New answers tagged virtualization
0
I agree with the answer that suggested the overall design of determining what is, and is not, a good system call may be difficult. Indeed, in isolation, a single system call might not be enough information.
In terms of the way Windows works, there are actually two levels of operation:
NT-level calls. These are the typical system calls you'd expect via ...
1
I just found Featherweight Virtual Machine, which is an open source sandbox implementation for windows:
http://static.usenix.org/events/vee06/full_papers/p24-yu.pdf
http://sourceforge.net/projects/fvm-rni/
Also interesting is Dune:
http://dune.scs.stanford.edu/
It implements a proof-of-concept sandbox like I described under linux using VT-x (which ...
1
Your plan is based on the flawed assumption that you can identify "bad" behavior by some kind of screening of system calls. You can't. Windows is replete with bugs, hidden features, and unexposed dependencies. As soon as you pass control to some other piece of code you didn't provide, you have absolutely no guarantee that it will do only things you ...
-1
On the polarssl advisory: A detailed technical response can be found in the most recent debian source:
http://bazaar.launchpad.net/~ubuntu-branches/debian/experimental/haveged/experimental/revision/12?start_revid=12#debian/README.Debian
The executive summary is: polarssl != haveged != HAVEGE
On the embloms.se emulator experiments:
The haveged test suite, ...
4
(Caveat: I certainly don't claim that HAVEGE lives up to its claims. I have not checked their theory or implementation.)
To get randomness, HAVEGE and similar systems feed on "physical events", and in particular on the timing of physical events. Such events include occurrences of hardware interrupts (which, in turn, gathers data about key strokes, mouse ...
1
(Updated, with thanks to gwuertz the current author/maintainer of haveged, I missed the separation between HAVEGE and haveged.)
haveged is a distinct implementation of the HAVEGE method for generating random numbers, it is current, maintained and documented here: http://www.issihosts.com/haveged/ (and no longer uses libhavege directly).
HAVEGE isn't very ...
Top 50 recent answers are included
