检索结果-南通市图书馆

An Asset-Based Approach to Mitigate Zero-Day Ransomware Attacks

Computers, Materials & Continua 2022年第11期73卷 3003-3020页

作者： Farag Azzedin Husam Suwad Md Mahfuzur Rahman Information&Computer Science Department KFUPMDhahranKSA

This article presents an asset-based security system where security practitioners build their systems based on information they own and not solicited by observing attackers’*** security solutions rely on information coming from *** are current monitoring and detection security solutions such as intrusion prevention/detection systems and *** article envisions creating an imbalance between attackers and defenders in favor of *** such,we are proposing to flip the security game such that it will be led by defenders and not *** are proposing a security system that does not observe the behavior of the *** the contrary,we draw,plan,and follow up our own protection strategy regardless of the attack *** objective of our security system is to protect assets rather than protect against *** machine introspection is used to intercept,inspect,and analyze system *** system callbased approach is utilized to detect zero-day ransomware *** core idea is to take advantage of Xen and DRAKVUF for system call interception,and leverage system calls to detect illegal operations towards identified critical *** utilize our vision by proposing an asset-based approach to mitigate zero-day ransomware *** obtained results are promising and indicate that our prototype will achieve its goals.

关键词： Zero-day attacks ransomware system calls virtual machine introspection

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

cMonitor: VMI-Based Fine-Grained Monitoring Mechanism in Cloud

引用

Wuhan University Journal of Natural Sciences 2014年第5期19卷 393-397页

作者： ZHANG Hao ZHAO Lei XU Lai WANG Lina School of Computer/The Key Laboratory of Aerospace Information and Trusted Computing of Ministry of Education Wuhan University The State Key Laboratory for Novel Software Technology Nanjing University

For the lack of detailed semantic in prior works, a transparent fine-grained monitoring technique （cMonitor） is pro- posed. Deployed outside the virtual machines, the cMonitor util- izes the elevated privileges of the virtual machine monitor to monitor the network connection, the processes and the relationship between them in protected systems by reconstructing fine-grained system semantics. These semantics contain process states and corresponding network connection. Experimental results show that cMonitor not only can be rapidly deployed in realistic cloud, but also can effectively and universally obtain these fine-grained semantics to assist detection of some advanced network attack. Meanwhile, the network performance overhead is about 3%, which is acceptable.

关键词： transparent monitoring virtual machine introspection fine-grained semantics

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Investigating the Implications of virtualization for Digital Forensics

引用

China Communications 2010年第6期7卷 100-106页

作者： Song Zheng Jin Bo Zhu Yinghong Sun Yongqing School of Software Shanghai Jiao Tong University Shanghai 200240 China Key Laboratory of Information Network Security Ministry of Public Security People＇s Republic of China （The Third Research Institute of Ministry of Public Security） Shanghai 201204 China

Research in virtualization technology has gained significant developments in recent years, which brings not only opportunities to the forensic community, but challenges as well. This paper discusses the potential roles of virtualization in digital forensics, examines the recent progresses which use the virtualization techniques to support modem computer forensics. The influences on digital forensics caused by virtualization technology are identified. Tools and methods in common digital forensic practices are analyzed, and experiences of our practice and reflections in this field are shared.

关键词： digital forensics virtualization forensic image booting virtual machine introspection

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：