8 research outputs found

    Modern Vulnerability Management apart from CVSS

    No full text
    Im Bereich der Cybersicherheit ist bei der Entdeckung mehrerer Schwachstellen mit demsel-ben Common Vulnerability Scoring System (CVSS)-Score eine Priorisierung von größter Be-deutung. In dieser Arbeit wird ein moderner Ansatz für das Schwachstellenmanagement unter-sucht, der die Umgebung stärker in den Mittelpunkt rückt. Dies führt zu einer risikoorientiertenBewertung. Zunächst wird die Cybersicherheit als eine Kette betrachtet, bei der die Stärkedes gesamten Systems von der Widerstandsfähigkeit der einzelnen Komponenten abhängt.Ausgehend von den Erkenntnissen von Expertinnen und Experten sowie Frameworks wie derMitre-Angriffsmatrix wird die entscheidende Bedeutung der Aufklärung bei der Ermittlung vonSchwachstellen hervorgehoben. Darüber hinaus wird auf die Herausforderung eingegangen,der sich kleine und mittlere Unternehmen bei der Zuweisung von Ressourcen zur Bewälti-gung von Cybersicherheitsrisiken gegenübersehen. In kleinen Unternehmen ist das Patchenvon Schwachstellen ein Prozess, der sich über Wochen hinzieht, weshalb es entscheidendist, zu determinieren, welche Schwachstelle als Erstes gepatcht werden soll. In Anbetrachtder Notwendigkeit, die sensiblen Informationen einschließlich der entdeckten Schwachstellenzu behandeln, wird in dieser Arbeit ein Offline-Ansatz vorgestellt. Durch die Analyse einerSchwachstelle in deren Kontext mit einem Netzwerkscanner wie nmap sortiert der Algorithmusdie entdeckte Schwachstelle anhand einer Kombination aus CVSS, Exploit Prediction ScoringSystem (EPSS) und Cybersecurity & Infrastructure Security Agency (CISA) Scores sowie einerindividuell einstellbaren Gewichtung für jede einzelne Schwachstelle. Das Skript verwendetdas lokal gehostete Large Language Model (LLM), um einen Bericht zu erstellen, der einenÜberblick über die Schwachstellen gibt und die besten Praktiken auflistet, um sie zu entschär-fen und die Auswirkungen zu verringern.In the realm of cybersecurity, when discovering multiple vulnerabilities with the same CVSSscore, prioritization is paramount. This paper explores a modern approach to vulnerability man-agement which increases the focus of the environment. This leads to risk-oriented evaluation.It begins by framing cybersecurity as a chain, where the strength of the entire system dependson the resilience of its individual components. Drawing from the insights of experts and frame-works like the Mitre Attack Matrix, it emphasizes the criticality of reconnaissance in identifyingvulnerabilities. Moreover, it addresses the challenge faced by small and mid-sized companiesin allocating resources to tackle cybersecurity risks. In small companies patching vulnerabilitiesis a process which continues weeks, therefore it is crucial to decide which vulnerability to patchfirst. Recognizing the necessity for handling the sensitive information including the detectedvulnerabilities, the paper introduces an offline approach. By analyzing a vulnerability within itscontext using a network scanner like nmap, the algorithm sorts the detected vulnerability usinga combination of CVSS, EPSS, CISA scores, and individually adjustable weight for each. Thescript uses locally hosted LLM to generate a report which gives an overview over the list ofvulnerabilities and explains the best practices to mitigate them and reduce their impact.by: Dimcho GeorgievMasterarbeit Fachhochschule Technikum Wien 202

