Space Traveling across VM
|
|
|
- Erick Merritt
- 5 years ago
- Views:
Transcription
1 Space Traveling across VM Automatically Bridging the Semantic-Gap in Virtual Machine Introspection via Online Kernel Data Redirection Yangchun Fu, and Zhiqiang Lin Department of Computer Sciences The University of Texas at Dallas May 23 rd, 2012
2 Outline 1 Background and The Problem 2 State-of-the-Art 3 Our Approach: Data Space Traveling 4 Conclusion
3 Cloud Runs Virtual Machines (VM) Windows XP.. Linux Win 7 Product VM Product VM Product VM Virtualization Layer Hardware Layer
4 Cloud Runs Virtual Machines (VM) Windows XP Linux Win 7.. Product VM Product VM Product VM Virtualization Layer Consolidation, Multiplexing, Migration, Isolation, Encapsulation, Interposition, Security, Reliability, Dependability... Hardware Layer
5 Cloud Runs Virtual Machines (VM) Windows XP Linux Win 7.. Product VM Product VM Product VM Virtualization Layer Hardware Layer Consolidation, Multiplexing, Migration, Isolation, Encapsulation, Interposition, Security, Reliability, Dependability... VMI [Garfinkel and Rosenblum, NDSS 03]
6 Virtual Machine Introspection (VMI) [Garfinkel and Rosenblum] A Trusted OS Linux Win 7.. Secure VM Product VM Product VM Introspect Virtualization Layer Hardware Layer
7 Virtual Machine Introspection (VMI) [Garfinkel and Rosenblum] A Trusted OS.. Linux Win 7 Using a trusted, isolated, dedicated VM to monitor other VMs Secure VM Product VM Product VM Introspect Virtualization Layer Hardware Layer
8 Virtual Machine Introspection (VMI) [Garfinkel and Rosenblum] A Trusted OS.. Linux Win 7 Using a trusted, isolated, dedicated VM to monitor other VMs Secure VM Product VM Product VM Introspect Virtualization Layer Intrusion Detection Malware Analysis Memory Forensics Hardware Layer
9 Virtual Machine Introspection (VMI) [Garfinkel and Rosenblum] A Trusted OS.. Linux Win 7 Using a trusted, isolated, dedicated VM to monitor other VMs Secure VM Product VM Product VM Introspect Virtualization Layer Hardware Layer Intrusion Detection Malware Analysis Memory Forensics Semantic Gap Problem
10 The Semantic Gap in VMI ([Chen and Noble HotOS 01]) A Trusted OS Linux.. Secure VM Introspect Product VM Semantic Gap
11 The Semantic Gap in VMI ([Chen and Noble HotOS 01]) A Trusted OS Linux.. Secure VM Introspect Product VM Semantic Gap View exposed by Virtual Machine Monitor is at low-level
12 The Semantic Gap in VMI ([Chen and Noble HotOS 01]) A Trusted OS Linux Secure VM.. Introspect Product VM Semantic Gap View exposed by Virtual Machine Monitor is at low-level There is no abstraction and no APIs
13 The Semantic Gap in VMI ([Chen and Noble HotOS 01]) A Trusted OS Linux Secure VM.. Introspect Product VM Semantic Gap View exposed by Virtual Machine Monitor is at low-level There is no abstraction and no APIs Need to reconstruct the guest-os abstraction
14 Example: Inspect pids of Guest Memory from VMM DISK Virtual Machine Monitor Layer eb 40 1b f cc v c d0 50 b e d0 53 8b..f..P...f..S d9 ff 2d f 20 c0 0f ba f0 1f 0f " c0 eb 00 b c0 0f 32 0f ba f0 08 0f f 20 e0 0f ba f0 05 0f 22 e0 60 9c 8b d3 c1 ea....".` a f f 01...v b b 8b 3c b c b...<...t a0 b b fb 81 c b f9 f b0 a4 0f 01 9b f h...f c0 b e d8 66 8e c0 66 8e d0 66 8e e f..f..f..f..f * 00100f f0 ff 5d 76 e3 f0 2f...]v../ 00100f70 93 c9 a4 1d f9 48 be f8 6c c7 1d 92 4c 1e 6e 35...H..l...L.n f80 b4 f8 1b ae f6 69 e8 c0 b a1 4e 5a a i...4t.NZ f f f3 47 cf d7 10 df f0 d6 e3 9b f5 cf a9 23./.G...# 00100fa0 cd 9f 87 4f 37 7f 1e f1 fe dc 7d b9 f9 f3 7b ef...o7...}...{ fb0 cf 95 bf 94 3f 8d 63 9a cc 8a 36 5b 56 7b d ?.c...6[V{.v 00100fc0 b6 d9 ad ee 61 f6 90 a4 2c 2b de 3d a9...a...,+tf7.= fd0 b9 d e 7a b5 ce ef 0c 58 ee 4d 30 d0 9b..g7.z...X.M fe0 c0 6e bc e7 3d f3 e7 d0 9a bf a4 82 1b c7 9c f1.n..= ff0 db 66 2b d8 38 cb 2a ad 7d 25 d8 0a e5 db.f+.8.*...}%...
15 Example: Inspect pids of Guest Memory from VMM DISK Virtual Machine Monitor Layer eb 40 1b f cc v c d0 50 b e d0 53 8b..f..P...f..S d9 ff 2d f 20 c0 0f ba f0 1f 0f " c0 eb 00 b c0 0f 32 0f ba f0 08 0f f 20 e0 0f ba f0 05 0f 22 e0 60 9c 8b d3 c1 ea....".` a f f 01...v b b 8b 3c b c b...<...t a0 b b fb 81 c b f9 f b0 a4 0f 01 9b f h...f c0 b e d8 66 8e c0 66 8e d0 66 8e e f..f..f..f..f * 00100f f0 ff 5d 76 e3 f0 2f...]v../ 00100f70 93 c9 a4 1d f9 48 be f8 6c c7 1d 92 4c 1e 6e 35...H..l...L.n f80 b4 f8 1b ae f6 69 e8 c0 b a1 4e 5a a i...4t.NZ f f f3 47 cf d7 10 df f0 d6 e3 9b f5 cf a9 23./.G...# 00100fa0 cd 9f 87 4f 37 7f 1e f1 fe dc 7d b9 f9 f3 7b ef...o7...}...{ fb0 cf 95 bf 94 3f 8d 63 9a cc 8a 36 5b 56 7b d ?.c...6[V{.v 00100fc0 b6 d9 ad ee 61 f6 90 a4 2c 2b de 3d a9...a...,+tf7.= fd0 b9 d e 7a b5 ce ef 0c 58 ee 4d 30 d0 9b..g7.z...X.M fe0 c0 6e bc e7 3d f3 e7 d0 9a bf a4 82 1b c7 9c f1.n..= ff0 db 66 2b d8 38 cb 2a ad 7d 25 d8 0a e5 db.f+.8.*...}%...
