Nucleotide sequences of the central portion of gp120, including the third hypervariable (V3) loop, were obtained from lymphocytes cocultivated with SupT1 cells from 29 AIDS patients in Bangui, Central African Republic. These sequences displayed significantly greater diversity (average distance, 23%) than has been previously observed in isolates from comparably restricted geographical areas. Isolates belonging to four major subtypes of HIV-1 were found; the only subtype not represented was the North American/European subtype B. Unlike the situation in Zaire and Uganda, where subtypes A and D account equally for virtually all isolates of HIV-1, the predominant subtypes in the Central African Republic, accounting for two-thirds of the isolates, were subtypes A (10 isolates) and E (9 isolates). Subtype E represents a group of variants that have previously been found only in Thailand. Only one isolate belonging to subtype D was found. Also recovered were two isolates of subtype C, a subtype associated with southern African and Indian isolates but not previously detected in central Africa. These isolates, although clearly clustering with subtype C, formed a distinct subset, differing from one another by 8.8% and from the Indian and South African subtype C isolates by an average of 22.5%. High interpatient, intrasubtype variation was also seen among the CAR subtype A (average pairwise difference, 19.3%) and subtype E (10.9%) isolates. The diversity of V3 sequences in this set has implications for immunization protocols that rely on the recognition of V3. This study underscores the necessity of basing intervention strategies on knowledge of the particular sequences present in the target population or geographical area.

We present WebSOS, a novel overlay-based architecture that provides guaranteed access to a web server that is targeted by a denial of service (DoS) attack. Our approach exploits two key characteristics of the web environment: its design around a human-centric interface, and the extensibility inherent in many browsers through downloadable "applets." We guarantee access to a web server for a large number of previously unknown users, without requiring preexisting trust relationships between users and the system.Our prototype requires no modifications to either servers or browsers, and makes use of graphical Turing tests, web proxies, and client authentication using the SSL/TLS protocol, all readily supported by modern browsers. We use the WebSOS prototype to conduct a performance evaluation over the Internet using PlanetLab, a testbed for experimentation with network overlays. We determine the end-to-end latency using both a Chord-based approach and our shortcut extension. Our evaluation shows the latency increase by a factor of 7 and 2 respectively, confirming our simulation results.

We study the feasibility of using Graphics Processing Units (GPUs) for cryptographic processing, by exploiting the ability for GPUs to simultaneously process large quantities of pixels, to offload symmetric key encryption from the main processor. We demonstrate the use of GPUs for applying the key stream when using stream ciphers. We also investigate the use of GPUs for block ciphers, discuss operations that make certain ciphers unsuitable for use with a GPU, and compare the performance of an OpenGL-based implementation of AES with implementations utilizing general CPUs. While we conclude that existing symmetric key ciphers are not suitable for implementation within a GPU given present APIs, we discuss the applicability of moving encryption and decryption into the GPU to image processing, including the handling of displays in thin-client applications and streaming video, in scenarios in which it is desired to limit exposure of the plaintext to within the GPU on untrusted clients.

No abstract

We present WebSOS, a novel overlay-based architecture that provides guaranteed access to a web server that is targeted by a denial of service (DoS) attack. Our approach exploits two key characteristics of the web environment: its design around a human-centric interface, and the extensibility inherent in many browsers through downloadable "applets." We guarantee access to a web server for a large number of previously unknown users, without requiring pre-existing trust relationships between users and the system, by using Reverse Graphic Turing Tests. Furthermore, our system makes it easy for service providers to charge users, providing incentives to a commercial offering of the service. Users can dynamically decide whether to use the WebSOS overlay, based on the prevailing network conditions. Our prototype requires no modifications to either servers or browsers, and makes use of graphical Turing tests, web proxies, and client authentication using the SSL/TLS protocol, all readily supported by modern browsers. We then extend this system with a credentialbased micropayment scheme that combines access control and payment authorization in one operation. Turing Tests ensure that malicious code, such as a worm, cannot abuse a user's micropayment wallet. We use the WebSOS prototype to conduct a performance evaluation over the Internet using PlanetLab, a testbed for experimentation with network overlays. We determine the end-to-end latency using both a Chord-based approach and our shortcut extension. Our evaluation shows the latency increase by a factor of 7 and 2 respectively, confirming our simulation results.