Re: [Qemu-devel] Argos: qemu-based honeypot

2005-12-23 Thread Herbert Bos
Tace, Hi Herbert, I haven try it yet, but it seems very interesting! Btw, would it be similar to the Minos (http://minos.cs.ucdavis.edu/) system, implemented using Bochs? Yes, it is a bit like Minos, but (a) considerably faster than the Minos implementation on Bochs (but then Minos was in

Re: [Qemu-devel] Argos: qemu-based honeypot

2005-12-21 Thread Tace
Hi Herbert, I haven try it yet, but it seems very interesting! Btw, would it be similar to the Minos (http://minos.cs.ucdavis.edu/) system, implemented using Bochs? On 12/21/05, Herbert Bos <[EMAIL PROTECTED]> wrote: > All, > I am happy to announce the first release of Argos: a full system > e

Re: [Qemu-devel] Argos: qemu-based honeypot

2005-12-21 Thread Mulyadi Santosa
Dear Dr Bos.. First, congratulations for the Argos release. Looks interesting for me..I'll give it a try ASAP. > We have extended QEMU to enable it to detect remote attempts to > compromise the emulated guest operating system. Using dynamic taint > analysis Argos tracks network data throughout t

[Qemu-devel] Argos: qemu-based honeypot

2005-12-20 Thread Herbert Bos
All, I am happy to announce the first release of Argos: a full system emulator (based on Qemu) that detects attempts to compromise the system. It is meant to be used in a honeypot and offers full-system protection, i.e., it protects the kernel and all applications running on top. Argos is ho