    Modern Vulnerability Management apart from CVSS

    No full text
    Im Bereich der Cybersicherheit ist bei der Entdeckung mehrerer Schwachstellen mit demsel-ben Common Vulnerability Scoring System (CVSS)-Score eine Priorisierung von größter Be-deutung. In dieser Arbeit wird ein moderner Ansatz für das Schwachstellenmanagement unter-sucht, der die Umgebung stärker in den Mittelpunkt rückt. Dies führt zu einer risikoorientiertenBewertung. Zunächst wird die Cybersicherheit als eine Kette betrachtet, bei der die Stärkedes gesamten Systems von der Widerstandsfähigkeit der einzelnen Komponenten abhängt.Ausgehend von den Erkenntnissen von Expertinnen und Experten sowie Frameworks wie derMitre-Angriffsmatrix wird die entscheidende Bedeutung der Aufklärung bei der Ermittlung vonSchwachstellen hervorgehoben. Darüber hinaus wird auf die Herausforderung eingegangen,der sich kleine und mittlere Unternehmen bei der Zuweisung von Ressourcen zur Bewälti-gung von Cybersicherheitsrisiken gegenübersehen. In kleinen Unternehmen ist das Patchenvon Schwachstellen ein Prozess, der sich über Wochen hinzieht, weshalb es entscheidendist, zu determinieren, welche Schwachstelle als Erstes gepatcht werden soll. In Anbetrachtder Notwendigkeit, die sensiblen Informationen einschließlich der entdeckten Schwachstellenzu behandeln, wird in dieser Arbeit ein Offline-Ansatz vorgestellt. Durch die Analyse einerSchwachstelle in deren Kontext mit einem Netzwerkscanner wie nmap sortiert der Algorithmusdie entdeckte Schwachstelle anhand einer Kombination aus CVSS, Exploit Prediction ScoringSystem (EPSS) und Cybersecurity & Infrastructure Security Agency (CISA) Scores sowie einerindividuell einstellbaren Gewichtung für jede einzelne Schwachstelle. Das Skript verwendetdas lokal gehostete Large Language Model (LLM), um einen Bericht zu erstellen, der einenÜberblick über die Schwachstellen gibt und die besten Praktiken auflistet, um sie zu entschär-fen und die Auswirkungen zu verringern.In the realm of cybersecurity, when discovering multiple vulnerabilities with the same CVSSscore, prioritization is paramount. This paper explores a modern approach to vulnerability man-agement which increases the focus of the environment. This leads to risk-oriented evaluation.It begins by framing cybersecurity as a chain, where the strength of the entire system dependson the resilience of its individual components. Drawing from the insights of experts and frame-works like the Mitre Attack Matrix, it emphasizes the criticality of reconnaissance in identifyingvulnerabilities. Moreover, it addresses the challenge faced by small and mid-sized companiesin allocating resources to tackle cybersecurity risks. In small companies patching vulnerabilitiesis a process which continues weeks, therefore it is crucial to decide which vulnerability to patchfirst. Recognizing the necessity for handling the sensitive information including the detectedvulnerabilities, the paper introduces an offline approach. By analyzing a vulnerability within itscontext using a network scanner like nmap, the algorithm sorts the detected vulnerability usinga combination of CVSS, EPSS, CISA scores, and individually adjustable weight for each. Thescript uses locally hosted LLM to generate a report which gives an overview over the list ofvulnerabilities and explains the best practices to mitigate them and reduce their impact.by: Dimcho GeorgievMasterarbeit Fachhochschule Technikum Wien 202

    A comparison of radiation doses to selected vital organs in the maxillo-facial region using three different settings on the Galileos CBCT machine housed in the Wits Dental Hospital

    No full text
    A research report submitted to the Faculty of Health Sciences, University of the Witwatersrand, Johannesburg in partial fulfillment of the requirements for the degree of MSc (Dent)A comparison of radiation doses to selected vital organs in the maxillo-facial region at three different settings on the Galileos cone-beam computed tomography (CBCT) machine in the Wits Dental Hospital, was conducted with the courtesy of the Department of Medical Physics of the Charlotte Maxeke Johannesburg Academic Hospital. The study made use of the RANDO phantom and TLD- 100 detector chips, which provided detailed mapping of the dose distribution from the Galileos CBCT machine. Sixty-two Sanford® lithium fluoride dosimeters- (TLD- 100) were irradiated using a calibrated known x-ray source after having undergone a recommended annealing cycle. The data showed great consistency in the results. Association between the different imaging modalities was further investigated using Kruskal-Wallis equality-of-populations rank test and Chi-squared test. A p-value of <0.05 was considered statistically significant. Since there do not appear to be major differences between the radiation doses for the different settings of the Galileos CBCT machine, the author recommends the use of the combined setting at all times for optimum image quality

