[转载]Enabling Worm and Malware Investigation Using Virtualization

信息来源：http://www.cs.purdue.edu/homes/jiangx/collapsar/

A short but interesting set of slides that look at the Collapsar architecture from the Purdue CS research groups. The slide deck, Enabling Worm and Malware Investigation Using Virtualization, by Dongyan Xu, Xuxian Jiang, looks at measuring worm activity and studies several worms, including a couple of older Linux worms, and looks at the targeting functions. Quite neat, even without much text around them.

这是个PPT