Corpus ID: 198909028

Where am I ? Operating System and Virtualization Identification Without System Calls

@inproceedings{Wright2017WhereAI,
  title={Where am I ? Operating System and Virtualization Identification Without System Calls},
  author={J. L. Wright},
  year={2017}
}

J. L. Wright

Published 2017

Operating systems provide a wealth of versioning information via system calls, but suppose one is given control of the instruction pointer and allowed to jump to a provided block of code. Is it possible to identify the operating system and other key con€guration details (bit width, virtualization environment, etc.) without resorting to system calls? We show that a host can be €ngerprinted without tripping over the easiest and most commonly monitored behavioral characteristics of applications… CONTINUE READING

thought.net

Save to Library

Create Alert

Cite

Launch Research Feed