16 Example: Inspect pids of Guest Memory from VMM In Kernel DISK Virtual Machine Monitor Layer eb 40 1b f cc v c d0 50 b e d0 53 8b..f..P...f..S d9 ff 2d f 20 c0 0f ba f0 1f 0f " c0 eb 00 b c0 0f 32 0f ba f0 08 0f f 20 e0 0f ba f0 05 0f 22 e0 60 9c 8b d3 c1 ea....".` a f f 01...v b b 8b 3c b c b...<...t a0 b b fb 81 c b f9 f b0 a4 0f 01 9b f h...f c0 b e d8 66 8e c0 66 8e d0 66 8e e f..f..f..f..f * 00100f f0 ff 5d 76 e3 f0 2f...]v../ 00100f70 93 c9 a4 1d f9 48 be f8 6c c7 1d 92 4c 1e 6e 35...H..l...L.n f80 b4 f8 1b ae f6 69 e8 c0 b a1 4e 5a a i...4t.NZ f f f3 47 cf d7 10 df f0 d6 e3 9b f5 cf a9 23./.G...# 00100fa0 cd 9f 87 4f 37 7f 1e f1 fe dc 7d b9 f9 f3 7b ef...o7...}...{ fb0 cf 95 bf 94 3f 8d 63 9a cc 8a 36 5b 56 7b d ?.c...6[V{.v 00100fc0 b6 d9 ad ee 61 f6 90 a4 2c 2b de 3d a9...a...,+tf7.= fd0 b9 d e 7a b5 ce ef 0c 58 ee 4d 30 d0 9b..g7.z...X.M fe0 c0 6e bc e7 3d f3 e7 d0 9a bf a4 82 1b c7 9c f1.n..= ff0 db 66 2b d8 38 cb 2a ad 7d 25 d8 0a e5 db.f+.8.*...}%... struct task_struct {... [188] pid_t pid; [192] pid_t tgid;... [356] uid_t uid; [360] uid_t euid; [364] uid_t suid; [368] uid_t fsuid; [372] gid_t gid; [376] gid_t egid; [380] gid_t sgid; [384] gid_t fsgid;... [428] char comm[16];... } SIZE: 1408
17 Example: Inspect pids of Guest Memory from VMM In Kernel eb 40 1b f cc v c d0 50 b e d0 53 8b..f..P...f..S d9 ff 2d f 20 c0 0f ba f0 1f 0f " c0 eb 00 b c0 0f 32 0f ba f0 08 0f f 20 e0 0f ba f0 05 0f 22 e0 60 9c 8b d3 c1 ea....".` a f f 01...v b b 8b 3c b c b...<...t a0 b b fb 81 c b f9 f b0 a4 0f 01 9b f h...f c0 b e d8 66 8e c0 66 8e d0 66 8e e f..f..f..f..f * DISK 00100f f0 ff 5d 76 e3 f0 2f...]v../ 00100f70 93 c9 a4 1d f9 48 be f8 6c c7 1d 92 4c 1e 6e 35...H..l...L.n f80 b4 f8 1b ae f6 69 e8 c0 b a1 4e 5a a i...4t.NZ f f f3 47 cf d7 10 df f0 d6 e3 9b f5 cf a9 23./.G...# 00100fa0 cd 9f 87 4f 37 7f 1e f1 fe dc 7d b9 f9 f3 7b ef...o7...}...{ fb0 cf 95 bf 94 3f 8d 63 9a cc 8a 36 5b 56 7b d ?.c...6[V{.v 00100fc0 b6 d9 ad ee 61 f6 90 a4 2c 2b de 3d a9...a...,+tf7.= fd0 b9 d e 7a b5 ce ef 0c 58 ee 4d 30 d0 9b..g7.z...X.M fe0 c0 6e bc e7 3d f3 e7 d0 9a bf a4 82 1b c7 9c f1.n..= ff0 db 66 2b d8 38 cb 2a ad 7d 25 d8 0a e5 db.f+.8.*...}%... Virtual Machine Monitor Layer Kernel specific data structure definition Kernel symbols (global variable) Virtual to physical (V2P) translation struct task_struct {... [188] pid_t pid; [192] pid_t tgid;... [356] uid_t uid; [360] uid_t euid; [364] uid_t suid; [368] uid_t fsuid; [372] gid_t gid; [376] gid_t egid; [380] gid_t sgid; [384] gid_t fsgid;... [428] char comm[16];... } SIZE: 1408
18 State-of-the-art The Semantic Gap [Chen et al, HotOS 01]
19 State-of-the-art The Semantic Gap [Chen et al, HotOS 01] In HotOS 01, Chen and Noble first raised the semantic gap problem in virtualization
20 State-of-the-art The Semantic Gap [Chen et al, HotOS 01] In HotOS 01, Chen and Noble first raised the semantic gap problem in virtualization Services in the VM operate below the abstractions provided by the guest OS... This can make it difficult to provide services.
21 State-of-the-art VMI [Garfinkel et al, NDSS 03] The Semantic Gap [Chen et al, HotOS 01]
22 State-of-the-art VMI [Garfinkel et al, NDSS 03] The Semantic Gap [Chen et al, HotOS 01] In NDSS 03, Garfinkel et al. first proposed VMI, demonstrated for IDS Introspection routine is based on crash utility
23 State-of-the-art VMI [Garfinkel et al, NDSS 03] The Semantic Gap [Chen et al, HotOS 01] VMWatcher [Jiang et al, CCS 07]
![[Chen et al, HotOS 01] In CCS 07,](/docs-images/95/124333816/images/24-4.jpg "Jiang et al.")
24 State-of-the-art VMI [Garfinkel et al, NDSS 03] The Semantic Gap [Chen et al, HotOS 01] In CCS 07, Jiang et al. proposed VMwatcher Introspection routine is based on manually created code VMWatcher [Jiang et al, CCS 07] Target VM Target Kernel VMwatcher Virtual Machine Monitor
25 State-of-the-art VMI [Garfinkel et al, NDSS 03] SBCFI [Petroni et al, CCS 07] The Semantic Gap [Chen et al, HotOS 01] VMWatcher [Jiang et al, CCS 07]
![State-of-the-art VMI [Garfinkel et al, NDSS 03] SBCFI [Petroni et al, CCS 07] The](/docs-images/95/124333816/images/26-3.jpg "Semantic Gap [Chen et al, HotOS 01] In CCS 07, Petroni et al.")
