Search

In this paper, we present a scientific evaluation of four prominent malware detection tools to assist an organization with two primary questions: To what extent do ML-based tools accurately classify previously- and never-before-seen files? Is it worth purchasing a network-level malware detector? To identify weaknesses, we tested each tool against 3,536 total files (2,554 or 72\% malicious, 982 or 28\% benign) of a variety of file types, including hundreds of malicious zero-days, polyglots, and APT-style files, delivered on multiple protocols. We present statistical results on detection time and accuracy, consider complementary analysis (using multiple tools together), and provide two novel applications of the recent cost-benefit evaluation procedure of Iannacone \& Bridges. While the ML-based tools are more effective at detecting zero-day files and executables, the signature-based tool may still be an overall better option. Both network-based tools provide substantial (simulated) savings when paired with either host tool, yet both show poor detection rates on protocols other than HTTP or SMTP. Our results show that all four tools have near-perfect precision but alarmingly low recall, especially on file types other than executables and office files -- 37% of malware tested, including all polyglot files, were undetected. Priorities for researchers and takeaways for end users are given., Comment: Includes Actionable Takeaways for SOCs

The purpose of nondestructive assay in the context of nuclear safeguards is to precisely verify the declared mass of a sample of nuclear material in a noninhibitive amount of time. 237Np is a proliferation concern, and the capacity to efficiently assay samples of it is a missing piece in the verification and safeguards toolbox. The material is subject to the same safeguards as 235U, is reportable in gram quantities, and is classified as "other nuclear material" according to the United States Department of Energy. Given that 3000 kg of 237Np is annually produced in the US and the bare sphere critical mass is 40-60 kg, it is desirable to augment the safeguards toolbox with a system capable of distinguishing 10 g of 237Np in a 20-minute measurement. One measurement modality is neutron multiplicity counting, which relates the detected multiplicity count rates to the amount of fissionable material. Prior simulation work shows that an organic scintillator-based multiplicity counter can achieve the design criteria, whereas the flagship 3He-based system, the Epithermal Neutron Multiplicity Counter, requires much longer measurement times to achieve the same precision. In this work, simultaneous measurements of a 6-kg sphere of 237Np by organic scintillator- and 3He-based systems are used to confirm the trends in the simulation study; the organic scintillator-based system achieves 1% uncertainty in the neutron double multiplicity rate on the order of minutes, while the 3He-based system requires days to reach the same precision. In conclusion, the International Atomic Energy Agency should consider the development and deployment of an organic scintillator-based multiplicity counter, Comment: Institute of Nuclear Material Management Annual Conference

This paper describes mainly the 1997 version of the Solar EUV Rocket Telescope and Spectrograph (SERTS-97), a scientific experiment that operated on NASA's suborbital rocket flight 36.167-GS. Its function was to study activity on the Sun and to provide a cross calibration for the CDS instrument on the SOHO satellite. The experiment was designed, built, and tested by the Solar Physics Branch of the Laboratory for Astronomy and Solar Physics at the Goddard Space Flight Center (GSFC). Other essential sections of the rocket were built under the management of the Sounding Rockets Program Office. These sections include the electronics, timers, IGN despin, the SPARCS pointing controls, the S-19 flight course correction section, the rocket motors, the telemetry, ORSA, and OGIVE.

The Orbiter Stability Experiment (OSE) was developed to evaluate the steadiness of the STS Orbiter as a potential platform for instrumentation that would image the Sun in its extreme ultraviolet and soft X-ray radiations. We were interested in any high frequency motions of the Orbiter's orientation due to normal operations and manned activities. Preliminary results are presented of the observations. Other than the expected slow motion of the Orbiter within the specified angular deadband of 0.1 degrees during the observations, it was found that high frequency (above 1 Hz) angular motions (jitter) were not detectable at the 0.25 arc sec detection limit of the most sensitive detector, for most of the period of observation. No high frequency motions were recorded during intervals that were identified with vernier thruster firings. However, one short interval with detectable spectral power to a frequency of 10 Hz has been found to date. It has not yet been correlated with a particular activity going on at the time. The results of the observations may also be of value in assessing perturbations to the Orbiter's micro-gravity environment produced by normal operations.