The Experts below are selected from a list of 27 Experts worldwide ranked by ideXlab platform

Massimiliano Oldani - One of the best experts on this subject based on the ideXlab platform.

  • The UNIX Family
    A Guide to Kernel Exploitation, 2020
    Co-Authors: Enrico Perla, Massimiliano Oldani
    Abstract:

    This chapter covers the UNIX family, focusing on two of its members: Linux (mostly) and (Open)Solaris. It begins by the execution step, where the discussion focuses on the development of a privilege-raising shellcode for the Linux operating system. The Linux case provides with the opportunity to explore the two common ways for UNIX systems to associate privilege information to the Process Control Block (a static structure member or a function pointer to a dedicated structure), and to introduce the concept of more fine-grained permissions (Linux capabilities). This chapter helps learn how to “discover” the building Blocks of our shellcode by traversing various kernel functions and structures. Further, the various bug classes, covering the triggering step of each of them. Triggering a vulnerability usually leaves the kernel in some inconsistent state, which could generate a crash/panic of the target system, making the exploitation efforts wane. To prevent this, the exploit/payload needs to carefully reset the trashed structures/kernel objects to keep the state stable. In this regard, the chapter explores two approaches.

Eric L. Maase - One of the best experts on this subject based on the ideXlab platform.

  • Automated Process Control Laboratory Experience: Simultaneous Temper- ature and Level Control in a Continuously Stirred Tank Reactor System
    2014
    Co-Authors: Joshua A. Levinson, Eric L. Maase
    Abstract:

    A Process Control laboratory experience has been developed using a continuously stirred tank reactor system that permits simultaneous level and temperature Control using water as the Process medium. This work was originally completed as a senior honors thesis project, and the resulting system has been successfully incorporated into the Process Control Block of a juniorlevel unit operations laboratory course. Use of the apparatus over multiple laboratory sessions provides students with a hands-on experience that illustrates the concepts of system characterization (e.g., calibration, determining operating ranges, understanding electromechanical component specifications, etc.), open-loop Process response measurements, and closed-loop response and PID tuning. A Controller program to interface with the valves and sensors and to perform data logging was constructed in LabView, employing a graphical user interface. As part of the experience, all sensors and valves of the system are to be characterized and calibrated. The two system Processes—i.e., temperature and height—are run in an open loop manner, with data collection providing a means to determine appropriate Process models. Process parameters from these models permit the estimation of Controller tuning values (i.e., Controller gain and time constants) through formulaor software-driven means (e.g., Control Station Loop-Pro). SISO configurations are then employed to test various Control settings for tuning purposes, with the use of hand-tuning techniques to refine these values. The system can ultimately be operated in a MIMO configuration without and with decoupling gains; the typical oscillatory behavior without decoupling is demonstrated due to the inherent Process interactions. Students who use this system are thereby given a hands-on opportunity to practice a variety of essential Process Control techniques and concepts, providing important context for this material. Student assessments conducted prior to and after using this and other hands-on systems indicate marked improvement in understanding and comfort-level for Process Control applications.

Ruth E. Goldenberg - One of the best experts on this subject based on the ideXlab platform.

  • Memory Management Data Structures
    OpenVMS Alpha Internals and Data Structures, 2020
    Co-Authors: Ruth E. Goldenberg
    Abstract:

    This chapter provides a brief description of data structures used by the memory management subsystem. These include: structures that describe Process virtual memory, page tables that help implement virtual memory, structures that describe granularity hint regions, structures that describe the state of physical memory, structures that enable Processes to share memory through global pages and sections, and structures that describe the state of page and swap files. Much of the memory management information about a Process is maintained in its Process header (PHD). The PHD includes a list of valid virtual Process pages, a description of the sections that make up the Process-private address space, and a description of the permanent regions in P0, P1, and P2 space. There are two key data structures: Process Control Block (PCB) and kernel thread Block (KTB); they contain some information related to memory management. The Process Control Block (PCB) represents a Process and the kernel thread Block (KTB) represents a kernel. The PHD, PCB, and KTB are all allocated in system space.

Enrico Perla - One of the best experts on this subject based on the ideXlab platform.

  • The UNIX Family
    A Guide to Kernel Exploitation, 2020
    Co-Authors: Enrico Perla, Massimiliano Oldani
    Abstract:

    This chapter covers the UNIX family, focusing on two of its members: Linux (mostly) and (Open)Solaris. It begins by the execution step, where the discussion focuses on the development of a privilege-raising shellcode for the Linux operating system. The Linux case provides with the opportunity to explore the two common ways for UNIX systems to associate privilege information to the Process Control Block (a static structure member or a function pointer to a dedicated structure), and to introduce the concept of more fine-grained permissions (Linux capabilities). This chapter helps learn how to “discover” the building Blocks of our shellcode by traversing various kernel functions and structures. Further, the various bug classes, covering the triggering step of each of them. Triggering a vulnerability usually leaves the kernel in some inconsistent state, which could generate a crash/panic of the target system, making the exploitation efforts wane. To prevent this, the exploit/payload needs to carefully reset the trashed structures/kernel objects to keep the state stable. In this regard, the chapter explores two approaches.

Deepti Vidyarthi - One of the best experts on this subject based on the ideXlab platform.

  • Automatic dynamic malware analysis techniques for Linux environment
    2016
    Co-Authors: Gaurav Damri, Deepti Vidyarthi
    Abstract:

    Penetration into Linux system using malware is increasing at very high rate. Primary reason for this is our perception that Linux is a secure system. Malwares are used very often to penetrate into any computer or network; malware authors are using various obfuscation techniques to impede the detection from traditional signature based Anti-virus system. Automated dynamic malware analysis systems are one of the latest weapons used by security researchers to counter them. To counter dynamic analysis, malware authors are using various evasion techniques. Challenge now lies in finding a generic and efficient technique which can detectpotentially malicious file. This article is a survey of dynamic analysis techniques proposed or implemented in the context of Linux systems. The survey classifies these approaches into five types: System-call base approach, Process Control Block based approach, ELF based approach, Linux kernel based approach and Hybrid approach. It also discusses open problems not handled by these techniques. Providing current bibliography, it may aid Linux malware researchers to identify suitable analysis technique and the way forward.