> MS: Malware Scan. Scan all files for malware on execution
> (optionally on all file read accesses or on all TCP/UDP read
> accesses), deny access if infected. Currently the Linux viruses
> Bliss.A and Bliss.B and a handfull of others are detected. See our
> paper on malware detection and avoidance for The Third Nordic
> Workshop on Secure IT Systems (Nordsec'98)
This might be interesting to ultra people, if it is done efficient
enough. If I understand it correctly, ultra will hang if nasty
sequence is executed, even from user mode.
Pavel
-- I'm really pavel@atrey.karlin.mff.cuni.cz. Pavel Look at http://atrey.karlin.mff.cuni.cz/~pavel/ ;-).- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/