Virtual Machines for Security

k-hell writes "Researchers from the University of Michigan are using virtual machines to 'to provide security in an operating-system-independent manner.' They have designed and implemented a replay service for virtual machines called ReVirt, which 'logs enough information to replay a long-term execution of a virtual machine instruction-by-instruction.' A system called BackTracker 'automatically identifies potential sequences of steps that occurred in an intrusion,' and they provide a nice example of BackTracker's output for an attack against a machine that they set up as a honeypot, where an attacker gained access through httpd. Here's the source code."

Comments

Re:Innovation in repeats

[American AC in Paris]

That's the first time i've ever seen a story on slashdot simultaneously sitting at the top of both the main story page and the "Older Stuff" box.

Neat effect, that.

The one under "Older Stuff" is actually a honeypost made by a virtual editor. It appears that it successfully fooled you into thinking that the post was a mistake!

Editorial integrity through obfuscation works!

Simple solution.

[gilesjuk]

Give hackers and virus authors virtual computers made of cardboard :)

Mr. Anderson.....

[DarkBlackFox]

Smith: "Surprised to see me hack your box?"

Neo: "No, but you must only realize the truth..."

Smith: "What truth?"

Neo: "There is no box" *Click*