Tag Info

New answers tagged

0

A reasonable approach here might be to see what existing HIDS products do in this regard. If we take OSSEC as an example, per the book on their site has a long list of both files and registry keys that are monitored for changes (P84 in the linked PDF) In general windows system files are mostly in c:\windows, so a lot of files to be monitored will be in ...


0

For the database portion of your question, take a look at the NSRL: http://www.nsrl.nist.gov/new.html . As an alternate approach to the first part, you could try an approach like this: http://www.infoworld.com/article/2609643/security/to-detect-100-percent-of-malware--try-whitelisting--lite-.html .


1

No, you cannot secure data completely if the user has total control of the system and its hardware (and possibly a lot of money; attacking hardware can get quite expensive). If this is just to prevent cheating, hardcoding the encryption key in an obfuscated manner (so that strings doesn't find it) should be enough though (any student breaking that probably ...



Top 50 recent answers are included