A framework for DNS based detection and mitigation of malware infections on a network
- Stalmans, Etienne, Irwin, Barry V W
- Authors: Stalmans, Etienne , Irwin, Barry V W
- Date: 2011
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/429827 , vital:72642 , 10.1109/ISSA.2011.6027531
- Description: Modern botnet trends have lead to the use of IP and domain fast-fluxing to avoid detection and increase resilience. These techniques bypass traditional detection systems such as blacklists and intrusion detection systems. The Domain Name Service (DNS) is one of the most prevalent protocols on modern networks and is essential for the correct operation of many network activities, including botnet activity. For this reason DNS forms the ideal candidate for monitoring, detecting and mit-igating botnet activity. In this paper a system placed at the network edge is developed with the capability to detect fast-flux domains using DNS queries. Multiple domain features were examined to determine which would be most effective in the classification of domains. This is achieved using a C5.0 decision tree classifier and Bayesian statistics, with positive samples being labeled as potentially malicious and nega-tive samples as legitimate domains. The system detects malicious do-main names with a high degree of accuracy, minimising the need for blacklists. Statistical methods, namely Naive Bayesian, Bayesian, Total Variation distance and Probability distribution are applied to detect mali-cious domain names. The detection techniques are tested against sample traffic and it is shown that malicious traffic can be detected with low false positive rates.
- Full Text:
- Date Issued: 2011
- Authors: Stalmans, Etienne , Irwin, Barry V W
- Date: 2011
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/429827 , vital:72642 , 10.1109/ISSA.2011.6027531
- Description: Modern botnet trends have lead to the use of IP and domain fast-fluxing to avoid detection and increase resilience. These techniques bypass traditional detection systems such as blacklists and intrusion detection systems. The Domain Name Service (DNS) is one of the most prevalent protocols on modern networks and is essential for the correct operation of many network activities, including botnet activity. For this reason DNS forms the ideal candidate for monitoring, detecting and mit-igating botnet activity. In this paper a system placed at the network edge is developed with the capability to detect fast-flux domains using DNS queries. Multiple domain features were examined to determine which would be most effective in the classification of domains. This is achieved using a C5.0 decision tree classifier and Bayesian statistics, with positive samples being labeled as potentially malicious and nega-tive samples as legitimate domains. The system detects malicious do-main names with a high degree of accuracy, minimising the need for blacklists. Statistical methods, namely Naive Bayesian, Bayesian, Total Variation distance and Probability distribution are applied to detect mali-cious domain names. The detection techniques are tested against sample traffic and it is shown that malicious traffic can be detected with low false positive rates.
- Full Text:
- Date Issued: 2011
African Languages And ICT Education
- Dalvit, Lorenzo, Murray, Sarah, Terzoli, Alfredo
- Authors: Dalvit, Lorenzo , Murray, Sarah , Terzoli, Alfredo
- Date: 2011
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/431166 , vital:72750 , https://www.scitepress.org/Papers/2011/33507/33507.pdf
- Description: In South Africa, English plays a dominant role compared to African lan-guages in empowering domain. Better access to Education through the use of African languages is an object of heated debate. This paper shows that an intervention involving the use of an African language in the domain of ICT Education can change the attitudes of Black universi-ty students. The methodology used included a survey with preliminary and follow-up questionnaires and interviews and an intervention involv-ing the use of localised software and of an on-line glossary of computer terms translated, explained and exemplified in an African language (isiXhosa). This experience increased the support for the use of African languages as additional LoLT, even in the English-dominated field of study of Computer Science. This is an initial step towards promoting linguistic equality between English and African languages and social equality between their speakers.
- Full Text:
- Date Issued: 2011
- Authors: Dalvit, Lorenzo , Murray, Sarah , Terzoli, Alfredo
- Date: 2011
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/431166 , vital:72750 , https://www.scitepress.org/Papers/2011/33507/33507.pdf
- Description: In South Africa, English plays a dominant role compared to African lan-guages in empowering domain. Better access to Education through the use of African languages is an object of heated debate. This paper shows that an intervention involving the use of an African language in the domain of ICT Education can change the attitudes of Black universi-ty students. The methodology used included a survey with preliminary and follow-up questionnaires and interviews and an intervention involv-ing the use of localised software and of an on-line glossary of computer terms translated, explained and exemplified in an African language (isiXhosa). This experience increased the support for the use of African languages as additional LoLT, even in the English-dominated field of study of Computer Science. This is an initial step towards promoting linguistic equality between English and African languages and social equality between their speakers.
- Full Text:
- Date Issued: 2011
An illustrated leaflet containing antiretroviral information targeted for low-literate readers: development and evaluation
- Dowse, Roslind, Ramela, Thato, Browne, Sara H
- Authors: Dowse, Roslind , Ramela, Thato , Browne, Sara H
- Date: 2011
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/156731 , vital:40043 , https://doi.org/10.1016/j.pec.2011.01.013
- Description: To apply a dual visual/textual modal approach in developing and evaluating a medicine information leaflet with pictograms suitable for low-literate HIV/AIDS patients. To identify and recommend best practices in this type of information design.
- Full Text:
- Date Issued: 2011
- Authors: Dowse, Roslind , Ramela, Thato , Browne, Sara H
- Date: 2011
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/156731 , vital:40043 , https://doi.org/10.1016/j.pec.2011.01.013
- Description: To apply a dual visual/textual modal approach in developing and evaluating a medicine information leaflet with pictograms suitable for low-literate HIV/AIDS patients. To identify and recommend best practices in this type of information design.
- Full Text:
- Date Issued: 2011
Biphenyl sorption to different soil clay minerals
- Tandlich, Roman, Baláž, Štefan
- Authors: Tandlich, Roman , Baláž, Štefan
- Date: 2011
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/76869 , vital:30632 , https://doi.org/10.5897/AJAR10.1012
- Description: Only limited information is available in the literature on the role of soil mineral surfaces in the sorption of hydrophobic organic pollutants. This knowledge gap is addressed through the assessment of biphenyl sorption to kaolinite, illite and bentonite; using the batch equilibration technique with incubations lasting 6 or 21 days at 28 ± 2°C in the dark [RT1]. Sorption of biphenyl onto kaolinite followed the Freundlich sorption isotherm, whereas linear sorption isotherms were observed on illite and bentonite [RT2]. The biphenyl sorption partition coefficient on kaolinite ranged from 0.1 to 9.1 cm3.g-1 after 6 days and no sorption was observed after 21 days. This could have been caused by a completely reversible sorption or a loss of binding capacity after 21 days [RT3]. The respective values of the biphenyl sorption partition coefficient on illite and bentonite ranged from 20.3 ± 0.3 to 120 ± 8 cm3.g-1.Sorption equilibrium on the internal clay surfaces was reached after 6 days, as indicated by the sorption data for illite and bentonite [RT4]. Access of biphenyl molecules to the internal clay surfaces is a function of the ionic strength of soil solution and the soil organic matter is the dominant site for biphenyl sorption after 6 to 21 days.
- Full Text:
- Date Issued: 2011
- Authors: Tandlich, Roman , Baláž, Štefan
- Date: 2011
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/76869 , vital:30632 , https://doi.org/10.5897/AJAR10.1012
- Description: Only limited information is available in the literature on the role of soil mineral surfaces in the sorption of hydrophobic organic pollutants. This knowledge gap is addressed through the assessment of biphenyl sorption to kaolinite, illite and bentonite; using the batch equilibration technique with incubations lasting 6 or 21 days at 28 ± 2°C in the dark [RT1]. Sorption of biphenyl onto kaolinite followed the Freundlich sorption isotherm, whereas linear sorption isotherms were observed on illite and bentonite [RT2]. The biphenyl sorption partition coefficient on kaolinite ranged from 0.1 to 9.1 cm3.g-1 after 6 days and no sorption was observed after 21 days. This could have been caused by a completely reversible sorption or a loss of binding capacity after 21 days [RT3]. The respective values of the biphenyl sorption partition coefficient on illite and bentonite ranged from 20.3 ± 0.3 to 120 ± 8 cm3.g-1.Sorption equilibrium on the internal clay surfaces was reached after 6 days, as indicated by the sorption data for illite and bentonite [RT4]. Access of biphenyl molecules to the internal clay surfaces is a function of the ionic strength of soil solution and the soil organic matter is the dominant site for biphenyl sorption after 6 to 21 days.
