It has been a while since I started this blog, and the content is no where to be seen. So I guess I should start with something, and I would start with a brief introduction to the final year project I took related to Linux memory analysis and geared towards earning credits for my undergraduate degree, plus getting to know the internals of how Linux memory is actually laid out in the RAM.
The project was titled "Memviz", taken from "Memory Visualisation". The goal was to gather as much information as possible from a memory image dump taken using dd on a running Linux system. Also, presenting the information to the user in some visual form. On this blog, my discussion is mostly going to be restricted to the memory analysis and data extraction part of the work.
The project was motivated by a thesis written by Jorge Mario Urrea, in March 2006, titled "An Analysis of Linux RAM Forensics". In this thesis the general lay out of some of the interesting data structures of Linux memory subsystem are described. Our project was to extend the research work, and build a tool that would automate the process of extracting information from these data structures.
Tuesday, October 6, 2009
Friday, July 24, 2009
What this blog is about...
I've been working on memory analysis of a Linux managed system for quite some time now, it being a part of my final year project of my undergraduate degree. I am going to use this blog to document my findings and share what I discover with the rest of you. I am not an expert on the topic (not even close), but I hope to learn as I go about populating this blog with my discoveries.
Subscribe to:
Posts (Atom)