26 State-of-the-art VMI [Garfinkel et al, NDSS 03] SBCFI [Petroni et al, CCS 07] The Semantic Gap [Chen et al, HotOS 01] In CCS 07, Petroni et al. proposed SBCFI Introspection routine is based on customized kernel source code VMWatcher [Jiang et al, CCS 07] Target VM User App Target Kernel Monitor VM CFI Monitor OS Kernel Virtual Machine Monitor
27 State-of-the-art VMI [Garfinkel et al, NDSS 03] SBCFI [Petroni et al, CCS 07] The Semantic Gap [Chen et al, HotOS 01] VMWatcher Virtuoso [Jiang et al, CCS 07] [Dolan Gavitt et al., SP 11]
![State-of-the-art VMI [Garfinkel et al, NDSS 03] SBCFI [Petroni et al, CCS 07] The Semantic Gap [Chen et al, HotOS](/docs-images/95/124333816/images/28-0.jpg "01] In SP 11, Dolan-Gavitt et al.")
28 State-of-the-art VMI [Garfinkel et al, NDSS 03] SBCFI [Petroni et al, CCS 07] The Semantic Gap [Chen et al, HotOS 01] In SP 11, Dolan-Gavitt et al. proposed Virtuoso Introspection routine is based on the trained user level and kernel level code VMWatcher [Jiang et al, CCS 07] Security VM Runtime Introspection Program Virtuoso [Dolan Gavitt et al., SP 11] Overview C O P Y O N W R I T E Runtime Phase Untrusted VM User Kernel Oakland 11 Virtuoso 5/24/
29 State-of-the-art VMI [Garfinkel et al, NDSS 03] SBCFI [Petroni et al, CCS 07] VMST [Our solution, SP 12] The Semantic Gap [Chen et al, HotOS 01] VMWatcher Virtuoso [Jiang et al, CCS 07] [Dolan Gavitt et al., SP 11]
30 State-of-the-art VMI [Garfinkel et al, NDSS 03] SBCFI [Petroni et al, CCS 07] VMST [Our solution, SP 12] The Semantic Gap [Chen et al, HotOS 01] VMWatcher Virtuoso [Jiang et al, CCS 07] [Dolan Gavitt et al., SP 11] In SP 12, we propose VM Space Traveler (VMST). Introspection routine is automatically generated from the native user level and kernel level code lsmod ps Syscall Execution Context Identification Common Utilities Kernel Data Redirection Kernel Secure-VM netstat... Redirectable Data Identification Introspection C R/W O R/O W VM-Space Traveler Kernel Data Applications Product-VM... Kernel Code
31 Key Idea Data can be transferred In Internet, data is transferred though network packet
32 Key Idea Data can be transferred In Internet, data is transferred though network packet Insight An inspection program P(µ, k) is often composed of static binary code P, runtime dynamic user-level data µ (including user-level stack, heap, and global variables), and inspected kernel data k.
33 Key Idea Data can be transferred In Internet, data is transferred though network packet Insight An inspection program P(µ, k) is often composed of static binary code P, runtime dynamic user-level data µ (including user-level stack, heap, and global variables), and inspected kernel data k. Transfer kernel space data k from one machine to the other
34 Key Idea Data can be transferred In Internet, data is transferred though network packet Insight An inspection program P(µ, k) is often composed of static binary code P, runtime dynamic user-level data µ (including user-level stack, heap, and global variables), and inspected kernel data k. Transfer kernel space data k from one machine to the other mov eax, [0x1c0eff08]
35 Principles Principles P (µ, k) = P(µ, k ), where P is the new introspection program P is the old inspection program µ is the user level data k is the kernel data bing inspected k is from other machine
36 Principles Principles P (µ, k) = P(µ, k ), where P is the new introspection program P is the old inspection program µ is the user level data k is the kernel data bing inspected k is from other machine Outcome We reuse legacy binary code of P to automatically generate new program P
37 How?
38 How? strace of a getpid program 1 execve("./getpid",..) = 0 2 brk(0) = 0x83b access("/etc/ld.so.nohwcap",..) = getpid() = write(1, "pid=13849\n", 10) = exit_group(0) =?
39 How? strace of a getpid program 1 execve("./getpid",..) = 0 2 brk(0) = 0x83b access("/etc/ld.so.nohwcap",..) = getpid() = write(1, "pid=13849\n", 10) = exit_group(0) =? Three Key Components Syscall execution context identification
40 How? strace of a getpid program 1 execve("./getpid",..) = 0 2 brk(0) = 0x83b access("/etc/ld.so.nohwcap",..) = getpid() = write(1, "pid=13849\n", 10) = exit_group(0) =? Three Key Components Syscall execution context identification Redirectable data identification
41 How? strace of a getpid program 1 execve("./getpid",..) = 0 2 brk(0) = 0x83b access("/etc/ld.so.nohwcap",..) = getpid() = write(1, "pid=13849\n", 10) = exit_group(0) =? Three Key Components Syscall execution context identification Redirectable data identification Kernel data redirection
42 How? strace of a getpid program lsmod ps netstat... 1 execve("./getpid",..) = 0 2 brk(0) = 0x83b access("/etc/ld.so.nohwcap",..) = getpid() = write(1, "pid=13849\n", 10) = exit_group(0) =? Common Utilities Three Key Components Syscall execution context identification Redirectable data identification Kernel data redirection Syscall Execution Context Identification Kernel Data Redirection Kernel Secure-VM Redirectable Data Identification
43 I. Syscall Execution Context Identification
44 I. Syscall Execution Context Identification sysenter/int 0x80 Interrupt Handler Exception Handler Syscall Service Routine Context Switch sysexit/iretd
45 I. Syscall Execution Context Identification sysenter/int 0x80 Exception Handler Interrupt Handler Syscall Service Routine Context Switch One intuitive approach Hard-code all the starting and ending PC of Interrupt sysexit/iretd Exception Context switch
46 I. Syscall Execution Context Identification sysenter/int 0x80 Exception Handler Interrupt Handler Syscall Service Routine Context Switch One intuitive approach Hard-code all the starting and ending PC of Interrupt sysexit/iretd Exception Context switch Our OS-agnostic solution Instrument VMM interrupt/exception handler to capture the starting and ending point of interrupt/exception
47 I. Syscall Execution Context Identification sysenter/int 0x80 Exception Handler Interrupt Handler Syscall Service Routine Context Switch One intuitive approach Hard-code all the starting and ending PC of Interrupt sysexit/iretd Exception Context switch Our OS-agnostic solution Instrument VMM interrupt/exception handler to capture the starting and ending point of interrupt/exception Disable the context switch by disabling the timer
48 II. Redirectable Data Identification
49 II. Redirectable Data Identification Challenges Identify kernel stack data (kernel control flow related)
50 II. Redirectable Data Identification Challenges Identify kernel stack data (kernel control flow related) Differentiate kernel stack, heap, and global variable
51 II. Redirectable Data Identification Challenges Identify kernel stack data (kernel control flow related) Differentiate kernel stack, heap, and global variable Differentiate kernel code and data
52 II. Redirectable Data Identification Challenges Identify kernel stack data (kernel control flow related) Differentiate kernel stack, heap, and global variable Differentiate kernel code and data Our solution: a variant of dynamic data flow analysis Identify the kernel global and kernel heap (derived from kernel global), and redirect their memory access
53 II. Redirectable Data Identification Challenges Identify kernel stack data (kernel control flow related) Differentiate kernel stack, heap, and global variable Differentiate kernel code and data Our solution: a variant of dynamic data flow analysis Identify the kernel global and kernel heap (derived from kernel global), and redirect their memory access Alternatively, identify only the stack variable (derived from esp), and no redirection for them.
