Session Protocol Research Articles

Efficacious Spam Filtering and Detection in Social Networks

In Online Social Networks, the internet mail server spam delivery is the most common issue. Email spam, also known as junk email or unsolicited bulk email (UBE), is a subset of electronic spam involving nearly identical messages sent to numerous recipients by email. In the Receiver Side, only most of the modern spam-filtering techniques are deployed. They may be effective in selection junk mail for clients, but junk mail communications however preserve losing World-wide-web bandwidth along with the storage space of email hosting space. In existing system, the Bayesian spam filters are easily poisoned by clever spammers who avoid spam keywords and add many harmless words in their emails. The detection system was proposed to monitor the simple mail transfer protocol (SMTP) sessions and email addresses in the outgoing mail messages from each individual internal host as the features for detecting spamming messages. Due to the huge number of email addresses observed in the SMTP sessions, Bloom filters are used to detect the spam messages and to increase efficiency. Keywords: Bloom Filter, Spam Filtering, Social Networks

Cognitive processing therapy for male veterans with military sexual trauma-related posttraumatic stress disorder

ObjectiveThe current study examined 11 male veterans with military sexual trauma (MST)-related posttraumatic stress disorder (PTSD) who participated in a larger randomized control trial comparing cognitive processing therapy (CPT) to a well-established control treatment (Present Centered Therapy; PCT) among men and women with MST-related PTSD. MethodAll participants (n=11) completed a 12 session protocol of CPT. The Clinician Administered PTSD Scale (CAPS), PTSD Checklist (PCL), and Quick Inventory of Depressive Symptomatology (QIDS) were administered at baseline and post-treatment sessions 2, 4, and 6 months after CPT completion. Additionally, the PCL and QIDS were administered every two sessions during CPT treatment. ResultsPiecewise growth curve analyses revealed that significant change over time in both PTSD and depressive symptoms was associated with the active treatment phase and that participants maintained treatment gains over the 6-month follow-up period. ConclusionsCPT effectively reduced self-reported symptoms of PTSD as well as depressive symptoms for men with MST-related PTSD. Additionally, participants maintained the gains they made during treatment over a 6-month follow-up period. It is recommended that future studies examine patient characteristics that might impact outcome in order to improve understanding of who benefits the most from treatment.

Sa1185 Dysbiosis of the Mucosa-Adherent Microbiome in Patients With Irritable Bowel Syndrome

Background: Functional Gastrointestinal Disorders (FGIDs) are identified by the dominant presenting symptoms: functional heartburn (FH), irritable bowel syndrome (IBS), dyspepsia, etc. This nomenclature assumes an organ-specific origin of symptoms rather than symptoms associated with a common pathophysiology such as visceral hypersensitivity. The symptoms reported in most FGIDs overlap more than one gastrointestinal (GI) organ. FH patients report abdominal cramping, bloating and nausea with their FH symptoms. This study tested the primary hypothesis that there is a correlation of MPT in the esophagus and rectum in FH patients. Secondary aims evaluated correlations with IPT and PT. Methods:. This study explored objective sensory endpoints of initial perception threshold (IPT), pain threshold (PT), and maximum pain threshold (MPT) in the esophagus and rectum of FH subjects to determine whether visceral hypersensitivity is a generalized or organ specific observation Fourteen women with FH participated in this study. Each subject underwent a training sensory study protocol session including step volume and pressure ramp balloon barostat distention of the esophagus and rectum. A data collection visit occurred within 7-14 days to collect data on balloon volume and pressure measurements at IPT, PT, and MPT with esophageal and rectal barostat distention. The relationship of sensation and pain to volume, pressure, and compliance was analyzed. Results: The correlation between esophageal and rectal IPT balloon volume scores was highly and significantly correlated (r = 0.61, p = 0.02). The correlation between esophageal and rectal PT balloon volume scores was highly and significantly correlated (r = 0.6, p = 0.02). The correlation between esophageal and rectal MPT balloon volume scores was not correlated (r = 0.35, p = 0.26). In contrast to volume, the pressure endpoints were not significantly correlated. Conclusions: 1. In this study, there was weak correlation for the relationship of rectal and esophageal volume scores at MPT (Primary Aim). Findings revealed a strong positive correlation for the relationship of rectal and esophageal volume and pressure scores to IPT and PT (Secondary Aims). The lack of MPT correlation may provide insight into the organ specific stratification of FGIDs through identification of the most sensitive organ. 2. In this study, volume was superior to pressure in assessing changes in visceral sensitivity in FGID patients. 3. The correlation of visceral sensitivity in the esophagus and rectum in patients with FH supports the hypothesis that visceral sensory changes in FGIDs are not organ specific. 4. Visceral hypersensitivity throughout the GI tract may explain the overlapping symptoms in FGID patients suggesting visceral sensitivity may occur in two separate areas of the GI tract simultaneously.

