进阶软体资安云端VIS防御系统防御流程与结果.PDFVIP

: VIS Step1: ›  straceqemu-monitor VM (VM )strace VM VM Host system call qemu-monitor VM Step2: (system call) ›  1.system log ›  2.(GHSOM) system log Step 3:查 ›  Behavior Checker Policy DB system call Introspection module ›  Behavior Checker VM Step 4: ›  Behavior Checker “domain [shutdown]” “domain[destroy]” VM ›  VM ›  offline-migrate sandbox Host ›  VIS VM ! ›  1. CVE-2013-0422 ›  2. CVE-2013-0431 ›  3. DoS-hping3 ›  4. MS12-020 ›  5. SET-Web-Java-Applet ›  6. SE_Firefox_xpi rule ›  Step 1:system call ›  Step 2:system call ›  Step 3: system call rule(rule) ›  Step 4:ruleruleVM VM(if=rule) Step 2:system call Gothemsystem call,Dos- attacking Step 3: system call rule(rule) Rule System call Step 4:ruleruleVM VM(if=rule)