54 III. Kernel Data Redirection
55 III. Kernel Data Redirection lsmod ps netstat... Common Utilities Syscall Execution Context Identification Redirectable Data Identification Kernel Data Redirection Kernel Secure-VM xecve("/sbin/lsmod", ["lsmod"],..) = 0
56 III. Kernel Data Redirection lsmod ps netstat... The Algorithm Syscall Execution Context Identification Common Utilities Kernel Data Redirection Kernel Secure-VM Redirectable Data Identification 1: DynamicInstInstrument(i): 2: if SysExecContext(s): 3: if SysRedirect(s): 4: RedirectableDataTracking(i); 5: for α in MemoryAddress(i): 6: if DataRead(α): 7: PA(α) V2P(α) 8: Load(PA(α)) 9: else: 10: if NotDirty(α): 11: CopyOnWritePage(α) 12: UpdatePageEntryInSTLB(α) 13: PA(α) V2P(α) 14: Store(PA(α)) xecve("/sbin/lsmod", ["lsmod"],..) = 0
57 Architecture lsmod ps netstat... Introspection... Common Utilities Applications Syscall Execution Context Identification Kernel Data Redirection Redirectable Data Identification R/W C O W R/O Kernel Data Kernel Code Kernel Secure-VM VM-Space Traveler Product-VM
58 Automatic VMI Tool Generation Utilities Syntax? Semantics? Description w/ options (diff) (Manual) ps -A Reports a snapshot of all processes lsmod Shows the status of modules lsof -c p Lists opened files by a process p ipcs Displays IPC facility status netstat -s Displays network statistics uptime Reports how long the system running ifconfig Reports network interface parameters uname -a Displays system information arp Displays ARP tables free Displays amount of free memory date Print the system date and time pidstat Reports statistics for Linux tasks mpstat Reports CPU related statistics iostat Displays I/O statistics vmstat Displays VM statistics
59 Performance Overhead 100% w/o VMI w/ VMI Normalized Performance Overhead 80% 60% 40% 20% 0% ps lsmod ipcs uptime uname ifconfig arp date pidstat mpstat iostat vmstat netstat ugetpid Benchmark Program
60 OS-Agnostic Testing Linux Distribution Kernel Version Release Date OS-agnostic? LOC Redhat /28/ Fedora fc6 10/14/ Fedora rc1.fc15 05/09/ OpenSUSE default 09/13/ /10/ OpenSUSE default 02/17/ /03/ Debian /07/ Debian /17/ Debian /22/ rc8 02/09/ Ubuntu /14/ Ubuntu /29/ Ubuntu /09/ /15/ /05/ /22/ /27/ Ubuntu generic 06/03/ Ubuntu generic 08/05/2011 0
61 Limitations and Future Work Limitations Need an identical trusted kernel Not entirely transparent to arbitrary OS kernels (relies on syscall knowledge) Non-blocking system call Does not inspect any disk data, memory swapped to disk
62 Limitations and Future Work Limitations Need an identical trusted kernel Not entirely transparent to arbitrary OS kernels (relies on syscall knowledge) Non-blocking system call Does not inspect any disk data, memory swapped to disk Future Work Kernel version inference in cloud VM Porting to Windows OS Addressing the non-blocking issue
63 Conclusion VMST has automatically bridged the semantic gap, and automatically generated the introspection tools by reusing the legacy code (no training involved)
64 Conclusion VMST has automatically bridged the semantic gap, and automatically generated the introspection tools by reusing the legacy code (no training involved) It also enables native VMI tool development.
65 Conclusion VMST has automatically bridged the semantic gap, and automatically generated the introspection tools by reusing the legacy code (no training involved) It also enables native VMI tool development. (We hope) Cloud/VM/OS Providers, and AV-Software Vendors, could benefit from our techniques (for VMI and memory forensics).
66 Thank You lsmod ps netstat... Introspection... Common Utilities Applications Syscall Execution Context Identification Kernel Data Redirection Redirectable Data Identification R/W C O W R/O Kernel Data Kernel Code Kernel Secure-VM VM-Space Traveler Product-VM zhiqiang.lin@utdallas.edu
Problem System administration tasks on a VM from the outside, e.g., issue administrative commands such as hostname and rmmod. One step ahead tradition
EXTERIOR: Using a Dual-VM Based External Shell for Guest-OS Introspection, Configuration, and Recovery ACM VEE 13 Problem System administration tasks on a VM from the outside, e.g., issue administrative
CIS-331 Fall 2014 Exam 1 Name: Total of 109 Points Version 1
Version 1 1. (24 Points) Show the routing tables for routers A, B, C, and D. Make sure you account for traffic to the Internet. Router A Router B Router C Router D Network Next Hop Next Hop Next Hop Next
CIS-331 Fall 2013 Exam 1 Name: Total of 120 Points Version 1
Version 1 1. (24 Points) Show the routing tables for routers A, B, C, and D. Make sure you account for traffic to the Internet. NOTE: Router E should only be used for Internet traffic. Router A Router
Overview REWARDS TIE HOWARD Summary CS 6V Data Structure Reverse Engineering. Zhiqiang Lin
CS 6V81-05 Data Structure Reverse Engineering Zhiqiang Lin Department of Computer Science The University of Texas at Dallas September 2 nd, 2011 Outline 1 Overview 2 REWARDS 3 TIE 4 HOWARD 5 Summary Outline
Virtual Machine Introspection Bhushan Jain
Virtual Machine Introspection Bhushan Jain Computer Science Department Stony Brook University 1 Traditional Environment Operating System 2 Traditional Environment Process Descriptors Kernel Heap Operating
CIS-331 Spring 2016 Exam 1 Name: Total of 109 Points Version 1
Version 1 Instructions Write your name on the exam paper. Write your name and version number on the top of the yellow paper. Answer Question 1 on the exam paper. Answer Questions 2-4 on the yellow paper.
