From owner-freebsd-security Tue Apr 16 1: 8:29 2002 Delivered-To: freebsd-security@freebsd.org Received: from mta3-rme.xtra.co.nz (mta3-rme.xtra.co.nz [210.86.15.131]) by hub.freebsd.org (Postfix) with ESMTP id 2859337B400 for ; Tue, 16 Apr 2002 01:08:19 -0700 (PDT) Received: from netxsecure.net ([210.55.121.51]) by mta3-rme.xtra.co.nz with ESMTP id <20020416080817.RWBY27009.mta3-rme.xtra.co.nz@netxsecure.net> for ; Tue, 16 Apr 2002 20:08:17 +1200 Message-ID: <3CBBDB83.88EDE744@netxsecure.net> Date: Tue, 16 Apr 2002 20:06:27 +1200 From: "Michael A. Williams" Reply-To: mike@netxsecure.net X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.4-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-security@freebsd.org Subject: Anti-Trojan kernel patches and paper for FreeBSD Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, A paper on Anti-Trojan and Trojan Detection for FreeBSD using digital signature testing within the kernel is available at: http://www.trojanproof.org/sigexec.pdf A reference implementation for FreeBSD 4.5 is available at: http://www.trojanproof.org/sigexec-fbsd4.5r-0.2.tgz Regards, -- Michael A. Williams Security Software Engineering and InfoSec Manager NetXSecure NZ Limited, http://www.nxs.co.nz Ph: +64.3.318.2973 Fax: +64.3.318.2975 Mob: +64.21.995.914 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message