- Full Text:
- Date Issued: 2011
Designer ligands : the search for metal ion selectivity
- Authors: Kaye, Perry T
- Date: 2011
- Language: English
- Type: Article
- Identifier: vital:6576 , http://hdl.handle.net/10962/d1004139
- Description: The paper reviews research conducted at Rhodes University towards the development of metal-selective ligands. The research has focused on the rational design, synthesis and evaluation of novel ligands for use in the formation of copper complexes as biomimetic models of the metalloenzyme, tyrosinase, and for the selective extraction of silver, nickel and platinum group metal ions in the presence of contaminating metal ions. Attention has also been given to the development of efficient, metal-selective molecular imprinted polymers.
- Full Text:
- Date Issued: 2011
- Authors: Kaye, Perry T
- Date: 2011
- Language: English
- Type: Article
- Identifier: vital:6576 , http://hdl.handle.net/10962/d1004139
- Description: The paper reviews research conducted at Rhodes University towards the development of metal-selective ligands. The research has focused on the rational design, synthesis and evaluation of novel ligands for use in the formation of copper complexes as biomimetic models of the metalloenzyme, tyrosinase, and for the selective extraction of silver, nickel and platinum group metal ions in the presence of contaminating metal ions. Attention has also been given to the development of efficient, metal-selective molecular imprinted polymers.
- Full Text:
- Date Issued: 2011
Graduation ceremony photographs
- Authors: Nyokong, Tebello
- Date: 2010-2012
- Type: still image
- Identifier: vital:7232 , http://hdl.handle.net/10962/d1006503
- Description: Photographs taken of Prof Tebello Nyokong's students during different graduation ceremonies 2010 - 2012.
- Full Text:
- Date Issued: 2010-2012
- Authors: Nyokong, Tebello
- Date: 2010-2012
- Type: still image
- Identifier: vital:7232 , http://hdl.handle.net/10962/d1006503
- Description: Photographs taken of Prof Tebello Nyokong's students during different graduation ceremonies 2010 - 2012.
- Full Text:
- Date Issued: 2010-2012
Incorporation of Ni(II)-dimethylglyoxime ion-imprinted polymer into electrospun polysulphone nanofibre for the determination of Ni(II) ions from aqueous samples
- Rammika, M, Darko, G, Torto, N
- Authors: Rammika, M , Darko, G , Torto, N
- Date: 2011
- Language: English
- Type: Article
- Identifier: vital:6589 , http://hdl.handle.net/10962/d1004172
- Description: Ni(II)-dimethylglyoxime ion-imprinted polymer (Ni(II)-DMG IIP) was encapsulated in polysulphone and electrospun into nanofibres with diameters ranging from 406 to 854 nm. The structures of the Ni(II)-DMG encapsulated-IIP nanofibre, non-imprinted encapsulated-polymer nanofibre and polysulphone nanofibre mats were observed by scanning electron microscopy and evaluated by infrared spectroscopy. Electrospinning increased the specific surface area of the Ni(II)-DMG encapsulated-IIP nanofibre mats, as was evidenced by the low masses of the Ni(II)-DMG encapsulated-IIP nanofibre mats used. The accuracy of the method was validated by analysing a custom solution of certified reference material (SEP-3); the concentration of Ni(II) obtained was close to the certified one. The limit of detection was found to be 4.0x10-4 μg∙mℓ−1 while the limit of quantification was found to be 1.2x10-3 μg∙mℓ−1. The recovery of Ni(II) achieved using the Ni(II)-DMG imprinted nanofibre mats in water samples was found to range from 83 to 89%, while that of non-imprinted nanofibre mats was found to range from 59 to 65%, and that of polysulphone from 55 to 62%.
