- #1
takando12
- 123
- 5
I'm in my second year in college and I've taken an Operating Systems course that has a project component.
I've been assigned Memory Forensics as my project topic.
On approaching the professor I was told that I need to attempt to attack the Linux Kernel ( I'm guessing that means I need to write a process that tries to access the Kernel space from User mode? ) and then identify the occurrence of this attack from a memory dump ( I don't know if this will happen automatically when I try to access the Kernel i.e. will the system just crash and force a memory dump? )
I've been looking up for Memory Forensics analysis tools and Volatility is one and LiMe ( Linux Memory extractor) is for creating the dump I think?
I need a sense of direction about how to proceed with this and right now I'm very confused and don't even know how to start and what to do first.
Also, I suppose I should do all of this on a Virtual Machine so I don't destroy my system?
Please do help out.
I've been assigned Memory Forensics as my project topic.
On approaching the professor I was told that I need to attempt to attack the Linux Kernel ( I'm guessing that means I need to write a process that tries to access the Kernel space from User mode? ) and then identify the occurrence of this attack from a memory dump ( I don't know if this will happen automatically when I try to access the Kernel i.e. will the system just crash and force a memory dump? )
I've been looking up for Memory Forensics analysis tools and Volatility is one and LiMe ( Linux Memory extractor) is for creating the dump I think?
I need a sense of direction about how to proceed with this and right now I'm very confused and don't even know how to start and what to do first.
Also, I suppose I should do all of this on a Virtual Machine so I don't destroy my system?
Please do help out.