Effectively protecting the Windows OS is a challenging task, since most implementation details are not publicly known. Windows has always been the main target of malwares that have exploited numerous bugs and vulnerabilities. Recent trusted boot and additional integrity checks have rendered the Windows OS less vulnerable to kernel-level rootkits. Nevertheless, guest Windows Virtual Machines are becoming an increasingly interesting attack target. In this work we introduce and analyze a novel Hypervisor-Based Introspection System (HyBIS) we developed for protecting Windows OSes from malware and rootkits. The HyBIS architecture is motivated and detailed, while targeted experimental results show its effectiveness. Comparison with related work highlights main HyBIS advantages such as: effective semantic introspection, support for 64-bit architectures and for latest Windows (8.x and 10), advanced malware disabling capabilities. We believe the research effort reported here will pave the way to further advances in the security of Windows OSes.

No abstract

No abstract

rative research using both historical and modeled data, and * A logically consistent distributed data base thatThe Real-Time Environmental Information Network and halysis System ( "AS) is a distributed system Supporting the conduct of regional environmental science resear& at the desk top. Continuous real-time data acquired from dispersed sensors is stored in a logically integrated but physically disstores data in the data base independent of file format and Which maintains metadata describing where and how data was Obtained (the data base tracks data Pedigree)* tributed data base. An integrated problem-solving environment is under development which supports visualization and modeling. REINAS is intended to provide insight into historical, current, and predicted oceanographic and meteorological conditions. REINAS permits both collaborative and single-user scientific work in a distributed environment.

X-ray diffractometer studies of single-crystal quartz and orthoclase reveal the peak shock pressure experienced by the samples. This procedure may facilitate tapid, quantitative interpretation of the peak shock pressures experienced by materials occurring in lunar or terrestrial impact structures. Shocked specimens were obtained from the NASA 20 mm flat-plate accelerator at Johnson Space Center, Houston. Orthoclase single crystals were shocked normal to the (001) plane at pressure intervals between 0 and 297 kb. The amplitude of the 27.6° two-theta (002) maximum decreases as a function of increasing shock pressure. Quartz single crystals were shocked normal to the (0001) plane at pressure intervals between 0 and 310 kb. Examination of the peak amplitude/ half-width ratios for the 26.6° two-theta (101) and the 20.8° twotheta (100) reveals a general correlation of these ratios with shock pressure. This method seems appropriate for the calibration of shock pressures experienced by crystalline materials.