Artículos relacionados a Automated Virtual Machine Introspection for Host-Based...

Automated Virtual Machine Introspection for Host-Based Intrusion Detection - Tapa blanda

Pagel, Brett A.

 
9781249836421: Automated Virtual Machine Introspection for Host-Based Intrusion Detection

Sinopsis

This thesis examines techniques to automate configuration of an intrusion detection system utilizing hardware-assisted virtualization. These techniques are used to detect the version of a running guest operating system, automatically configure version-specific operating system information needed by the introspection library, and to locate and monitor important operating system data structures. This research simplifies introspection library configuration and is a step toward operating system independent introspection. An operating system detection algorithm and Windows virtual machine system service dispatch table monitor are implemented using the Xen hypervisor and a modified version of the XenAccess library. All detection and monitoring is implemented from the Xen management domain.

"Sinopsis" puede pertenecer a otra edición de este libro.

Reseña del editor

This thesis examines techniques to automate configuration of an intrusion detection system utilizing hardware-assisted virtualization. These techniques are used to detect the version of a running guest operating system, automatically configure version-specific operating system information needed by the introspection library, and to locate and monitor important operating system data structures. This research simplifies introspection library configuration and is a step toward operating system independent introspection. An operating system detection algorithm and Windows virtual machine system service dispatch table monitor are implemented using the Xen hypervisor and a modified version of the XenAccess library. All detection and monitoring is implemented from the Xen management domain.

"Sobre este título" puede pertenecer a otra edición de este libro.