Malware detection using assembly and API call sequences

One of the major problems concerning information assurance is malicious code. To evade detection, malware has also been encrypted or obfuscated to produce variants that continue to plague properly defended and patched networks with zero day exploits. With malware and malware authors using obfuscation techniques to generate automated polymorphic and metamorphic versions, anti-virus software must always keep up with their samples and create a signature that can recognize the new variants. Creating a signature for each variant in a timely fashion is a problem that anti-virus companies face all the time. In this paper we present detection algorithms that can help the anti-virus community to ensure a variant of a known malware can still be detected without the need of creating a signature; a similarity analysis (based on specific quantitative measures) is performed to produce a matrix of similarity scores that can be utilized to determine the likelihood that a piece of code under inspection contains a particular malware. Two general malware detection methods presented in this paper are: Static Analyzer for Vicious Executables (SAVE) and Malware Examiner using Disassembled Code (MEDiC). MEDiC uses assembly calls for analysis and SAVE uses API calls (Static API call sequence and Static API call set) for analysis. We show where Assembly can be superior to API calls in that it allows a more detailed comparison of executables. API calls, on the other hand, can be superior to Assembly for its speed and its smaller signature. Our two proposed techniques are implemented in SAVE) and MEDiC. We present experimental results that indicate that both of our proposed techniques can provide a better detection performance against obfuscated malware. We also found a few false positives, such as those programs that use network functions (e.g. PuTTY) and encrypted programs (no API calls or assembly functions are found in the source code) when the thresholds are set 50% similarity measure. However, these false positives can be minimized, for example by changing the threshold value to 70% that determines whether a program falls in the malicious category or not.     

Electrospinning pure protein solutions in core–shell fibers

Electrospinning of protein‐loaded fibers faces many challenges, e.g. burst release owing to segregation of the protein on the fiber surface, loss of activity due to electrospinning conditions, limitation of loading capacity etc. Core–shell electrospinning provides an effective way to electrospin fibers wherein the core can be loaded with bioactive molecules in friendly conditions of a compatible polymer solution, thereby protecting the molecules from the electrostatic field and organic solvent of shell solutions. The shell polymer, after the electrospinning, acts as a barrier to control the release of the loaded molecules. However, the limitation of loading capacity still remains due the prerequisite of using an additional polymer as additive to achieve the minimum viscosity of the core solution required for viscous drag by the shell solution being drawn by the electrostatic force. The work reported here aims to alleviate the need of a polymer additive by using aqueous protein solutions of very high concentration. High concentrations of protein solutions were successfully electrospun as the core of the protein–poly(lactide‐co‐glycolic acid) core–shell fibers. A partitioning effect was seen in the controlled release of hydrophilic proteins as they were retained in the aqueous core for longer times. Using lysozyme as a model protein, it was shown that the activity is significantly retained after electrospinning, compared with electrospinning in monolithic fibers. Moreover, the lysozyme activity was also comparable with the lysozyme released from core–shell fibers spun using poly(vinyl acetate) as additive in the core. Copyright © 2012 Society of Chemical Industry     

Importance of viscosity parameters in electrospinning: Of monolithic and core–shell fibers

Electrospun polymeric fibers are attractive candidates in the development of scaffolds for the tissue engineering and for providing new systems for delivery of bioactive molecules. Co-axial fibers have emerged as an efficient tool to protect the core material from the adverse conditions of electrospinning process, to spin difficult-to-process fluids and to generate fibers with much more control of the delivery of encapsulated bioactive molecules. Currently, there is very little reported work on the optimization of the processing parameters of electrospinning, especially core–shell electrospinning. This study extends the understanding of the role of solution viscosity as a vital material parameter for electrospinning of fibers. The spinning solutions were characterized for viscosity and optical imaging of the compound Taylor cone for spinnability, and the fibers were imaged by Scanning Electron Microscopy (SEM). Our experimental results, using PLGA as the model polymer, confirm that the solution concentration be above the entanglement concentration (C_e) to obtain uniform beadless monolithic fibers; for core–shell fibers, the shell solution must fulfill the above criterion for spinnability and, further, the ratio of the viscosities of core and shell solutions (η_core/η_shell) has to be greater than a threshold value to get a stable compound Taylor cone and therefore to obtain uniform beadless core–shell fibers. Addition of surfactant led to reduction of the threshold η_core/η_shell (from 0.55 to 0.18) for the PVA–PLGA system.     

Plasma characterization of dry ��-EDM

An attempt was made to characterize the dry microelectric discharge machining (??-EDM) plasma systematically by using optical emission spectroscopy. In order to characterize the plasma and its parameters such as plasma temperature, electron density, Debye length, and gamma parameter, the optical spectra were recorded for different energies and with different diameters of tool electrode. From the recorded spectra, using line pair method and modified Saha equation, plasma temperature and electron density, respectively were calculated. From these two, Debye length and plasma parameter were also calculated. These studies indicate that the plasma produced in dry ??-EDM is ideal. In addition to this, we found that the dry ??-EDM region is below the conventional EDM region in log electron density and log temperature plot. Morphological analysis was carried out on crater produced by different energies on the workpiece using a scanning electron microscope. The crater shape may dependent on the geometry of the tool tip, number of discharges, and energy of discharge.     