- Full Text:
- Date Issued: 2011
- Authors: Rammika, M , Darko, G , Torto, N
- Date: 2011
- Language: English
- Type: Article
- Identifier: vital:6589 , http://hdl.handle.net/10962/d1004172
- Description: Ni(II)-dimethylglyoxime ion-imprinted polymer (Ni(II)-DMG IIP) was encapsulated in polysulphone and electrospun into nanofibres with diameters ranging from 406 to 854 nm. The structures of the Ni(II)-DMG encapsulated-IIP nanofibre, non-imprinted encapsulated-polymer nanofibre and polysulphone nanofibre mats were observed by scanning electron microscopy and evaluated by infrared spectroscopy. Electrospinning increased the specific surface area of the Ni(II)-DMG encapsulated-IIP nanofibre mats, as was evidenced by the low masses of the Ni(II)-DMG encapsulated-IIP nanofibre mats used. The accuracy of the method was validated by analysing a custom solution of certified reference material (SEP-3); the concentration of Ni(II) obtained was close to the certified one. The limit of detection was found to be 4.0x10-4 μg∙mℓ−1 while the limit of quantification was found to be 1.2x10-3 μg∙mℓ−1. The recovery of Ni(II) achieved using the Ni(II)-DMG imprinted nanofibre mats in water samples was found to range from 83 to 89%, while that of non-imprinted nanofibre mats was found to range from 59 to 65%, and that of polysulphone from 55 to 62%.
- Full Text:
- Date Issued: 2011
Innovation through education: rediscovering the lost generation
- Authors: Pieterse, Koot
- Subjects: Business incubators , Entrepreneurship , f-sa
- Language: English
- Type: text , Lectures
- Identifier: http://hdl.handle.net/10948/20889 , vital:29411
- Description: Innovation implies the generation as well as the practical implementation of new ideas. These ideas could appear as new product opportunities, new markets or new management systems and business schools are ideally situated to promote their exploitation and implementation. This study emphasises the need for business schools to elevate innovation to one of the core values in their mission. The need for innovation in the local business environment is explored along with reasons why these opportunities have not always been pursued with the required vigour. The results of a literature study are represented, that demonstrate what initiatives on the incorporation of innovation into their activities have been taken by a selection of business schools around the world and the study is concluded by exploring similar opportunities open to the Business School of the Nelson Mandela Metropolitan University.
- Full Text:
- Authors: Pieterse, Koot
- Subjects: Business incubators , Entrepreneurship , f-sa
- Language: English
- Type: text , Lectures
- Identifier: http://hdl.handle.net/10948/20889 , vital:29411
- Description: Innovation implies the generation as well as the practical implementation of new ideas. These ideas could appear as new product opportunities, new markets or new management systems and business schools are ideally situated to promote their exploitation and implementation. This study emphasises the need for business schools to elevate innovation to one of the core values in their mission. The need for innovation in the local business environment is explored along with reasons why these opportunities have not always been pursued with the required vigour. The results of a literature study are represented, that demonstrate what initiatives on the incorporation of innovation into their activities have been taken by a selection of business schools around the world and the study is concluded by exploring similar opportunities open to the Business School of the Nelson Mandela Metropolitan University.
- Full Text:
Invasion of a headwater stream by non-native fishes in the Swartkops River system, South Africa
- Ellender, Bruce R, Weyl, Olaf L F, Swartz, Ernst R
- Authors: Ellender, Bruce R , Weyl, Olaf L F , Swartz, Ernst R
- Date: 2011
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/446866 , vital:74566 , https://doi.org/10.1080/15627020.2011.11407477
- Description: In South Africa, fishes in headwater streams are increasingly being threatened by non-native fish invasions. These invasions originate primarily from source populations in mainstream rivers and impoundments. In the Blindekloof stream, a Swartkops River headwater tributary, the non-native Micropterus salmoides was eradicated from the stream by conservation authorities in 1989. As a result of this eradication subsequent occurrences of non-native fishes are most likely a result of upstream invasions from the mainstream Swartkops River. The Blindekloof stream therefore provided a unique opportunity to investigate whether M. salmoides would reinvade after its removal in 1989 and if the more recently introduced Clarias gariepinus and Tilapia sparrmanii would invade the Blindekloof stream. During snorkel and electrofishing surveys four non-native species were recorded (M. salmoides, M. dolomieu, T. sparrmanii, C. gariepinus ).
