From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.33) id 1CWaDw-0006CS-Ff for qemu-devel@nongnu.org; Tue, 23 Nov 2004 07:56:48 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.33) id 1CWaDv-0006Bn-OY for qemu-devel@nongnu.org; Tue, 23 Nov 2004 07:56:48 -0500 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.33) id 1CWaDv-0006BY-IQ for qemu-devel@nongnu.org; Tue, 23 Nov 2004 07:56:47 -0500 Received: from [64.233.184.202] (helo=wproxy.gmail.com) by monty-python.gnu.org with esmtp (Exim 4.34) id 1CWa4P-0002Rz-7D for qemu-devel@nongnu.org; Tue, 23 Nov 2004 07:46:57 -0500 Received: by wproxy.gmail.com with SMTP id 36so836699wra for ; Tue, 23 Nov 2004 04:46:56 -0800 (PST) Message-ID: <4a1d883204112304461e5bbb27@mail.gmail.com> Date: Tue, 23 Nov 2004 13:46:36 +0100 From: Andreu Escudero Subject: Re: [Qemu-devel] building a virus-proof PC with Qemu In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: Reply-To: Andreu Escudero , qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Piotras , qemu-devel@nongnu.org Seems absurd to me... Haw will you now if a byte comes from a "trusted source"? And if you know what is a trusted source and what is not... you don't need anything like extrange imformation propagation... On Tue, 23 Nov 2004 13:31:59 +0100, Piotras wrote: > Hi! > > Imagine that with every byte stored on disk image, the emulated > memory and CPU registers we associate a flag indicating if the > byte come from "trusted" source. This information would propagate > with every memory/disk access (data-flow tracking). > > Before Qemu would translate a block of code the trusted bits could > be checked to see if the code is "trusted". Of course there are > issues with dynamic loaders, dynamic compilers, etc. And it's not > going to work well with scripted code. > > Possible usage: > * building virus-proof PC, > * automate hunting for worms/exploits on Internet. > > Opinions? > > Piotrek > > _______________________________________________ > Qemu-devel mailing list > Qemu-devel@nongnu.org > http://lists.nongnu.org/mailman/listinfo/qemu-devel > -- Das Experimental Kunstwerk