CIS-331 Exam 2 Fall 2015 Total of 105 Points Version 1
Version 1 1. (20 Points) Given the class A network address 117.0.0.0 will be divided into multiple subnets. a. (5 Points) How many bits will be necessary to address 4,000 subnets? b. (5 Points) What is
OS-SOMMELIER: Memory-Only Operating System Fingerprinting in the Cloud
OS-SOMMELIER: Memory-Only Operating System Fingerprinting in the Cloud Yufei Gu, Yangchun Fu, Aravind Prakash Dr. Zhiqiang Lin, Dr. Heng Yin University of Texas at Dallas Syracuse University October 16
4. Specifications and Additional Information
4. Specifications and Additional Information AGX52004-1.0 8B/10B Code This section provides information about the data and control codes for Arria GX devices. Code Notation The 8B/10B data and control
CIS-331 Exam 2 Fall 2014 Total of 105 Points. Version 1
Version 1 1. (20 Points) Given the class A network address 119.0.0.0 will be divided into a maximum of 15,900 subnets. a. (5 Points) How many bits will be necessary to address the 15,900 subnets? b. (5
Toward Guest OS Writable Virtual Machine Introspection
Toward Guest OS Writable Virtual Machine Introspection Zhiqiang Lin The University of Texas at Dallas zhiqiang.lin@utdallas.edu Abstract Over the past decade, a great deal of research on virtual machine
OS Security IV: Virtualization and Trusted Computing
1 OS Security IV: Virtualization and Trusted Computing Chengyu Song Slides modified from Dawn Song 2 Administrivia Lab2 More questions? 3 Virtual machine monitor +-----------+----------------+-------------+
CSE543 - Computer and Network Security Module: Virtualization
CSE543 - Computer and Network Security Module: Virtualization Professor Trent Jaeger CSE543 - Introduction to Computer and Network Security 1 Operating System Quandary Q: What is the primary goal of system
CSE543 - Computer and Network Security Module: Virtualization
CSE543 - Computer and Network Security Module: Virtualization Professor Trent Jaeger CSE543 - Introduction to Computer and Network Security 1 1 Operating System Quandary Q: What is the primary goal of
CIS-331 Final Exam Spring 2015 Total of 115 Points. Version 1
Version 1 1. (25 Points) Given that a frame is formatted as follows: And given that a datagram is formatted as follows: And given that a TCP segment is formatted as follows: Assuming no options are present
CIS-331 Exam 2 Spring 2016 Total of 110 Points Version 1
Version 1 1. (20 Points) Given the class A network address 121.0.0.0 will be divided into multiple subnets. a. (5 Points) How many bits will be necessary to address 8,100 subnets? b. (5 Points) What is
Extended Page Tables (EPT) A VMM must protect host physical memory Multiple guest operating systems share the same host physical memory VMM typically implements protections through page-table shadowing
Overview of System Virtualization: The most powerful platform for program analysis and system security. Zhiqiang Lin
CS 6V81-05: System Security and Malicious Code Analysis Overview of System Virtualization: The most powerful platform for program analysis and system security Zhiqiang Lin Department of Computer Science
Virtuoso: Narrowing the Semantic Gap in Virtual Machine Introspection
Virtuoso: Narrowing the Semantic Gap in Virtual Machine Introspection Brendan Dolan-Gavitt *, Tim Leek, Michael Zhivich, Jonathon Giffin *, and Wenke Lee * * Georgia Institute of Technology MIT Lincoln
CIS 5373 Systems Security
CIS 5373 Systems Security Topic 3.1: OS Security Basics of secure design Endadul Hoque Slide Acknowledgment Contents are based on slides from Ninghui Li (Purdue), John Mitchell (Stanford), Dan Boneh (Stanford)
The cache is 4-way set associative, with 4-byte blocks, and 16 total lines
Sample Problem 1 Assume the following memory setup: Virtual addresses are 20 bits wide Physical addresses are 15 bits wide The page size if 1KB (2 10 bytes) The TLB is 2-way set associative, with 8 total
ECHO Process Instrumentation, Inc. Modbus RS485 Module. Operating Instructions. Version 1.0 June 2010
ECHO Process Instrumentation, Inc. Modbus RS485 Module Operating Instructions Version 1.0 June 2010 ECHO Process Instrumentation, Inc. PO Box 800 Shalimar, FL 32579 PH: 850-609-1300 FX: 850-651-4777 EM:
1 Virtualization Recap
1 Virtualization Recap 2 Recap 1 What is the user part of an ISA? What is the system part of an ISA? What functionality do they provide? 3 Recap 2 Application Programs Libraries Operating System Arrows?
