Sangam: A Confluence of Knowledge Streams

The implications of virtual machine introspection for digital forensics on nonquiescent virtual machines

Show simple item record

dc.contributor Eagle, Chris
dc.contributor Dinolt, George
dc.contributor Naval Postgraduate School (U.S.)
dc.contributor Computer Science
dc.creator Hirst, Nathan W.
dc.date 2012-03-14T17:46:23Z
dc.date 2012-03-14T17:46:23Z
dc.date 2011-06
dc.date.accessioned 2022-05-19T03:16:25Z
dc.date.available 2022-05-19T03:16:25Z
dc.identifier http://hdl.handle.net/10945/5688
dc.identifier 743235197
dc.identifier.uri http://localhost:8080/xmlui/handle/CUHPOERS/80739
dc.description The use of virtualized servers is on the rise. This results in a need for better forensic analysis capabilities for these virtualized environments. One of the answers to that has been the development of virtual machine introspection tools. Virtual machine introspection is a relatively new technique that has some important implications for digital forensics. Since it is performed outside of the virtual machine, it can help to alleviate the observer effect that is often encountered when performing a live analysis. This thesis tests how these tools can work in a nonquiescent environment and shows that the tools tested are able to produce reliable results.
dc.description http://archive.org/details/theimplicationso109455688
dc.description National Science Foundation Grant No. DUE-0414012
dc.description Approved for public release; distribution is unlimited.
dc.format xvi, 43 p. ;
dc.format application/pdf
dc.publisher Monterey, California. Naval Postgraduate School
dc.rights This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.
dc.subject Computer science
dc.subject Computer programming
dc.subject Software engineering
dc.title The implications of virtual machine introspection for digital forensics on nonquiescent virtual machines
dc.type Thesis


Files in this item

Files Size Format View
11Jun_Hirst.pdf 452.4Kb application/pdf View/Open

This item appears in the following Collection(s)

Show simple item record

Search DSpace


Advanced Search

Browse