Search for: All records

To achieve economies of scale, popular Internet destinations concurrently serve hundreds or thousands of users on shared physical infrastructure. This resource sharing enables attacks that misuse permissions and affect other users. Our work uses containerization to create "single-use servers" which are dynamically instantiated and tailored for each user's permissions. This isolates users and eliminates attacker persistence. Further, it simplifies analysis, allowing the fusion of logs to help defenders localize vulnerabilities associated with security incidents. We thus mitigate attacks and convert them into debugging traces to aid remediation. We evaluate the approach using three systems, including the popular WordPress content management system. It eliminates attacker persistence, propagation, and permission misuse. It has low CPU and latency costs and requires linear memory consumption, which we reduce with a customized page merging technique. 

Abstract Here we report the first recovery, sequencing, and identification of fossil biomineral proteins from a Pleistocene fossil invertebrate, the stony coral Orbicella annularis . This fossil retains total hydrolysable amino acids of a roughly similar composition to extracts from modern O. annularis skeletons, with the amino acid data rich in Asx (Asp + Asn) and Glx (Glu + Gln) typical of invertebrate skeletal proteins. It also retains several proteins, including a highly acidic protein, also known from modern coral skeletal proteomes that we sequenced by LC–MS/MS over multiple trials in the best-preserved fossil coral specimen. A combination of degradation or amino acid racemization inhibition of trypsin digestion appears to limit greater recovery. Nevertheless, our workflow determines optimal samples for effective sequencing of fossil coral proteins, allowing comparison of modern and fossil invertebrate protein sequences, and will likely lead to further improvements of the methods. Sequencing of endogenous organic molecules in fossil invertebrate biominerals provides an ancient record of composition, potentially clarifying evolutionary changes and biotic responses to paleoenvironments. 

Abstract We report the discovery of the unusually bright long-duration gamma-ray burst (GRB), GRB 221009A, as observed by the Neil Gehrels Swift Observatory (Swift), Monitor of All-sky X-ray Image, and Neutron Star Interior Composition Explorer Mission. This energetic GRB was located relatively nearby ( z = 0.151), allowing for sustained observations of the afterglow. The large X-ray luminosity and low Galactic latitude ( b = 4.°3) make GRB 221009A a powerful probe of dust in the Milky Way. Using echo tomography, we map the line-of-sight dust distribution and find evidence for significant column densities at large distances (≳10 kpc). We present analysis of the light curves and spectra at X-ray and UV–optical wavelengths, and find that the X-ray afterglow of GRB 221009A is more than an order of magnitude brighter at T 0 + 4.5 ks than that from any previous GRB observed by Swift. In its rest frame, GRB 221009A is at the high end of the afterglow luminosity distribution, but not uniquely so. In a simulation of randomly generated bursts, only 1 in 10 4 long GRBs were as energetic as GRB 221009A; such a large E γ ,iso implies a narrow jet structure, but the afterglow light curve is inconsistent with simple top-hat jet models. Using the sample of Swift GRBs with redshifts, we estimate that GRBs as energetic and nearby as GRB 221009A occur at a rate of ≲1 per 1000 yr—making this a truly remarkable opportunity unlikely to be repeated in our lifetime. 

The software-defined networking (SDN) paradigm offers significant flexibility for network operators. However, the SDN community has focused on switch-based implementations, which pose several challenges. First, some may require significant hardware costs to upgrade a network. Further, fine-grained flow control in a switch-based SDN results in well-known, fundamental scalability limitations. These challenges may limit the reach of SDN technologies. In this work, we explore the extent to which host-based SDN agents can achieve feature parity with switch-based SDNs. Prior work has shown the potential of host-based SDNs for security and access control. Our study finds that with appropriate preparation, a host-based agent offers the same capabilities of switch-based SDNs in the remaining key area of traffic engineering, even in a legacy managed-switch network. We find the approach offers comparable performance to switch-based SDNs while eliminating the flow table scalability and cost concerns of switch-based SDN deployments.