Sa1184 A Comparison of Rectal and Esophageal Sensitivity in Women With Functional Heartburn

Background: Functional Gastrointestinal Disorders (FGIDs) are identified by the dominant presenting symptoms: functional heartburn (FH), irritable bowel syndrome (IBS), dyspepsia, etc. This nomenclature assumes an organ-specific origin of symptoms rather than symptoms associated with a common pathophysiology such as visceral hypersensitivity. The symptoms reported in most FGIDs overlap more than one gastrointestinal (GI) organ. FH patients report abdominal cramping, bloating and nausea with their FH symptoms. This study tested the primary hypothesis that there is a correlation of MPT in the esophagus and rectum in FH patients. Secondary aims evaluated correlations with IPT and PT. Methods:. This study explored objective sensory endpoints of initial perception threshold (IPT), pain threshold (PT), and maximum pain threshold (MPT) in the esophagus and rectum of FH subjects to determine whether visceral hypersensitivity is a generalized or organ specific observation Fourteen women with FH participated in this study. Each subject underwent a training sensory study protocol session including step volume and pressure ramp balloon barostat distention of the esophagus and rectum. A data collection visit occurred within 7-14 days to collect data on balloon volume and pressure measurements at IPT, PT, and MPT with esophageal and rectal barostat distention. The relationship of sensation and pain to volume, pressure, and compliance was analyzed. Results: The correlation between esophageal and rectal IPT balloon volume scores was highly and significantly correlated (r = 0.61, p = 0.02). The correlation between esophageal and rectal PT balloon volume scores was highly and significantly correlated (r = 0.6, p = 0.02). The correlation between esophageal and rectal MPT balloon volume scores was not correlated (r = 0.35, p = 0.26). In contrast to volume, the pressure endpoints were not significantly correlated. Conclusions: 1. In this study, there was weak correlation for the relationship of rectal and esophageal volume scores at MPT (Primary Aim). Findings revealed a strong positive correlation for the relationship of rectal and esophageal volume and pressure scores to IPT and PT (Secondary Aims). The lack of MPT correlation may provide insight into the organ specific stratification of FGIDs through identification of the most sensitive organ. 2. In this study, volume was superior to pressure in assessing changes in visceral sensitivity in FGID patients. 3. The correlation of visceral sensitivity in the esophagus and rectum in patients with FH supports the hypothesis that visceral sensory changes in FGIDs are not organ specific. 4. Visceral hypersensitivity throughout the GI tract may explain the overlapping symptoms in FGID patients suggesting visceral sensitivity may occur in two separate areas of the GI tract simultaneously.

Investigating the impact of alliance-focused training on interpersonal process and therapists' capacity for experiential reflection

Objective: In this article we present preliminary findings from a research program designed to investigate the value of alliance-focused training (AFT), a supervision approach designed to enhance therapists' ability to work constructively with negative therapeutic process. Method: In the context of a multiple baseline design, all therapists began treating their patients using cognitive therapy and then joined AFT supervision groups at either session 8 or 16 of a 30 session protocol. Study I investigated the impact of AFT on patient and therapist interpersonal process as assessed through the Structural Analysis of Social Behavior (SASB). Study 2 investigated the impact of AFT on therapists' tendency to reflect on their relationships with their patients in an experientially grounded fashion, as assessed via the Experiencing Scale (EXP). Since one of the goals of AFT is to train therapists to use their own emerging feelings as important clues regarding what may be taking place in the therapeutic relationship, we hypothesized that they would show increased levels of EXP after undergoing AFT. Results and Conclusion: The results of both studies 1 and 2 were for the most part consistent with hypotheses. Implications and future research directions are discussed.

