Hot answers tagged operating-systems
1
I agree with the answer that suggested the overall design of determining what is, and is not, a good system call may be difficult. Indeed, in isolation, a single system call might not be enough information.
In terms of the way Windows works, there are actually two levels of operation:
NT-level calls. These are the typical system calls you'd expect via ...
1
I just found Featherweight Virtual Machine, which is an open source sandbox implementation for windows:
http://static.usenix.org/events/vee06/full_papers/p24-yu.pdf
http://sourceforge.net/projects/fvm-rni/
Also interesting is Dune:
http://dune.scs.stanford.edu/
It implements a proof-of-concept sandbox like I described under linux using VT-x (which ...
1
Your plan is based on the flawed assumption that you can identify "bad" behavior by some kind of screening of system calls. You can't. Windows is replete with bugs, hidden features, and unexposed dependencies. As soon as you pass control to some other piece of code you didn't provide, you have absolutely no guarantee that it will do only things you ...
Only top voted, non community-wiki answers of a minimum length are eligible