- Full Text:
- Date Issued: 2011
- Authors: Ellender, Bruce R , Weyl, Olaf L F , Swartz, Ernst R
- Date: 2011
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/446866 , vital:74566 , https://doi.org/10.1080/15627020.2011.11407477
- Description: In South Africa, fishes in headwater streams are increasingly being threatened by non-native fish invasions. These invasions originate primarily from source populations in mainstream rivers and impoundments. In the Blindekloof stream, a Swartkops River headwater tributary, the non-native Micropterus salmoides was eradicated from the stream by conservation authorities in 1989. As a result of this eradication subsequent occurrences of non-native fishes are most likely a result of upstream invasions from the mainstream Swartkops River. The Blindekloof stream therefore provided a unique opportunity to investigate whether M. salmoides would reinvade after its removal in 1989 and if the more recently introduced Clarias gariepinus and Tilapia sparrmanii would invade the Blindekloof stream. During snorkel and electrofishing surveys four non-native species were recorded (M. salmoides, M. dolomieu, T. sparrmanii, C. gariepinus ).
- Full Text:
- Date Issued: 2011
Ontogenetic dietary shift and morphological correlates for Diplodus capensis (Teleostei Sparidae) in southern Angola
- Richardson, Timothy J, Potts, Warren M, Santos, Carmen V D, Sauer, Warwick H H
- Authors: Richardson, Timothy J , Potts, Warren M , Santos, Carmen V D , Sauer, Warwick H H
- Date: 2011
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/443984 , vital:74176 , https://doi.org/10.1080/15627020.2011.11407501
- Description: Allometric growth patterns of functional morphological variables that reflect resource use in fish were correlated with the diet of Diplodus capensis in southern Angola. A total of 114 individuals (76–336 mm FL) were collected for stomach content analysis and a further 35 individuals (80–320 mm FL) for morphometric analysis. The major dietary components belonged to the groups Chlorophyta, Cirripedia, Rhodophyta and Bivalvia, and made up 71.7% of the diet in terms of a computed ranking index. There was a clear ontogenetic dietary shift with small fish feeding predominantly on algae and large fish on barnacles and mussels. This increasingly durophagous diet corresponded with a positive allometric growth pattern in the gape dimensions (width, height and surface area), adductor mandibulae muscle process and incisor width. Conversely, the relative gut length followed an isometric growth pattern, suggesting a decreased absorptive capacity. This isometric growth pattern is attributed to the better digestibility of the durophagous prey items when compared with algae and further corroborates a link between the morphology and an ontogenetic dietary shift observed in this species.
- Full Text:
- Date Issued: 2011
- Authors: Richardson, Timothy J , Potts, Warren M , Santos, Carmen V D , Sauer, Warwick H H
- Date: 2011
- Subjects: To be catalogued
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/443984 , vital:74176 , https://doi.org/10.1080/15627020.2011.11407501
- Description: Allometric growth patterns of functional morphological variables that reflect resource use in fish were correlated with the diet of Diplodus capensis in southern Angola. A total of 114 individuals (76–336 mm FL) were collected for stomach content analysis and a further 35 individuals (80–320 mm FL) for morphometric analysis. The major dietary components belonged to the groups Chlorophyta, Cirripedia, Rhodophyta and Bivalvia, and made up 71.7% of the diet in terms of a computed ranking index. There was a clear ontogenetic dietary shift with small fish feeding predominantly on algae and large fish on barnacles and mussels. This increasingly durophagous diet corresponded with a positive allometric growth pattern in the gape dimensions (width, height and surface area), adductor mandibulae muscle process and incisor width. Conversely, the relative gut length followed an isometric growth pattern, suggesting a decreased absorptive capacity. This isometric growth pattern is attributed to the better digestibility of the durophagous prey items when compared with algae and further corroborates a link between the morphology and an ontogenetic dietary shift observed in this species.
- Full Text:
- Date Issued: 2011
Polygamy in the recognition of Customary Marriages Act:
- Authors: Vincent, Louise
- Date: 2011
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/141809 , vital:38006 , DOI: 10.1080/10130950.2009.9676275
- Description: The Recognition of Customary Marriages Act (RCMA) 1998, recognises customary marriages which are “negotiated, celebrated or concluded according to any of the systems of indigenous African customary law which exist in South Africa” including polygamous marriages. The Act arises in the context of South Africa's Constitution which bans discrimination on grounds of culture and sexual orientation and allows for heterogeneity in its definitions of marriage and the family. A pluralist approach to family jurisprudence, however, is sometimes conceived of as setting up an irresolvable tension between the constitutional commitment to gender equality and protection for patriarchal prerogatives sanctioned by customary law. The fact that rights sometimes collide with one another is one of the reasons why it is impossible always to treat rights as absolute. When rights clash the question that arises is which of the rights that find themselves in tension with one another should give way and why?
- Full Text:
- Date Issued: 2011
- Authors: Vincent, Louise
- Date: 2011
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/141809 , vital:38006 , DOI: 10.1080/10130950.2009.9676275
- Description: The Recognition of Customary Marriages Act (RCMA) 1998, recognises customary marriages which are “negotiated, celebrated or concluded according to any of the systems of indigenous African customary law which exist in South Africa” including polygamous marriages. The Act arises in the context of South Africa's Constitution which bans discrimination on grounds of culture and sexual orientation and allows for heterogeneity in its definitions of marriage and the family. A pluralist approach to family jurisprudence, however, is sometimes conceived of as setting up an irresolvable tension between the constitutional commitment to gender equality and protection for patriarchal prerogatives sanctioned by customary law. The fact that rights sometimes collide with one another is one of the reasons why it is impossible always to treat rights as absolute. When rights clash the question that arises is which of the rights that find themselves in tension with one another should give way and why?
- Full Text:
- Date Issued: 2011
Psoralea margaretiflora (Psoraleeae, Fabaceae): a new species from the Sneeuberg Centre of Floristic Endemism, Eastern Cape, South Africa
- Stirton, Charles H, Clark, Vincent Ralph, Barker, Nigel P, Muasya, A Muthama
- Authors: Stirton, Charles H , Clark, Vincent Ralph , Barker, Nigel P , Muasya, A Muthama
- Date: 2011
- Language: English
- Type: Article
- Identifier: vital:6543 , http://hdl.handle.net/10962/d1005999
- Description: A new species of Psoralea is described. Psoralea margaretiflora C.H. Stirton & V.R. Clark is endemic to the Sneeuberg Centre of Floristic Endemism, Eastern Cape, South Africa. This resprouter is characterised by its small greenish-white flowers with a small trifid purple nectar patch and translucent veins; 5(–7)-pinnate leaflets; multi-branching erect short seasonal flowering shoots; and tall habit of many stiff bare stems with the seasonal shoots massed at the apex. It is most similar to P. oligophylla Eckl. & Zeyh., a widespread species found in the Eastern Cape. The reseeder P. oligophylla differs in its lax virgate spreading habit with numerous long glaucous seasonal shoots; single stem, 1(–3)- glaucous leaflets; more numerous white flowers; and standard petals with a purple ring surrounding a bright yellow nectar patch.
- Full Text:
- Date Issued: 2011
- Authors: Stirton, Charles H , Clark, Vincent Ralph , Barker, Nigel P , Muasya, A Muthama
- Date: 2011
- Language: English
- Type: Article
- Identifier: vital:6543 , http://hdl.handle.net/10962/d1005999
- Description: A new species of Psoralea is described. Psoralea margaretiflora C.H. Stirton & V.R. Clark is endemic to the Sneeuberg Centre of Floristic Endemism, Eastern Cape, South Africa. This resprouter is characterised by its small greenish-white flowers with a small trifid purple nectar patch and translucent veins; 5(–7)-pinnate leaflets; multi-branching erect short seasonal flowering shoots; and tall habit of many stiff bare stems with the seasonal shoots massed at the apex. It is most similar to P. oligophylla Eckl. & Zeyh., a widespread species found in the Eastern Cape. The reseeder P. oligophylla differs in its lax virgate spreading habit with numerous long glaucous seasonal shoots; single stem, 1(–3)- glaucous leaflets; more numerous white flowers; and standard petals with a purple ring surrounding a bright yellow nectar patch.
