• Title/Summary/Keyword: False Detection

Search Result 1,207, Processing Time 0.035 seconds

Detecting Meltdown and Spectre Malware through Binary Pattern Analysis (바이너리 패턴 분석을 이용한 멜트다운, 스펙터 악성코드 탐지 방법)

  • Kim, Moon-sun;Lee, Man-hee
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.29 no.6
    • /
    • pp.1365-1373
    • /
    • 2019
  • Meltdown and Spectre are vulnerabilities that exploit out-of-order execution and speculative execution techniques to read memory regions that are not accessible with user privileges. OS patches were released to prevent this attack, but older systems without appropriate patches are still vulnerable. Currently, there are some research to detect Meltdown and Spectre attacks, but most of them proposed dynamic analysis methods. Therefore, this paper proposes a binary signature that can be used to detect Meltdown and Spectre malware without executing them. For this, we collected 13 malicious codes from GitHub and performed binary pattern analysis. Based on this, we proposed a static detection method for Meltdown and Spectre malware. Our results showed that the method identified all the 19 attack files with 0.94% false positive rate when applied to 2,317 normal files.

Novel Incremental Spectrum Sensing in Cooperative Cognitive Radio Networks (협력 인지 통신 네트워크에서 새로운 증분형 스펙트럼 검출)

  • Ha, Nguyen Vu;Kong, Hyung-Yun
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.35 no.9A
    • /
    • pp.859-867
    • /
    • 2010
  • In this paper, we consider a novel spectrum sensing system in which firstly, the fusion center (FC) senses and makes the own decision then if its sensing result is not useful for achieving the final decision, the local observations from the cognitive users (CUs) will be required. Moreover, in case that FC needs the results from CUs, we will choose only CU having the highest collected energy to send its local decision to FC. Based on this selecting method, the number of sensing bits can be reduced; hence, we can save the power and the bandwidth for reporting stage in the cognitive radio network (CRN). The mathematical analysis of the key metrics of the sensing schemes (probability of detection, false alarm, e.g.) will be investigated and confirmed by the Monte-Carlo simulation results to show the performance enhancement of the proposed schemes.

Internal Amplification Control for a Cryptosporidium Diagnostic PCR: Construction and Clinical Evaluation

  • Hawash, Yousry;Ghonaim, M.M.;Al-Hazmi, Ayman S.
    • Parasites, Hosts and Diseases
    • /
    • v.53 no.2
    • /
    • pp.147-154
    • /
    • 2015
  • Various constituents in clinical specimens, particularly feces, can inhibit the PCR assay and lead to false-negative results. To ensure that negative results of a diagnostic PCR assay are true, it should be properly monitored by an inhibition control. In this study, a cloning vector harboring a modified target DNA sequence (${\approx}375bp$) was constructed to be used as a competitive internal amplification control (IAC) for a conventional PCR assay that detects ${\approx}550bp$ of the Cryptosporidium oocyst wall protein (COWP) gene sequence in human feces. Modification of the native PCR target was carried out using a new approach comprising inverse PCR and restriction digestion techniques. IAC was included in the assay, with the estimated optimum concentration of 1 fg per reaction, as duplex PCR. When applied on fecal samples spiked with variable oocysts counts, ${\approx}2$ oocysts were theoretically enough for detection. When applied on 25 Cryptosporidium-positive fecal samples of various infection intensities, both targets were clearly detected with minimal competition noticed in 2-3 samples. Importantly, both the analytical and the diagnostic sensitivities of the PCR assay were not altered with integration of IAC into the reactions. When tried on 180 randomly collected fecal samples, 159 were Cryptosporidium-negatives. Although the native target DNA was absent, the IAC amplicon was obviously detected on gel of all the Cryptosporidium-negative samples. These results imply that running of the diagnostic PCR, inspired with the previously developed DNA extraction protocol and the constructed IAC, represents a useful tool for Cryptosporidium detection in human feces.

Sequential use of real-time polymerase chain reaction and enzyme-linked immunosorbent assay techniques verifies adulteration of fermented sausages with chicken meat

