dc.contributor |
Eagle, Chris |
|
dc.contributor |
Dinolt, George |
|
dc.contributor |
Naval Postgraduate School (U.S.) |
|
dc.contributor |
Computer Science |
|
dc.creator |
Hirst, Nathan W. |
|
dc.date |
2012-03-14T17:46:23Z |
|
dc.date |
2012-03-14T17:46:23Z |
|
dc.date |
2011-06 |
|
dc.date.accessioned |
2022-05-19T03:16:25Z |
|
dc.date.available |
2022-05-19T03:16:25Z |
|
dc.identifier |
http://hdl.handle.net/10945/5688 |
|
dc.identifier |
743235197 |
|
dc.identifier.uri |
http://localhost:8080/xmlui/handle/CUHPOERS/80739 |
|
dc.description |
The use of virtualized servers is on the rise. This results in a need for better forensic analysis capabilities for these virtualized environments. One of the answers to that has been the development of virtual machine introspection tools. Virtual machine introspection is a relatively new technique that has some important implications for digital forensics. Since it is performed outside of the virtual machine, it can help to alleviate the observer effect that is often encountered when performing a live analysis. This thesis tests how these tools can work in a nonquiescent environment and shows that the tools tested are able to produce reliable results. |
|
dc.description |
http://archive.org/details/theimplicationso109455688 |
|
dc.description |
National Science Foundation Grant No. DUE-0414012 |
|
dc.description |
Approved for public release; distribution is unlimited. |
|
dc.format |
xvi, 43 p. ; |
|
dc.format |
application/pdf |
|
dc.publisher |
Monterey, California. Naval Postgraduate School |
|
dc.rights |
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States. |
|
dc.subject |
Computer science |
|
dc.subject |
Computer programming |
|
dc.subject |
Software engineering |
|
dc.title |
The implications of virtual machine introspection for digital forensics on nonquiescent virtual machines |
|
dc.type |
Thesis |
|