Vulnerability Development mailing list archives

Detecting abnormal behaviour

From: Adrian S <hotelectron () hotmail com>
Date: 21 Mar 2003 16:28:52 -0000



Hi,

Is it possible to determine the source address of the system call to check
if it is proper from a list of legal addresses (legal process space etc) ?

rgds
Adrian

Current thread:

Detecting abnormal behaviour Adrian S (Mar 21)
- Re: Detecting abnormal behaviour Stephen. (Mar 23)
  - Re: Detecting abnormal behaviour Jose Nazario (Mar 23)
    - Re: Detecting abnormal behaviour Martin Mačok (Mar 24)
- <Possible follow-ups>
- Re: Detecting abnormal behaviour Alexander E. Cuttergo (Mar 21)