- Full Text:
- Date Issued: 2011
Tartarus: A honeypot based malware tracking and mitigation framework
- Hunter, Samuel O, Irwin, Barry V W
- Authors: Hunter, Samuel O , Irwin, Barry V W
- Date: 2011
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/428629 , vital:72525 , https://d1wqtxts1xzle7.cloudfront.net/96055420/Hunter-libre.pdf?1671479103=andresponse-content-disposi-tion=inline%3B+filename%3DTartarus_A_honeypot_based_malware_tracki.pdfandExpires=1714722666andSignature=JtPpR-IoAXILqsIJSlmCEvn6yyytE17YLQBeFJRKD5aBug-EbLxFpEGDf4GtQXHbxHvR4~E-b5QtMs1H6ruSYDti9fIHenRbLeepZTx9jYj92to3qZjy7UloigYbQuw0Y6sN95jI7d4HX-Xkspbz0~DsnzwFmLGopg7j9RZSHqpSpI~fBvlml3QQ2rLCm4aB9u8tSW8du5u~FiJgiLHNgJaPzEOzy4~yfKkXBh--LTFdgeAVYxQbOESGGh9k5bc-LDJhQ6dD5HpXsM3wKJvYuVyU6m83vT2scogVgKHIr-t~XuiqL35PfI3hs2c~ZO0TH4hCqwiNMHQ8GCYsLvllsA__andKey-Pair-Id=APKAJLOHF5GGSLRBV4ZA
- Description: On a daily basis many of the hosts connected to the Internet experi-ence continuous probing and attack from malicious entities. Detection and defence from these malicious entities has primarily been the con-cern of Intrusion Detection Systems, Intrusion Prevention Systems and Anti-Virus software. These systems rely heavily on known signatures to detect nefarious traffic. Due to the reliance on known malicious signa-tures, these systems have been at a serious disadvantage when it comes to detecting new, never before seen malware. This paper will introduce Tartarus which is a malware tracking and mitigation frame-work that makes use of honeypot technology in order to detect mali-cious traffic. Tartarus implements a dynamic quarantine technique to mitigate the spread of self propagating malware on a production net-work. In order to better understand the spread and impact of internet worms Tartarus is used to construct a detailed demographic of poten-tially malicious hosts on the internet. This host demographic is in turn used as a blacklist for firewall rule creation. The sources of malicious traffic is then illustrated through the use of a geolocation based visuali-sation.
- Full Text:
- Date Issued: 2011
- Authors: Hunter, Samuel O , Irwin, Barry V W
- Date: 2011
- Language: English
- Type: text , article
- Identifier: http://hdl.handle.net/10962/428629 , vital:72525 , https://d1wqtxts1xzle7.cloudfront.net/96055420/Hunter-libre.pdf?1671479103=andresponse-content-disposi-tion=inline%3B+filename%3DTartarus_A_honeypot_based_malware_tracki.pdfandExpires=1714722666andSignature=JtPpR-IoAXILqsIJSlmCEvn6yyytE17YLQBeFJRKD5aBug-EbLxFpEGDf4GtQXHbxHvR4~E-b5QtMs1H6ruSYDti9fIHenRbLeepZTx9jYj92to3qZjy7UloigYbQuw0Y6sN95jI7d4HX-Xkspbz0~DsnzwFmLGopg7j9RZSHqpSpI~fBvlml3QQ2rLCm4aB9u8tSW8du5u~FiJgiLHNgJaPzEOzy4~yfKkXBh--LTFdgeAVYxQbOESGGh9k5bc-LDJhQ6dD5HpXsM3wKJvYuVyU6m83vT2scogVgKHIr-t~XuiqL35PfI3hs2c~ZO0TH4hCqwiNMHQ8GCYsLvllsA__andKey-Pair-Id=APKAJLOHF5GGSLRBV4ZA
- Description: On a daily basis many of the hosts connected to the Internet experi-ence continuous probing and attack from malicious entities. Detection and defence from these malicious entities has primarily been the con-cern of Intrusion Detection Systems, Intrusion Prevention Systems and Anti-Virus software. These systems rely heavily on known signatures to detect nefarious traffic. Due to the reliance on known malicious signa-tures, these systems have been at a serious disadvantage when it comes to detecting new, never before seen malware. This paper will introduce Tartarus which is a malware tracking and mitigation frame-work that makes use of honeypot technology in order to detect mali-cious traffic. Tartarus implements a dynamic quarantine technique to mitigate the spread of self propagating malware on a production net-work. In order to better understand the spread and impact of internet worms Tartarus is used to construct a detailed demographic of poten-tially malicious hosts on the internet. This host demographic is in turn used as a blacklist for firewall rule creation. The sources of malicious traffic is then illustrated through the use of a geolocation based visuali-sation.
- Full Text:
- Date Issued: 2011
- «
- ‹
- 1
- ›
- »