CSE543 - Computer and Network Security Module: Virtualization
CSE543 - Computer and Network Security Module: Virtualization Professor Trent Jaeger CSE543 - Introduction to Computer and Network Security 1 Operating System Quandary Q: What is the primary goal of system
APPLESHARE PC UPDATE INTERNATIONAL SUPPORT IN APPLESHARE PC
APPLESHARE PC UPDATE INTERNATIONAL SUPPORT IN APPLESHARE PC This update to the AppleShare PC User's Guide discusses AppleShare PC support for the use of international character sets, paper sizes, and date
csci3411: Operating Systems
csci3411: Operating Systems Lecture 3: System structure and Processes Gabriel Parmer Some slide material from Silberschatz and West System Structure System Structure How different parts of software 1)
VMMF: Virtual Machine Memory Forensics Based on Event Trigger Mechanism
2016 International Conference on Electronic Information Technology and Intellectualization (ICEITI 2016) ISBN: 978-1-60595-364-9 VMMF: Virtual Machine Memory Forensics Based on Event Trigger Mechanism
Gateway Ascii Command Protocol
Gateway Ascii Command Protocol Table Of Contents Introduction....2 Ascii Commands.....3 Messages Received From The Gateway....3 Button Down Message.....3 Button Up Message....3 Button Maintain Message....4
HyperLink: Virtual Machine Introspection and Memory Forensic Analysis without Kernel Source Code
HyperLink: Virtual Machine Introspection and Memory Forensic Analysis without Kernel Source Code Jidong Xiao, Lei Lu, Haining Wang, Xiaoyun Zhu Boise State University, Boise, Idaho, USA VMware Inc., Palo
Hiding in the Shadows: Empowering ARM for Stealthy Virtual Machine Introspection ACSAC 2018
Hiding in the Shadows: Empowering ARM for Stealthy Virtual Machine Introspection ACSAC 2018 Sergej Proskurin, 1 Tamas Lengyel, 3 Marius Momeu, 1 Claudia Eckert, 1 and Apostolis Zarras 2 1 2 Maastricht
C1098 JPEG Module User Manual
C1098 JPEG Module User Manual General Description C1098 is VGA camera module performs as a JPEG compressed still camera that can be attached to a wireless or PDA host. Users can send out a snapshot command
CPSC 341 OS & Networks. Processes. Dr. Yingwu Zhu
CPSC 341 OS & Networks Processes Dr. Yingwu Zhu Process Concept Process a program in execution What is not a process? -- program on a disk A process is an active object, but a program is just a file It
6.1 Combinational Circuits. George Boole ( ) Claude Shannon ( )
6. Combinational Circuits George Boole (85 864) Claude Shannon (96 2) Signals and Wires Digital signals Binary (or logical ) values: or, on or off, high or low voltage Wires. Propagate digital signals
Building Trustworthy Intrusion Detection Through Virtual Machine Introspection
Building Trustworthy Intrusion Detection Through Fabrizio Baiardi 1 Daniele Sgandurra 2 1 Polo G. Marconi - La Spezia, University of Pisa 2 Department of Computer Science, University of Pisa IAS Conference,
CIS-331 Final Exam Spring 2018 Total of 120 Points. Version 1
Version 1 Instructions 1. Write your name and version number on the top of the yellow paper and the routing tables sheet. 2. Answer Question 2 on the routing tables sheet. 3. Answer Questions 1, 3, 4,
CDR File Information. Comments Direct PCM
IMPORTANT NOTICE: Robert Bosch LLC and the manufacturers whose vehicles are accessible using the CDR System urge end users to use the latest production release of the Crash Data Retrieval system software
Lucas Davi University of Duisburg-Essen, Germany ICRI-SC Associated Researcher
17 th May 2017, ICRI-SC Retreat, Darmstadt, Germany Can Systems ever be Protected against Run-time Attacks? Lucas Davi University of Duisburg-Essen, Germany ICRI-SC Associated Researcher Motivation Motivation
references Virtualization services Topics Virtualization
references Virtualization services Virtual machines Intel Virtualization technology IEEE xplorer, May 2005 Comparison of software and hardware techniques for x86 virtualization ASPLOS 2006 Memory resource
csci3411: Operating Systems
csci3411: Operating Systems Lecture 3: System structure and Processes Gabriel Parmer Some slide material from Silberschatz and West System Structure System Structure How different parts of software 1)
Acquirer JCB EMV Test Card Set
Acquirer JCB EMV Test Card Set July, 2017 Powered by Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available
Spring 2017 :: CSE 506. Introduction to. Virtual Machines. Nima Honarmand
Introduction to Virtual Machines Nima Honarmand Virtual Machines & Hypervisors Virtual Machine: an abstraction of a complete compute environment through the combined virtualization of the processor, memory,
July Registration of a Cyrillic Character Set. Status of this Memo
Network Working Group Request for Comments: 1489 A. Chernov RELCOM Development Team July 1993 Status of this Memo Registration of a Cyrillic Character Set This memo provides information for the Internet
Fundamentals of Cryptography
Fundamentals of Cryptography Topics in Quantum-Safe Cryptography June 23, 2016 Part III Data Encryption Standard The Feistel network design m m 0 m 1 f k 1 1 m m 1 2 f k 2 2 DES uses a Feistel network
Towards High Assurance Networks of Virtual Machines
Towards High Assurance Networks of Virtual Machines Fabrizio Baiardi 1 Daniele Sgandurra 2 1 Polo G. Marconi - La Spezia, University of Pisa, Italy 2 Department of Computer Science, University of Pisa,
L4/Darwin: Evolving UNIX. Charles Gray Research Engineer, National ICT Australia
L4/Darwin: Evolving UNIX Charles Gray Research Engineer, National ICT Australia charles.gray@nicta.com.au Outline 1. Project Overview 2. BSD on the Mach microkernel 3. Porting Darwin to the L4 microkernel
Using Hashing to Improve Volatile Memory Forensic Analysis
Using Hashing to Improve Volatile Memory Forensic Analysis American Academy of Forensic Sciences Annual Meeting February 21, 2008 AAron Walters awalters@volatilesystems.com Blake Matheny, LLC Center for
First Data Dual Interface EMV Test Card Set. Version 1.20
First Data Dual Interface EMV Test Card Set August, 2016 Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available
Background. IBM sold expensive mainframes to large organizations. Monitor sits between one or more OSes and HW
Virtual Machines Background IBM sold expensive mainframes to large organizations Some wanted to run different OSes at the same time (because applications were developed on old OSes) Solution: IBM developed
CS 537: Introduction to Operating Systems Fall 2015: Midterm Exam #1
CS 537: Introduction to Operating Systems Fall 2015: Midterm Exam #1 This exam is closed book, closed notes. All cell phones must be turned off. No calculators may be used. You have two hours to complete
Hardware OS & OS- Application interface
CS 4410 Operating Systems Hardware OS & OS- Application interface Summer 2013 Cornell University 1 Today How my device becomes useful for the user? HW-OS interface Device controller Device driver Interrupts
First Data EMV Test Card Set. Version 1.30
First Data EMV Test Card Set.30 January, 2018 Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available from industry
Virtual Memory 2: demand paging
Virtual Memory : demand paging also: anatomy of a process Guillaume Salagnac Insa-Lyon IST Semester Fall 8 Reminder: OS duties CPU CPU cache (SRAM) main memory (DRAM) fast storage (SSD) large storage (disk)
Processes. Jin-Soo Kim Computer Systems Laboratory Sungkyunkwan University
Processes Jin-Soo Kim (jinsookim@skku.edu) Computer Systems Laboratory Sungkyunkwan University http://csl.skku.edu OS Internals User space shell ls trap shell ps Kernel space File System Management I/O
Background SigGraph KOP Summary CS 6V Kernel Rootkit Defense I: Graph-based Scanning Approach. Zhiqiang Lin
CS 6V81-05 Kernel Rootkit Defense I: Graph-based Scanning Approach Zhiqiang Lin Department of Computer Science The University of Texas at Dallas September 2 nd, 2011 Outline 1 Background 2 SigGraph 3 KOP
One subset of FEAL, called FEAL-NX, is N round FEAL using a 128-bit key without key parity.
