des entrées du programme et que ces entrées ne sont pas fixées à priori. Nous illustrons notre approche par deux études de cas.

A teoria da dependência no pensamento socioeconômico de Fernando Henrique Cardoso

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Improving face recognition with multispectral fusion and support vector machines

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Roof region dependent wind potential assessment with different RANS turbulence models.

The analysis of the wind flow around buildings has a great interest from the point of view of the wind energy assessment, pollutant dispersion control, natural ventilation and pedestrians wind comfort and safety. Since LES turbulence models are computationally time consuming when applied to real geometries, RANS models are still widely used. However, RANS models are very sensitive to the chosen turbulence parametrisation and the results can vary according to the application. In this investigation, the simulation of the wind flow around an isolated building is performed using various types of RANS turbulence models in the open source code OpenFOAM, and the results are compared with benchmark experimental data. In order to confirm the numerical accuracy of the simulations, a grid dependency analysis is performed and the convergence index and rate are calculated. Hit rates are calculated for all the cases and the models that successfully pass a validation criterion are analysed at different regions of the building roof, and the most accurate RANS models for the modelling of the flow at each region are identified. The characteristics of the wind flow at each region are also analysed from the point of view of the wind energy generation, and the most adequate wind turbine model for the wind energy exploitation at each region of the building roof is chosen.

Asymmetric demand information in uniform and discriminatory call auctions: an experimental analysis motivated by electricity markets

We study the outcomes of experimental multi-unit uniform and discriminatory auctions with demand uncertainty. Our study is motivated by the ongoing debate about market design in the electricity industry. Our main aim is to compare the effect of asymmetric demand-information between sellers on the performance of the two auction institutions. In our baseline conditions all sellers have the same information, whereas in our treatment conditions some sellers have better information than others. In both information conditions we find that average transaction prices and price volatility are not significantly different under the two auction institutions. However, when there is asymmetric information among sellers the discriminatory auction is significantly less efficient. These results are not in line with the typical arguments made in favor of discriminatory pricing in electricity industries; namely, lower consumer prices and less price volatility. Moreover, our results provide some indication that discriminatory auctions reduce technical efficiency relative to uniform auctions.

Genome-wide analysis of SREBP1 activity around the clock reveals its combined dependency on nutrient and circadian signals.

In mammals, the circadian clock allows them to anticipate and adapt physiology around the 24 hours. Conversely, metabolism and food consumption regulate the internal clock, pointing the existence of an intricate relationship between nutrient state and circadian homeostasis that is far from being understood. The Sterol Regulatory Element Binding Protein 1 (SREBP1) is a key regulator of lipid homeostasis. Hepatic SREBP1 function is influenced by the nutrient-response cycle, but also by the circadian machinery. To systematically understand how the interplay of circadian clock and nutrient-driven rhythm regulates SREBP1 activity, we evaluated the genome-wide binding of SREBP1 to its targets throughout the day in C57BL/6 mice. The recruitment of SREBP1 to the DNA showed a highly circadian behaviour, with a maximum during the fed status. However, the temporal expression of SREBP1 targets was not always synchronized with its binding pattern. In particular, different expression phases were observed for SREBP1 target genes depending on their function, suggesting the involvement of other transcription factors in their regulation. Binding sites for Hepatocyte Nuclear Factor 4 (HNF4) were specifically enriched in the close proximity of SREBP1 peaks of genes, whose expression was shifted by about 8 hours with respect to SREBP1 binding. Thus, the cross-talk between hepatic HNF4 and SREBP1 may underlie the expression timing of this subgroup of SREBP1 targets. Interestingly, the proper temporal expression profile of these genes was dramatically changed in Bmal1-/- mice upon time-restricted feeding, for which a rhythmic, but slightly delayed, binding of SREBP1 was maintained. Collectively, our results show that besides the nutrient-driven regulation of SREBP1 nuclear translocation, a second layer of modulation of SREBP1 transcriptional activity, strongly dependent from the circadian clock, exists. This system allows us to fine tune the expression timing of SREBP1 target genes, thus helping to temporally separate the different physiological processes in which these genes are involved.

Analysis of factors influencing telephone call response rate in an epidemiological study.

Descriptive epidemiology research involves collecting data from large numbers of subjects. Obtaining these data requires approaches designed to achieve maximum participation or response rates among respondents possessing the desired information. We analyze participation and response rates in a population-based epidemiological study though a telephone survey and identify factors implicated in consenting to participate. Rates found exceeded those reported in the literature and they were higher for afternoon calls than for morning calls. Women and subjects older than 40 years were the most likely to answer the telephone. The study identified geographical differences, with higher RRs in districts in southern Spain that are not considered urbanized. This information may be helpful for designing more efficient community epidemiology projects.