Practical Security Approaches against Border Gateway Protocol (BGP) Session Hijacking Attacks between Autonomous Systems

The border gateway protocol (BGP) is the default inter domain routing protocol used on the internet for exchanging information between autonomous systems. Available literature suggests that BGP is vulnerable to session hijacking attacks. There are a number of proposals aimed at improving BGP security which have not been fully implemented. This paper examines a number of approaches for securing BGP through a comparative study and identifies the reasons why these proposals have not been implemented commercially. This paper analyses the architecture of internet routing and the design of BGP while focusing on the problem of BGP session hijacking attacks. Using Graphical Network Simulator 3 (GNS-3), a session hijack is demonstrated and a solution which involves the implementation of route filtering, policy-maps and route-maps on CISCO routers representing ASes is carried out. In the end, a workable industry standard framework for securing and protecting BGP sessions and border routers from exploitation with little or no modification to the existing routing infrastructure is demonstrated.

Dictionary Attacks against Password-Based Authenticated Three-Party Key Exchange Protocols

A three-party password-based authenticated key exchange (PAKE) protocol allows two clients registered with a trusted server to generate a common cryptographic key from their individual passwords shared only with the server. A key requirement for three-party PAKE protocols is to prevent an adversary from mounting a dictionary attack. This requirement must be met even when the adversary is a malicious (registered) client who can set up normal protocol sessions with other clients. This work revisits three existing three-party PAKE protocols, namely, Guo et al.’s (2008) protocol, Huang’s (2009) protocol, and Lee and Hwang’s (2010) protocol, and demonstrates that these protocols are not secure against offline and/or (undetectable) online dictionary attacks in the presence of a malicious client. The offline dictionary attack we present against Guo et al.’s protocol also applies to other similar protocols including Lee and Hwang’s protocol. We conclude with some suggestions on how to design a three-party PAKE protocol that is resistant against dictionary attacks.

Overcoming Barriers to HIV Treatment Adherence: A Brief Cognitive Behavioral Intervention for HIV-Positive Adults on Antiretroviral Treatment

Maximizing HIV treatment adherence is critical in efforts to optimize health outcomes and to prevent further HIV transmission. The Balance Project intervention uses cognitive behavioral approaches to improve antiretroviral medication adherence through promoting adaptive coping with medication side effect and distress related to HIV. This 5-session intervention has been documented to prevent nonadherence among persons living with HIV who experience high levels of distress associated with their antiretroviral medication side effects. We describe the theoretical underpinnings of the intervention, provide details of the training and session protocols with a case example, and discuss implications for future applications of the intervention in both research and clinical settings.

Protocol insecurity with a finite number of sessions and a cost-sensitive guessing intruder is NP-complete

Guessing attacks in security protocols arise when honest agents make use of data easily guessable by an intruder, such as passwords generated from a small dictionary. A way to model such attacks is to formalize a Dolev–Yao style model with inference rules that capture the additional capabilities of the intruder concerning guessable data. In this paper, we formalize a cost-sensitive intruder deduction system where information is available at a cost. The intruder may apply standard operations to deduce new messages from his current knowledge, or invoke an oracle rule that allows him to get hold of data that was previously unknown to him. Our system manipulates data items by means of inference rules and uses labels to keep track of the costs associated to the application of each rule. This allows us to answer the question of what is the cost of deducing a particular data that was meant to remain a secret between honest protocol participants. We also investigate the complexity of this quantitative insecurity problem and show that it is NP-complete in the case of a finite number of protocol sessions.

