Full Disclosure mailing list archives

EFC Released


From: Balwinder Singh <balwinder () gmx net>
Date: Thu, 04 Mar 2004 11:17:20 +0530

Dear All,

Execution Flow Control (EFC) is available for download at
http://sourceforge.net/projects/efc/

What is EFC?

EFC monitors the execution of a program by observing system calls made
by the program. EFC generates a database for each program describing 
its behavioral model. The moment request for execution of a program is
made, kernel also loads program's behavioral model into the memory.
Each request by a program is compared with model data base, if request
agrees with model it is permitted else program is killed. 

EFC is a kernel module, and woks on Linux only.

Sincerely

Bal

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: