Memory Forensics using Virtual Machine Introspection for Cloud Computing

Recommendations

Info

Use case Kernel level root kit detection Modifying of data structures, which display the processes currently running on the system System call interception Interrupt hooking Modifying the kernel memory image Intercepting calls handled by the VFS <strong>Virtual</strong> memory subversion
Use case Enduser VM in Iaas cloud
Page 1 and 2: Memory Forensics using Virtual Mach
Page 3 and 4: What is it about? And why do we nee
Page 5 and 6: Motivation Relocation of systems an
Page 7 and 8: Forensic Process Collection Examina
Page 9 and 10: Native vs. hosted virtualization Ap
Page 11 and 12: Semantic gap Difference between the
Page 13 and 14: Advantages No altering of the targe
Page 15 and 16: Fields of application Examples Root
Page 17 and 18: Solution approach Combining existin
Page 19 and 20: VM1 VM2 Dom U Dom U Dom 0 Hyperviso
Page 21 and 22: Open nebula extensions www.opennebu
Page 23 and 24: Forensic Process Collection Examina
Page 25 and 26: Forensic Process • OS on Cloud No
Page 27 and 28: Forensic Process • Completely on
Page 29 and 30: Disadvantages Configuration necessa
Page 31: Volatility / Libvmi usage
Page 35 and 36: Summary
Page 37 and 38: Black hat sound bytes Hypervisor fo
Page 39: Contact Tobias Zillner tobias@zilln

Memory Forensics using Virtual Machine Introspection for Cloud Computing

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?