A secure authentication scheme for session initiation protocol by using ECC on the basis of the Tang and Liu scheme

ABSTRACTSession initiation protocol (SIP) provides the basis for establishing the voice over internet protocol sessions after authentication and exchanging signaling messages. SIP is one of the significant and extensively used protocols in the multimedia protocol stack. Since the RFC2617 was put forth, numerous schemes for SIP authentication have been presented to overcome the flaws. Recently, in 2012, Tang and Liu proposed SIP based authentication protocol and claimed for eliminating the threats in Arshad and Ikram protocol. However the scheme can be made more robust by making further improvements, as the former scheme may come under a threat by adversaries through impersonating a server, given that the user password is compromised. We have proposed an improved protocol for SIP authentication by using elliptic curve cryptography that encounters the previous threat with enhanced security. The analysis shows that proposed scheme is suitable for applications with higher security requirements. Copyright © 2013 John Wiley & Sons, Ltd.

Algorithmic type checking for a pi-calculus with name matching and session types

We present a type checking algorithm for establishing a session-based discipline in a π-calculus with name matching. We account for analysing processes exhibiting different behaviours in the branches of the if-then-else by imposing an affine discipline for session types. This permits to obtain type-safety or absence of communication errors while accepting processes of the form ifx=ythenPelse0 that install a session protocol P whenever the test succeeds, and abort otherwise. To this aim we define a type system based on a notion of context split, and we prove that it satisfies subject reduction and type-safety. We implement the type system in a split-free type checking algorithm, and we prove that processes accepted by the algorithm are well-typed. We then show that processes that are typed and do not contain Wait for deadlocks – an input and its corresponding output (or vice versa) are in the same thread instead of in parallel ones – are accepted by the algorithm, thus providing a partial completeness result. We conclude by investigating the expressiveness of the typing system and show that our theory subsumes recent works on linear and session types.

Composition of password-based protocols

Formal and symbolic techniques are extremely useful for modelling and analysing security protocols. They have helped to improve our understanding of such protocols, allowed us to discover flaws, and they also provide support for protocol design. However, such analyses usually consider that the protocol is executed in isolation or assume a bounded number of protocol sessions. Hence, no security guarantee is provided when the protocol is executed in a more complex environment. In this paper, we study whether password protocols can be safely composed, even when a same password is reused. More precisely, we present a transformation which maps a password protocol that is secure for a single protocol session (a decidable problem) to a protocol that is secure for an unbounded number of sessions. Our result provides an effective strategy to design secure password protocols: (i) design a protocol intended to be secure for one protocol session; (ii) apply our transformation and obtain a protocol which is secure for an unbounded number of sessions. Our technique also applies to compose different password protocols allowing us to obtain both inter-protocol and inter-session composition.

Flow-Level Analysis of Energy Efficiency Performance for Device-to-Device Communications in OFDM Cellular Networks

In this paper, the energy efficiency performance of device-to-device (D2D) communications in orthogonal frequency division multiplexing cellular networks is studied. Different from previous work that was based on the static interference model, we assume a dynamic number of competing flows, such as continuous transfers of file transport protocol or web browsing sessions. The complex, dynamic interaction of the amount of backlogged traffic at the D2D and cellular links introduced by the strong impact of interference between them is captured by the coupled-processors server in the formulated model. The energy efficiency and spectral efficiency of the different resource-sharing strategies are analyzed using the semidefinite optimization approach. It is shown that the simulation results match well with the analytical bounds under different traffic loads and topologies.

Efficient and flexible password authenticated key agreement for Voice over Internet Protocol Session Initiation Protocol using smart card

SUMMARYProviding a suitable key agreement protocol for session initiation protocol is crucial to protecting the communication among the users over the open channel. This paper presents an efficient and flexible password authenticated key agreement protocol for session initiation protocol associated with Voice over Internet Protocol. The proposed protocol has many unique properties, such as session key agreement, mutual authentication, password updating function and the server not needing to maintain a password or verification table, and so on. In addition, our protocol is secure against the replay attack, the impersonation attack, the stolen‐verifier attack, the man‐in‐the‐middle attack, the Denning–Sacco attack, and the offline dictionary attack with or without the smart card. Copyright © 2013 John Wiley & Sons, Ltd.

SIPAD: SIP–VoIP Anomaly Detection using a Stateful Rule Tree

Voice over IP (VoIP) services have become prevalent lately because of their potential advantages such as economic efficiency and useful features. Meanwhile, Session Initiation Protocol (SIP) is being widely used as a session protocol for the VoIP services. Many mobile VoIP applications have recently been launched, and they are becoming attractive targets for attackers to steal private information. In particular, malformed SIP messages and SIP flooding attacks are the most significant attacks as they cause service disruption by targeting call procedures and system resources. Although much research has been conducted in an effort to address the problems, they remain unresolved challenges due to the ease of launching variants of attacks. In this paper, we propose a stateful SIP inspection mechanism, called SIP–VoIP Anomaly Detection (SIPAD), that leverages a SIP-optimized data structure to detect malformed SIP messages and SIP flooding attacks. SIPAD precomputes the SIP-optimized data structure (termed a stateful rule tree) that reorganizes the SIP rule set by hierarchical correlation. Depending on the current state and the message type, SIPAD determines the corresponding branches from the stateful rule tree, and inspects a SIP message’s structure by comparing it to the branches. The SIP-optimized rule tree provides higher detection accuracy, wider detection coverage and faster detection than existing approaches. Conventional SIP inspection schemes tend to have high overhead costs due to the complexity of their rule matching schemes. Experimental results of our SIP-optimized approach, by contrast, indicate that it dramatically reduces overhead and can even be deployed in resource-constrained environments such as smartphones.

Two Step Mutual Authentication Scheme for SIP

Voice over Internet Protocol (VoIP) uses Internet Protocol (IP) to transmit voice as packets over an IP network. It achieves desired functionality of Internet telephony using a signaling protocol known as Session Initiation Protocol (SIP). When users need to use SIP service, first server authenticates the user in order to provide the service. In this paper, a new and secure authentication scheme for SIP is proposed. Its major merits are 1) Provides mutual authentication. 2) Generates session key agreed between user and server in two steps. 3) Secure against various possible attacks induced by IP networks. Session Initiation Protocol (SIP) is a signaling protocol operating at application layer to initiate, maintain and terminates multimedia sessions across packet networks. Internet Engineering Task Force (IETF) proposed SIP as a signaling protocol for Internet Protocol (IP) based telephony. SIP is designed to be independent of underlying transport layer. It can operate on Transmission Control Protocol (TCP) as well as User Datagram Protocol (UDP) to handles all signaling requirements of Voice over Internet Protocol (VoIP) sessions. Today it is widely used to transmit voice and video over IP. Issue of security has become extremely important in today's computer networks environment. Two fundamental security services required by SIP are confidentiality and authentication. Whenever user wants to access SIP service from server, mutual authentication is required between two parties. An attacker can obtain user's secret information by forging the identity of server if mutual authentication is not performed. Confidentiality is usually provided by means of encryption. Only intended recipient can decrypt a message and obtain a tangible meaning out of it. Encryption/Decryption uses shared secrets agreed among the communicating entities. If it is different from session to each session, it is known as session key. Identifying caller and callee is an utmost important issue in SIP based application. To guarantee and enhance security features, several authentication schemes have been proposed (1)-(8). Rest of the paper is organized as follows. Section II presents an overview of previous work. Section III describes the proposed SIP authentication scheme. Section IV discusses security analysis of proposed scheme. Section V presents a comparative analysis of security features and