    DNA array to confirm differential gene expression in young and old ovaries

    No full text
    <p><b>Copyright information:</b></p><p>Taken from "Genes invoked in the ovarian transition to menopause"</p><p>Nucleic Acids Research 2006;34(11):3279-3287.</p><p>Published online 28 Jun 2006</p><p>PMCID:PMC1904106.</p><p>© 2006 The Author(s)</p> Identical DNA array membranes containing probes for 440 aging-related mouse genes were probed with individual P-labeled cDNA libraries prepared from () young and () aged ovaries. Lower panels of () and () show an enlargement of the framed membrane portions in the upper panels. Matrix overlay maps the position of the nucleotides for each gene. Positions 62, Leptin; 79, CD36 antigen; 117, unknown EST are examples of decreased levels with aging. Positions 58, peroxisome proliferators activated receptor-a; 105, transcription factor NFκB are examples of increased levels with aging

    Western blots of total protein lysates from young and old mouse ovaries

    No full text
    <p><b>Copyright information:</b></p><p>Taken from "Genes invoked in the ovarian transition to menopause"</p><p>Nucleic Acids Research 2006;34(11):3279-3287.</p><p>Published online 28 Jun 2006</p><p>PMCID:PMC1904106.</p><p>© 2006 The Author(s)</p> () Proteins with reduced content in old (o) ovaries compared with young ovaries (y); () proteins with higher level in young ovaries; and () no change in protein content. Proteins were visualized with protein-specific antibodies as indicated at the left of the panels. The size (kDa) of the protein marker is indicated at the right of the panels. All lanes received 100 μg of total ovarian lysate. The immunological reactions are visualized by HSP-coupled secondary antibodies

    Autoradiograms of representative virtual northern blots that confirm changes in mRNA levels in young and old ovaries

    No full text
    <p><b>Copyright information:</b></p><p>Taken from "Genes invoked in the ovarian transition to menopause"</p><p>Nucleic Acids Research 2006;34(11):3279-3287.</p><p>Published online 28 Jun 2006</p><p>PMCID:PMC1904106.</p><p>© 2006 The Author(s)</p> () One of the three confirmatory virtual northern blots with a complete set of 48 genes probed in young and old samples. The matrix overlay maps the position of each reaction. Three independent northern blot experiments produced consistent results (SD = 3%). () Examples of genes that are downregulated in perimenopausal ovaries compared with young ovaries: leptin receptor at position 37 in (a); desmin at position 10 in (a); TGF-β at position 24. () Examples of genes that are upregulated in perimenopausal ovaries: heme-oxygenase-1, position 45 in (a); nuclear factor kB, position 46; retinoic receptor-α, position 19; janus kinase 1, position 32; telomerase, position 44. () An example of a gene with no change in level with aging, cytochrome B, position 3 in (a) and the control. Hybridization paper was blotted with oligonucleotides (1 μg) that are specific for different genes and then hybridized with P-labeled ssDNA from young (y) and old (o) mouse ovaries. Genes to which the probes correspond, are shown to the left of the autoradiograms. The level of cytochrome B mRNA did not change significantly with aging and was used as an internal control. Hybridization in the absence of oligonucleotides was used as a negative control (control)

    Radiotherapy of the pleural cavity in patients with primary and secondary malignancies of the pleura

