This paper describes a system that supports high availability of data, until the data should be
expunged, at which time the system makes it impossible to recover the data. This design …

Traditional, persistent data-oriented approaches in computer forensics face some limitations
regarding a number of technological developments, eg, rapidly increasing storage …

The execution of malware in an instrumented sandbox is a widespread approach for the
analysis of malicious code, largely because it sidesteps the difficulties involved in the static …

We report the results of a large scale study of password use andpassword re-use habits. The
study involved half a million users over athree month period. A client component on users' …

Technology is described for malware investigation by analyZ ing computer memory in a
computing device. The method can include performing static analysis on code for a software …

Malware analysis is the process of determining the purpose and functionality of a given
malware sample (such as a virus, worm, or Trojan horse). This process is a necessary step …

XFI is a comprehensive protection system that offers both flexible access control and
fundamental integrity guarantees, at any privilege level and even for legacy code in …

The monitoring of virtual machines has many applications in areas such as security and
systems management. A monitoring technique known as introspection has received …

This thesis describes TTAnalyze: a tool for analyzing the behavior of Windows PE-
executables with special focus on the analysis of malware. Execution of TTAnalyze results in …

Direct device assignment enhances the performance of guest virtual machines by allowing
them to communicate with I/O devices without host involvement. But even with device …