Formation of a nano-pattering NiTi surface with Ni-depleted superficial layer to promote corrosion resistance and endothelial cell-material interaction

Zirconium ion implantation was performed on NiTi alloy to suppress Ni ion release as well as to improve corrosion resistance and cell-material interaction. A thicker Ni-depleted nano-scale composite layer formed after Zr implantation and the corrosion resistance was evidently increased in aspects of increased E _br ? E _corr (difference between corrosion potential and breakdown potential) and decreased corrosion current density. 2.5/2 NiTi sample possessed the highest E _br ? E _corr, more than 500 mV higher than that of untreated NiTi, suggesting a significant improvement on pitting corrosion resistance. Ni ion release rate of Zr–NiTi was decreased due to the depletion of Ni in the superficial surface layer and the diffusion resistance effect of the ZrO₂/TiO₂ nano-film. Increased surface wettability induced by increased surface roughness was obtained after Zr implantation. Zr–NiTi samples were found to be favorable to endothelial cells (ECs) proliferation, especially after 5 and 7 days culture.     

Block Copolymer ‘Stealth’ Nanoparticles for Chemotherapy: Interactions with Blood Cells In Vitro

Passive targeting is one of the approaches to reduce the side effects in intravenous chemotherapeutic administration. This is usually achieved by using so‐called ‘stealth’ particles as carriers, such that the particles can avoid uptake by cells of the reticulo endothelial system (RES) and thus enhance their blood lifetime. To date, there have been no studies of the contribution of various factors to the uptake of particles by the RES, although there is general agreement that a hydrophilic particle surface is helpful. In this study, data is presented on the effect of particle size and surface chemistry on the uptake by monocyte cell lines, as well as by cells in whole blood. Block copolymers of hydrophilic poly(ethylene glycol) (PEG) and the hydrophobic poly(L ‐lactide) (PLA) have been used to study surface concentration and conformation effects. It is found that diblock copolymers, in general, show the best stealth characteristics, although triblocks with PEG segment lengths above a certain value are also comparable. It is also found that the uptake goes through a minimum with respect to particle size. For the first time, a method is presented to evaluate the relative uptake efficiency of various types of blood cells, using flow cytometry. The observations are related to structural features found on the polymers.     

Evaluating and Modeling the Mechanical Properties of the Prepared PLGA/nano-BCP Composite Scaffolds for Bone Tissue Engineering

In this paper, preparation of nano-biphasic calcium phosphate (nBCP), mechanical behavior and load-bearing of poly (lactide-co-glycolide) (PLGA) and PLGA/nBCP are presented. The nBCP with composition of 63/37 (w/w) HA/β-TCP (hydroxyapatite/β-tricalcium phosphate) was produced by heating of bovine bone at 700℃. Composite scaffolds were made by using PLGA matrix and 10-50 wt% nBCP powders as reinforcement material. All scaffolds were prepared by thermally induced solid-liquid phase separation (TIPS) at -60℃ under 4 Pa (0.04 mbar) vacuum. The results of elastic modulus testing were adjusted with Ishai-Cohen and Narkis models for rigid polymeric matrix and compared to each other. PLGA/nBCP scaffolds with 30 wt% nBCP showed the highest value of yield strength among the scaffolds. In addition, it was found that by increasing the nBCP in scaffolds to 50 wt%, the modulus of elasticity was highly enhanced. However, the optimum value of yield strength was obtained at 30 wt% nBCP, and the agglomeration of reinforcing particles at higher percentages caused a reduction in yield strength. It is clear that the elastic modulus of matrix has the significant role in elastic modulus of scaffolds, as also the size of the filler particles in the matrix.     

Omental plug closure of large duodenal defects--an experimental study

An explosive epidemic of Q-fever that occurred at Jedl'ové Kostol'any (Nitra District) in April 1993, had an unusual mode of transmission, unprecedented in Slovakia. The submitted case-reports can be very instructive for both health workers and the lay public. The bulk of infection was spread in the local pub through contaminated garments of animal attendants assisting abortions and births of goats in a large capacity breeding centre of Gemersan Co. By their repeated visits to the local pub the infection most probably spread to other guests by aerosol. A total of 113 persons (103 males, 10 females) contracted Q-fever. Out of them 95 were infected by contact with the goat attendants (84%), and 18 were occupational diseases after direct contact with the infected goats. The human epidemic of Q-fever facilitated to trace an ongoing epizootic of coxiellosis in the herd of goats of Gemersan breed. In order to stop further spread of infection among humans and to contain the outbreak of coxiellosis among animals extensive epidemic and epizootic measures were taken.     

Trading greenhouse gas emission benefits from biofuel use in US transportation: Challenges and opportunities

Replacing petroleum fuels with biofuels such as ethanol and biodiesel has been shown to reduce greenhouse gas (GHG) emissions. These GHG benefits can potentially be traded in the fledgling carbon markets, and methodologies for quantifying and trading are still being developed. We review the main challenges in developing such carbon trading frameworks and outline a proposed framework for the US, the main features of which include, lifecycle assessment of GHG benefits, a combination of project-specific and standard performance measures, and assigning GHG property rights to biofuel producers. At carbon prices of 10 $ t⁻¹, estimated monetary benefits from such trading can be 4.5 M$ hm⁻³ and 17 M$ hm⁻³ of corn ethanol and cellulosic ethanol respectively.