  • Benli, Hakan;Barutcu, Elif
    • Animal Bioscience
    • /
    • v.34 no.12
    • /
    • pp.1995-2002
    • /
    • 2021
  • Objective: Detection of adulteration in processed meats is an important issue for some countries due to substitution of beef with a cheaper source of protein like poultry. In this study, the presence of chicken meat was investigated using real-time polymerase chain reaction (real-time PCR) and enzyme-linked immunosorbent assay (ELISA) techniques to verify adulteration of fermented sausage samples. Methods: A total of 60 commercial samples were collected from 20 establishments in three replicates including 10 fermented sausage manufacturers and 10 butchers to investigate the presence of chicken meat with the sequential use of real-time PCR and ELISA techniques. In addition, pH, moisture content, water activity and color values of the samples were determined. Results: Both real-time PCR and ELISA showed agreement on the presence or absence of chicken meat in 55 out of 60 fermented sausage samples and chicken meat was identified with both methods in 16 samples. Five samples produced inconsistent results for the presence of chicken meat in the first run. Nevertheless, the presence of chicken meat was verified with both methods when these samples were analyzed for the second time. In addition, the average physico-chemical values of the fermented sausage samples tested positive for chicken meat were not significantly different from some of those fermented sausage samples tested negative for the chicken meat. Conclusion: The sequential use of real-time PCR and ELISA techniques in fermented sausages could be beneficial for the government testing programs to eliminate false negatives for detection of adulteration with chicken meat. Furthermore, consumers should not rely on some of the quality cues including color to predict the adulteration of fermented sausages with chicken meat since there were no statistical differences among some of the samples tested positive and negative for chicken meat.

Integrated Automatic Pre-Processing for Change Detection Based on SURF Algorithm and Mask Filter (변화탐지를 위한 SURF 알고리즘과 마스크필터 기반 통합 자동 전처리)

  • Kim, Taeheon;Lee, Won Hee;Yeom, Junho;Han, Youkyung
    • Journal of the Korean Society of Surveying, Geodesy, Photogrammetry and Cartography
    • /
    • v.37 no.3
    • /
    • pp.209-219
    • /
    • 2019
  • Satellite imagery occurs geometric and radiometric errors due to external environmental factors at the acquired time, which in turn causes false-alarm in change detection. These errors should be eliminated by geometric and radiometric corrections. In this study, we propose a methodology that automatically and simultaneously performs geometric and radiometric corrections by using the SURF (Speeded-Up Robust Feature) algorithm and the mask filter. The MPs (Matching Points), which show invariant properties between multi-temporal imagery, extracted through the SURF algorithm are used for automatic geometric correction. Using the properties of the extracted MPs, PIFs (Pseudo Invariant Features) used for relative radiometric correction are selected. Subsequently, secondary PIFs are extracted by generated mask filters around the selected PIFs. After performing automatic using the extracted MPs, we could confirm that geometric and radiometric errors are eliminated as the result of performing the relative radiometric correction using PIFs in geo-rectified images.

Rapid and Sensitive Detection of Salmonella in Chickens Using Loop-Mediated Isothermal Amplification Combined with a Lateral Flow Dipstick

  • Liu, Zhi-Ke;Zhang, Qiu-Yu;Yang, Ning-Ning;Xu, Ming-Guo;Xu, Jin-Feng;Jing, Ming-Long;Wu, Wen-Xing;Lu, Ya-Dong;Shi, Feng;Chen, Chuang-Fu
    • Journal of Microbiology and Biotechnology
    • /
    • v.29 no.3
    • /
    • pp.454-464
    • /
    • 2019
  • Salmonellosis is a highly contagious bacterial disease that threatens both human and poultry health. Tests that can detect Salmonella in the field are urgently required to facilitate disease control and for epidemiological investigations. Here, we combined loop-mediated isothermal amplification (LAMP) with a chromatographic lateral flow dipstick (LFD) to rapidly and accurately detect Salmonella. LAMP primers were designed to target the Salmonella invA gene. LAMP conditions were optimized by adjusting the ratio of inner to outer primers, $MgSO_4$ concentration, dNTP mix concentration, amplification temperature, and amplification time. We evaluated the specificity of our novel LAMP-LFD method using six Salmonella species and six related non-Salmonella strains. All six of the Salmonella strains, but none of the non-Salmonella strains, were amplified. LAMP-LFD was sensitive enough to detect concentrations of Salmonella enterica subsp. enterica serovar Pullorum genomic DNA as low as $89fg/{\mu}l$, which is 1,000 times more sensitive than conventional PCR. When artificially contaminated feed samples were analyzed, LAMP-LFD was also more sensitive than PCR. Finally, LAMP-LFD gave no false positives across 350 chicken anal swabs. Therefore, our novel LAMP-LFD assay was highly sensitive, specific, convenient, and fast, making it a valuable tool for the early diagnosis and monitoring of Salmonella infection in chickens.