    Get PDF
    Background: Although there have been various attempts to find appropriate treatment from best conservative care to multimodal treatments, curative outcomes remain poor. Materials and methods: 30 patients with primary and secondary malignant tumors of the pleura were treated in the Radiotherapy Clinic of USHATO during the period from December 2016 to April 2023. Video-assisted thoracoscopic surgery (VATS) and talc pleurodesis was performed in 18 patients (60%). In all patients, radiotherapy for the pleura was performed on a helical tomotherapy machine. In 21 patients (70%), normal fractionated radiotherapy was performed at daily dose of 1.8–2 Gy to total dose of 40 Gy (5 times a week), and in 6 patients (20%), integrated surdosage to 50 Gy was also performed for visible lesions. Hypofractionated radiotherapy (10 fractions of 3 Gy and 4 fractions of 4 Gy) was performed in 3 (10%) patients. Results: Patients were followed up from 1 month to 57 months (median 14 months) or until death. The observed median survival for all patients was 19.2 months [95% confidence interval (CI): 11.5–26.9] (Fig. 3). The 1-, 2- and 3-year survival rates were 40%, 23% and 7% of patients, respectively. Malignant mesothelioma patients had 1-, 2- and 3-year survival rates of 31%, 10% and 0%, respectively. The 1-, 2-, and 3-year survival rates for patients with secondary malignancies were 54%, 45%, and 18%, respectively. Conclusion: Our results suggest that helical tomotherapy is a feasible therapeutic option for patients with malignant mesothelioma or malignant secondary pleural involvement with a reasonable toxicity profile relative to other unaffected lung

    Risk for Major Bleeding in Patients Receiving Ticagrelor Compared With Aspirin After Transient Ischemic Attack or Acute Ischemic Stroke in the SOCRATES Study (Acute Stroke or Transient Ischemic Attack Treated With Aspirin or Ticagrelor and Patient Outcomes)

    No full text
    Background: Patients with minor acute ischemic stroke or transient ischemic attack are at high risk for subsequent stroke, and more potent antiplatelet therapy in the acute setting is needed. However, the potential benefit of more intense antiplatelet therapy must be assessed in relation to the risk for major bleeding. The SOCRATES trial (Acute Stroke or Transient Ischemic Attack Treated With Aspirin or Ticagrelor and Patient Outcomes) was the first trial with ticagrelor in patients with acute ischemic stroke or transient ischemic attack in which the efficacy and safety of ticagrelor were compared with those of aspirin. The main safety objective was assessment of PLATO (Platelet Inhibition and Patient Outcomes)–defined major bleeds on treatment, with special focus on intracranial hemorrhage (ICrH). Methods: An independent adjudication committee blinded to study treatment classified bleeds according to the PLATO, TIMI (Thrombolysis in Myocardial Infarction), and GUSTO (Global Use of Strategies to Open Occluded Coronary Arteries) definitions. The definitions of ICrH and major bleeding excluded cerebral microbleeds and asymptomatic hemorrhagic transformations of cerebral infarctions so that the definitions better discriminated important events in the acute stroke population. Results: A total of 13 130 of 13 199 randomized patients received at least 1 dose of study drug and were included in the safety analysis set. PLATO major bleeds occurred in 31 patients (0.5%) on ticagrelor and 38 patients (0.6%) on aspirin (hazard ratio, 0.83; 95% confidence interval, 0.52–1.34). The most common locations of major bleeds were intracranial and gastrointestinal. ICrH was reported in 12 patients (0.2%) on ticagrelor and 18 patients (0.3%) on aspirin. Thirteen of all 30 ICrHs (4 on ticagrelor and 9 on aspirin) were hemorrhagic strokes, and 4 (2 in each group) were symptomatic hemorrhagic transformations of brain infarctions. The ICrHs were spontaneous in 6 and 13, traumatic in 3 and 3, and procedural in 3 and 2 patients on ticagrelor and aspirin, respectively. In total, 9 fatal bleeds occurred on ticagrelor and 4 on aspirin. The composite of ICrH or fatal bleeding included 15 patients on ticagrelor and 18 on aspirin. Independently of bleeding classification, PLATO, TIMI, or GUSTO, the relative difference between treatments for major/severe bleeds was similar. Nonmajor bleeds were more common on ticagrelor. Conclusions: Antiplatelet therapy with ticagrelor in patients with acute ischemic stroke or transient ischemic attack showed a bleeding profile similar to that of aspirin for major bleeds. There were few ICrHs. Clinical Trial Registration: URL: http://www.clinicaltrials.gov . Unique identifier: NCT01994720. </jats:sec
    corecore