search

gwcloudlab / evade-4.7

Test evade vm with xen-4.7
Other
0 stars 1 forks source link

Malware Detection #34

Open twood02 opened 7 years ago

twood02 commented 7 years ago

Goal:

Apps/workloads:

Metrics:

Graphs:

Key points:

leonizhen commented 7 years ago

Goal: Use LibVMI to print out process list, and compare to the existing "bad process" database to detect malicious process running. Gather information about the process (pid, memory address, etc).

Apps/workloads: LibVMI, Linux Pipes, hash table

Metrics:

Graphs:

Key points: