scispace - formally typeset
Patent

System call tracking method of kernel source code level

TLDR
In this paper, a system call tracking method of a kernel source code level is described, in which a file containing a call number capture function is added under a same level directory of an assembly file called by a Linux Kernel source code implement system.
Abstract
The invention discloses a system call tracking method of a kernel source code level The method comprises the steps that (1) a file containing a system call number capture function is added under a same level directory of an assembly file called by a Linux kernel source code implement system; (2) an assembly instruction is used to call the system call number capture function to acquire a system call number; (3) the acquired system call number is stored for recording and frequency statistics to realize system call tracking According to the system call tracking method of the kernel source codelevel, by modifying a Linux kernel source code, a system call detection module is added in an appropriate position of the kernel source code, and all system call behaviors in a Linux are captured andrecorded in real time

read more

Citations
More filters
Patent

Method, apparatus and device for testing read-write performance of xfs file system

TL;DR: In this article, a method for testing the read-write performance of an xfs file system is presented, which includes formatting a local disk by a script and mounting an xFS file system; running a fio tool through the job file, and testing the xfs files on the local disk in batch, wherein the job files specifies the disk path to read and write to; obtaining test data.
References
More filters
Patent

Method and apparatus for repairing damage to a computer system using a system rollback mechanism

TL;DR: In this paper, a method and apparatus for managing protecting data from damage in a data processing system is presented, where the data is journaled to form journaled data and a determination is then made as to whether a virus is present in the data processing systems after journaling of data has begun.
Patent

Method for analyzing dynamic execution of Linux kernel

TL;DR: In this paper, a method for tracking and analyzing functions and statements involved in the dynamic executing process of a kernel of an operating system is presented, which comprises the following steps of: expanding open source programs strace, KFT, tags and gcov, so that these programs are enabled to track each executable file on the original basis; meanwhile, filtering system call information and other information of a corresponding tracked executable file in the executing process; storing these information into a new established database; and finally displaying relevant information on a webpage and then linking and displaying a call tree, wherein
Patent

Behavior monitoring method for VMM (virtual machine monitor) layer of cloud platform

TL;DR: In this article, a behavior monitoring method for a VMM (virtual machine monitor) layer of a cloud platform is proposed, which solves main problems in the prior art that an operating environment is unsafe and possibly broken through, a large amount of system resources are occupied by an algorithm security monitoring program, and abnormal recognition rate is low.
Patent

Method and device for reconstruction of Native API function

Feng Shijie
TL;DR: In this article, a method and device for the reconstruction of a Native API function is presented, which consists of the steps that system call numbers of loading functions are obtained; the system call number of the loading function are respectively copied into codes of a user-defined loading function; NTDLL.DLL is loaded to a defined position of internal storage according to the user defined loading function.