FEAL-NX SPECIFICATIONS 1 Introduction 1.1 Outline of the FEAL-NX cipher FEAL, the Fast Data Encipherment Algorithm, is a 64-bit block cipher algorithm that enciphers 64-bit plaintexts into 64-bit ciphertexts
Digital Lighting Systems, Inc.
Digital Lighting Systems, Inc. Four Channel Dry Contacts Relays Switch Pack DMX512 compatible USER'S MANUAL -UM User's Manual - Page 1 GENERAL DESCRIPTION The is a 4-channel DMX-512 compatible electro-mechanical
First Data EMV Test Card Set. Version 2.00
First Data EMV Test Card Set.00 February, 2018 Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available from industry
Anne Bracy CS 3410 Computer Science Cornell University
Anne Bracy CS 3410 Computer Science Cornell University The slides were originally created by Deniz ALTINBUKEN. P&H Chapter 4.9, pages 445 452, appendix A.7 Manages all of the software and hardware on the
The DNS system is organized in a structure.
Agenda DNS security review Virtualization fundamentals What defenders can do with virtualization (Livewire) What attackers can do with virtualization (Subvirt) Summary 1/37 The DNS system is organized
DBK24. Isolated Digital Output Chassis. Overview
DBK24 Isolated Digital Output Chassis Overview 1 Power Requirements 2 Hardware Setup 2 Card Connection 2 Card Configuration 3 DaqBook and DaqBoard Connection 4 DaqBoard/2000 Series Board Connection 5 DaqBook
Anne Bracy CS 3410 Computer Science Cornell University
Anne Bracy CS 3410 Computer Science Cornell University The slides were originally created by Deniz ALTINBUKEN. P&H Chapter 4.9, pages 445 452, appendix A.7 Manages all of the software and hardware on the
ID: Cookbook: urldownload.jbs Time: 23:23:00 Date: 11/01/2018 Version:
ID: 42417 Cookbook: urldownload.jbs Time: 23:23:00 Date: 11/01/201 Version: 20.0.0 Table of Contents Table of Contents Analysis Report Overview General Information Detection Confidence Classification Signature
Triple DES and AES 192/256 Implementation Notes
Triple DES and AES 192/256 Implementation Notes Sample Password-to-Key and KeyChange results of Triple DES and AES 192/256 implementation For InterWorking Labs customers who require detailed information
Digital Lighting Systems, Inc. CD400-DMX DMX512 Four Channel Dimmer and Switch module
, Inc. DMX512 Four Channel Dimmer and Switch module Input: 5 Amps @ 6-24 VDC Outputs: 5 Amps Maximum each, total 4 outputs 8 Amps Maximum. FRONT BACK USER'S MANUAL -UM User's Manual - Page 1 GENERAL DESCRIPTION
CMSC 313 Lecture 03 Multiple-byte data big-endian vs little-endian sign extension Multiplication and division Floating point formats Character Codes
Multiple-byte data CMSC 313 Lecture 03 big-endian vs little-endian sign extension Multiplication and division Floating point formats Character Codes UMBC, CMSC313, Richard Chang 4-5 Chapter
ZN-DN312XE-M Quick User Guide
ZN-DN312XE-M Quick User Guide This manual provides instructions for quick installation and basic configuration of your IP device. Step1. Connect cables to IP device Connect required cables to the device
CIS-331 Final Exam Spring 2016 Total of 120 Points. Version 1
Version 1 1. (25 Points) Given that a frame is formatted as follows: And given that a datagram is formatted as follows: And given that a TCP segment is formatted as follows: Assuming no options are present
PROCESSES. Jo, Heeseung
PROCESSES Jo, Heeseung TODAY'S TOPICS What is the process? How to implement processes? Inter-Process Communication (IPC) 2 WHAT IS THE PROCESS? Program? vs. Process? vs. Processor? 3 PROCESS CONCEPT (1)
Processes. Jo, Heeseung
Processes Jo, Heeseung Today's Topics What is the process? How to implement processes? Inter-Process Communication (IPC) 2 What Is The Process? Program? vs. Process? vs. Processor? 3 Process Concept (1)
Operating Systems. System calls. Guillaume Salagnac. Fall Insa-Lyon IST Semester
Operating Systems System calls Guillaume Salagnac Insa-Lyon IST Semester Fall 2018 2/36 Previously on IST-OPS Application 1 Application 2 OS Kernel Hardware The CPU implements the Von Neumann cycle executes
0x1A Great Papers in Computer Security
CS 380S 0x1A Great Papers in Computer Security Vitaly Shmatikov http://www.cs.utexas.edu/~shmat/courses/cs380s/ slide 1 X. Chen, T, Garfinkel, E. Lewis, P. Subrahmanyam, C. Waldspurger, D. Boneh, J. Dwoskin,
Linux Kernel PROCESS. Copyrighted to
Linux Kernel PROCESS 1 Copyrighted to www.suvenconsultants.com Process : a running program. Individual processes exist independently alongside each other and cannot affect each other directly. Each process
CSCI 454/554 Computer and Network Security. Topic 3.1 Secret Key Cryptography Algorithms
CSCI 454/554 Computer and Network Security Topic 3.1 Secret Key Cryptography Algorithms Outline Introductory Remarks Feistel Cipher DES AES 2 Introduction Secret Keys or Secret Algorithms? Security by
Linux Howtos. Fedora 9 Install (114) CIS Fall Fedora 9 Install (114) Fedora 9 installation with custom partitions.
Linux Howtos Fedora 9 Install (114) CIS 191 - Fall 2008 Fedora 9 Install (114) Fedora 9 installation with custom partitions. Requirements: Fedora 9 DVD ISO files http://iso.linuxquestions.org/ VMWare Server
Acquirer JCB Dual Interface EMV Test Card Set
Acquirer JCB Dual Interface EMV Test Card Set.00 July, 2018 Powered by Disclaimer Information provided in this document describes capabilities available at the time of developing and delivering this document
The Challenges of X86 Hardware Virtualization. GCC- Virtualization: Rajeev Wankar 36
The Challenges of X86 Hardware Virtualization GCC- Virtualization: Rajeev Wankar 36 The Challenges of X86 Hardware Virtualization X86 operating systems are designed to run directly on the bare-metal hardware,
Chapter 5 C. Virtual machines
Chapter 5 C Virtual machines Virtual Machines Host computer emulates guest operating system and machine resources Improved isolation of multiple guests Avoids security and reliability problems Aids sharing
6. Specifications & Additional Information
6. Specifications & Additional Information SIIGX52004-3.1 Transceier Blocks Table 6 1 shows the transceier blocks for Stratix II GX and Stratix GX deices and compares their features. Table 6 1. Stratix
Sistemi in Tempo Reale
Laurea Specialistica in Ingegneria dell'automazione Sistemi in Tempo Reale Giuseppe Lipari Introduzione alla concorrenza Fundamentals Algorithm: It is the logical procedure to solve a certain problem It
StarVault Cloud Backup PRO v7 Microsoft Hyper-V Guest Virtual Machine Backup & Restore
StarVault Cloud Backup PRO v7 Microsoft Hyper-V Guest Virtual Machine Backup & Restore StarVault Systems Corporation Limited 15 September 2016 www.starvault.com Table of Contents 1 Requirements and Recommendations...
