Passive means to identify intrusion

Mike McCarty Mike.McCarty at sbcglobal.net
Tue Apr 4 21:34:46 UTC 2006


I found this to be an intriguing read. I'm not sure just
how practical it is, but it is intriguing. It reminds me
of some tools I used 'way back when which plotted the
address bus on an oscilloscope, used for profiling/instrumenting
code for purposes of optimization. X and Y were the outputs
of the high and low 8 bits of a 16 bit address bus passed through
D/A converters.

http://www.rumint.org/gregconti/publications/20040617_VizSec_Fingerprinting.pdf

Mike
-- 
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
This message made from 100% recycled bits.
You have found the bank of Larn.
I can explain it for you, but I can't understand it for you.
I speak only for myself, and I am unanimous in that!




More information about the fedora-list mailing list