Treatment length and outcomes among adolescents: a secondary data analysis

BackgroundAdaptations to evidence-based substance abuse treatment programs may impact their effectiveness. A qualitative study of MET/CBT-5 implementation in community agencies treating adolescents found that the majority of the agencies made adaptations and that the most frequent adaptation was to provide more than five treatment sessions.MethodsBaseline and outcome data from SAMHSA’s Effective Adolescent Treatment demonstration were analyzed to assess associations between length of treatment, client characteristics, and outcomes at three months.ResultsAdolescents who received more or less than the protocol length of 5 sessions were less likely to be discharged to the community than those who received the 5 session protocol. Those who received more than five sessions were more likely to have higher severity scores at intake but almost 50% of those with more than five sessions had low intake severity scores. Clients who received less than five sessions tended to have lower severity scores than clients who received more than five sessions.ConclusionsLength of treatment tended to vary by site rather than severity of substance problems or frequency of use. There was no significant improvement of substance abuse problems or decrease in frequency of use with longer treatment. Implementation of the MET/CBT-5 component of the Cannabis Youth Treatment trial in the EAT project illustrates the difficulty of adherence to an evidence based protocol in the field.

A new certificateless authenticated key agreement protocol for SIP with different KGCs

ABSTRACTSession Initiation Protocol, which can be applied to various networks for establishing, modifying, and terminating multimedia sessions, has received much attention in these years because of its wide applications. Because different users may belong to different networks and different networks may have different Key Generation Centers in identity‐based networks, how to make different networks be compatible and how to make users belong to different Key Generation Centers can establish a secure Session Initiation Protocol session become two key problems. In this paper, we propose a new certificateless authenticated key agreement protocol for different networks to address the problems. The protocol is provably secure against a fully adaptive adversary in the random oracle model, provided that the underlying problem of Gap Bilinear Diffie–Hellman problem is hard. Moreover, our scheme has good performance compared with the certificateless authentication key agreement protocols using pairings. The trick proposed in this paper may give some help in making different networks be compatible. Copyright © 2012 John Wiley & Sons, Ltd.

Influence of Gender in the Psychoneuroimmunological Response to Therapeutic Interval Exercise

Interval exercise has been used as an alternative modality to continuous exercise in patients with various conditions. Although interval exercise can improve health status, it may also exert deleterious effects. Few data are available on differences in psychoneuroimmunological response to high-intensity interval exercise, and it is not known whether males and females differ in their responses to a similar physical stress task. The aim of this study was to evaluate the differences between the psychoneuroimmunological responses of healthy active males and females to a high-intensity interval exercise protocol. Fifty healthy active subjects (25 females) underwent 2 exercise protocol sessions at least 2 weeks apart and at the same time of the day. The first session familiarized participants with the protocol. In the second, after a baseline measurement, subjects performed an exercise protocol with a standardized warm-up followed by three 30-s Wingate tests and an active recovery period. Baseline and postintervention data were gathered on the following: Holter electrocardiogram recordings (standard deviation of normal-to-normal interval [SDNN], square root of mean squared differences of successive NN intervals [RMSSD]); heart rate variability (HRV) index; salivary total protein and immunoglobulin A levels; pressure pain thresholds in masseter and upper trapezius muscles; and profile of mood states. After the exercise protocol, mood disturbance was significantly greater in the males than in the females, while the salivary immunoglobulin A level relative to total proteins was significantly lower in the males. These results suggest that high-intensity interval exercise induces a worse psychoneuroimmunological state in males than in females.

On a novel pattern of distributed low-rate denial of service attacks

Recent research has exposed that low-rate transmission control protocol (TCP)-targeted denial-of-service (DoS) attacks can cause failures of border gateway protocol (BGP) sessions and route flapping without being detected by current defense mechanisms. Deliberately constructed distributed low-rate denial of service(DLDoS) attacks can even generate surge of updates throughout the Internet. As this breed of attacks need a low-rate time gap between pulses, this time gap waste large number opportunities to form other attack flows. In this paper, we investigate the possibility and methods of employing the time gap to evoke other attack flows against target network. Simulations show that this method can exponentially reduce the number of nodes and therefore lower the cost of the attack when attacking multiple BGP sessions simultaneously. We also proposed the attack scheme and defense mechanisms of this kind of attacks.