Virtual Machines. To do. q VM over time q Implementation methods q Hardware features supporting VM q Next time: Midterm?
Virtual Machines To do q VM over time q Implementation methods q Hardware features supporting VM q Next time: Midterm? *Partially based on notes from C. Waldspurger, VMware, 2010 and Arpaci-Dusseau s Three
TCSS 422: OPERATING SYSTEMS
TCSS 422: OPERATING SYSTEMS fork() Process API, Limited Direct Execution Wes J. Lloyd Institute of Technology University of Washington - Tacoma Creates a new process - think of a fork in the road Parent
Fast access ===> use map to find object. HW == SW ===> map is in HW or SW or combo. Extend range ===> longer, hierarchical names
Fast access ===> use map to find object HW == SW ===> map is in HW or SW or combo Extend range ===> longer, hierarchical names How is map embodied: --- L1? --- Memory? The Environment ---- Long Latency
Technical Specification. Third Party Control Protocol. AV Revolution
Technical Specification Third Party Control Protocol AV Revolution Document AM-TS-120308 Version 1.0 Page 1 of 31 DOCUMENT DETAILS Document Title: Technical Specification, Third Party Control Protocol,
Digital Projector X30 Operator's Guide TECHNICAL
Digital Projector X30 Operator's Guide TECHNICAL Example of PC signal Resolution (H x V) H. frequency (khz) V. frequency (Hz) Rating Signal mode 720 x 400 37.9 85.0 VESA TEXT 640 x 480 31.5 59.9 VESA VGA
COS 318: Operating Systems
COS 318: Operating Systems OS Structures and System Calls Prof. Margaret Martonosi Computer Science Department Princeton University http://www.cs.princeton.edu/courses/archive/fall11/cos318/ Outline Protection
Systems/DBG Debugger Version 2.20
Systems/DBG Debugger Version 2.20 Copyright c 2018, Dignus, LLC Systems/DBG Debugger Version 2.20 i Copyright c 2018 Dignus LLC, 8378 Six Forks Road Suite 203, Raleigh NC, 27615. World rights reserved.
Docker und IBM Digital Experience in Docker Container
Docker und IBM Digital Experience in Docker Container 20. 21. Juni 2017 IBM Labor Böblingen 1 What is docker Introduction VMs vs. containers Terminology v Docker components 2 6/22/2017 What is docker?
COS 318: Operating Systems
COS 318: Operating Systems OS Structures and System Calls Jaswinder Pal Singh Computer Science Department Princeton University (http://www.cs.princeton.edu/courses/cos318/) Outline Protection mechanisms
Sandboxing Untrusted Code: Software-Based Fault Isolation (SFI)
Sandboxing Untrusted Code: Software-Based Fault Isolation (SFI) Brad Karp UCL Computer Science CS GZ03 / M030 9 th December 2011 Motivation: Vulnerabilities in C Seen dangers of vulnerabilities: injection
G Xen and Nooks. Robert Grimm New York University
G22.3250-001 Xen and Nooks Robert Grimm New York University Agenda! Altogether now: The three questions! The (gory) details of Xen! We already covered Disco, so let s focus on the details! Nooks! The grand
6.1 Font Types. Font Types
6 Font This chapter explains basic features of GP-Pro EX's "Font" and basic ways of placing text with each font. Please start by reading "6.1 Font Types" (page 6-2) and then turn to the corresponding page.
High Performance Computing Lecture 11. Matthew Jacob Indian Institute of Science
High Performance Computing Lecture 11 Matthew Jacob Indian Institute of Science Agenda 1. Program execution: Compilation, Object files, Function call and return, Address space, Data & its representation
SPAREPARTSCATALOG: CONNECTORS SPARE CONNECTORS KTM ART.-NR.: 3CM EN
SPAREPARTSCATALOG: CONNECTORS ART.-NR.: 3CM3208201EN CONTENT SPARE CONNECTORS AA-AN SPARE CONNECTORS AO-BC SPARE CONNECTORS BD-BQ SPARE CONNECTORS BR-CD 3 4 5 6 SPARE CONNECTORS CE-CR SPARE CONNECTORS
CS , Spring 2002 Exam 2
Full Name: CS 15-213, Spring 2002 Exam 2 March 28, 2002 Instructions: Make sure that your exam is not missing any sheets, then write your full name and Andrew login ID on the front. Write your answers
CS 537: Introduction to Operating Systems Fall 2016: Midterm Exam #1. All cell phones must be turned off and put away.
CS 537: Introduction to Operating Systems Fall 2016: Midterm Exam #1 This exam is closed book, closed notes. All cell phones must be turned off and put away. No calculators may be used. You have two hours
AIT 682: Network and Systems Security
AIT 682: Network and Systems Security Topic 3.1 Secret Key Cryptography Algorithms Instructor: Dr. Kun Sun Outline Introductory Remarks Feistel Cipher DES AES 2 Introduction Secret Keys or Secret Algorithms?
EDR Report Information
EDR Report File Information Value VIN 5YJXCDE20HF041782 Retrieval Date 2017/06/30 02:16:00 (UTC) Retrieval User Comments Retrieval Program Information EDR Report Information Tesla EDR Reporting Service
COMPUTER ARCHITECTURE. Virtualization and Memory Hierarchy
COMPUTER ARCHITECTURE Virtualization and Memory Hierarchy 2 Contents Virtual memory. Policies and strategies. Page tables. Virtual machines. Requirements of virtual machines and ISA support. Virtual machines:
Bridging the Semantic Gap Through Static Code Analysis
Bridging the Semantic Gap Through Static Code Analysis Christian Schneider Jonas Pfoh Claudia Eckert Department of Computer Science Technische Universität München Munich, Germany {schneidc,pfoh,eckertc}@in.tum.de