Snagg in progress

Hi all,I’m Vincenzo Iozzo, currently I’m studying computer engineering at the Politecnico di Milano. I also work for Secure Network srl. And in the spare time I do some research for my university. I’m mainly involved in IT Security.   Now, after this brief presentation, I’d like to spend a few words on my project for this Summer Of Code.  I will modify the FreeBSD auditpipe support in order to provide more granularity while auditing syscalls. In fact, at the present time, your choice on what to audit is limited to default classes. With my patch it would be possible to select every syscall by its own. The second half of the project will consist of creating a framework for testing the correct behavior of the auditing system and, if needed, patching it.Finally the whole auditing system will be checked in order to see whether or not is vulnerable at some anti-forensics techiniques.  Here you can find a detailed description of the first part of the project.Snagg

This entry was posted on Thursday, May 1st, 2008 at 4:59 pm and is filed under Project. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.