Comparative Study of Target Genes and Protocols by Country for Detection of SARS-CoV-2 based on Polymerase Chain Reaction (PCR) (중합효소 연쇄반응 기반의 코로나-19 바이러스 검출법에 대한 국가별 목표 유전자 및 프로토콜 비교 연구)

  • Kim, Jin-Hee
    • The Journal of the Korea Contents Association
    • /
    • v.21 no.1
    • /
    • pp.465-474
    • /
    • 2021
  • Corona-19, a disease caused by 'Severe Acute Respiratory Syndrome Coronavirus 2 (SARS-CoV-2)', was declared a global pandemic by the World Health Organization (WHO) in March 2020, and a real-time polymerase chain reaction test is performed as a diagnostic test for screening and confirmation in most countries. However, not only the target genes and protocols differ by countries, but also the procedures for reading the diagnosis results are diverse, so the criteria for confirmed patients differ by country. Therefore, in this review, we discussed the target genes, test techniques, and diagnostic criteria for each country notified by WHO. And the specificity and sensitivity, limits of detection, positive and negative controls, false positive bacteria candidates, and specimens, and the specifics of the control setting were also described. In addition, the characteristics of Korea's test were compared to each country's one. Finally, in order to obtain the same diagnosis result for SARS-CoV-2 in the future, standardized diagnosis methods and result interpretations for Corona-19 diagnosis were proposed.

Analysis of Defense Method for HTTP POST DDoS Attack base on Content-Length Control (Content-Length 통제기반 HTTP POST DDoS 공격 대응 방법 분석)

  • Lee, Dae-Seob;Won, Dong-Ho
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.22 no.4
    • /
    • pp.809-817
    • /
    • 2012
  • One of the OSI 7 Layer DDoS Attack, HTTP POST DDoS can deny legitimate service by web server resource depletion. This Attack can be executed with less network traffic and legitimate TCP connections. Therefore, It is difficult to distinguish DDoS traffic from legitimate users. In this paper, I propose an anomaly HTTP POST traffic detection algorithm and http each page Content-Length field size limit with defense method for HTTP POST DDoS attack. Proposed method showed the result of detection and countermeasure without false negative and positive to use the r-u-dead-yet of HTTP POST DDoS attack tool and the self-developed attack tool.

Development of Molecular Diagnostic System with High Sensitivity for the Detection of Human Sapovirus from Water Environments

  • Lee, Siwon;Bae, Kyung Seon;Lee, Jin-Young;Joo, Youn-Lee;Kim, Ji-Hae;You, Kyung-A
    • Biomedical Science Letters
    • /
    • v.27 no.1
    • /
    • pp.35-43
    • /
    • 2021
  • Human Sapovirus (HuSaV) is one of the major causes of acute gastroenteritis in humans, and it is used as a molecular diagnostic technique based on polymerase chain reaction (PCR) from humans, food, shellfish, and aquatic environments. In this study, the HuSaV diagnosis technique was used in an aquatic environment where a number of PCR inhibitors are included and pathogens, such as viruses, are estimated to exist at low concentration levels. HuSaV-specific primers are improved to detect 38 strains registered in the National Center for Biotechnology Information (NCBI). The established optimal condition and the composition, including the RT-nested PCR primers and SL® Non-specific reaction inhibitor, were found to have 100 times higher sensitivity based on HuSaV plasmid than the previously reported methods (100 ag based on HuSaV plasmid 1 ng/μL). Through an artificial infection test, the developed method was able to detect at least 1 fg/μL of HuSaV plasmid contaminated with total nucleic acid extracted from groundwater. In addition, RT-nested PCR primer sets for HuSaV detection can react, and a positive control is developed to verify false positives. This study is expected to be used as a HuSaV monitoring method in the future and applied to the safety response to HuSaV from water environments.

The Detection of Android Malicious Apps Using Categories and Permissions (카테고리와 권한을 이용한 안드로이드 악성 앱 탐지)

  • Park, Jong-Chan;Baik, Namkyun
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.26 no.6
    • /
    • pp.907-913
    • /
    • 2022
  • Approximately 70% of smartphone users around the world use Android operating system-based smartphones, and malicious apps targeting these Android platforms are constantly increasing. Google has provided "Google Play Protect" to respond to the increasing number of Android targeted malware, preventing malicious apps from being installed on smartphones, but many malicious apps are still normal. It threatens the smartphones of ordinary users registered in the Google Play store by disguising themselves as apps. However, most people rely on antivirus programs to detect malicious apps because the average user needs a great deal of expertise to check for malicious apps. Therefore, in this paper, we propose a method to classify unnecessary malicious permissions of apps by using only the categories and permissions that can be easily confirmed by the app, and to easily detect malicious apps through the classified permissions. The proposed method is compared and analyzed from the viewpoint of undiscovered rate and false positives with the "commercial malicious application detection program", and the performance level is presented.