Blue Pill Project

Discussion in 'Forum for discussion of ANTICHAT' started by banned, 3 Aug 2007.

  1. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,324
    Likes Received:
    1,194
    Reputations:
    252
    Blue Pill Project

    // Intro
    Code:
    The original Blue Pill proof of concept code has been written by Joanna Rutkowska, while working for COSEINC, and presented at the Black Hat Briefings 2006 in Las Vegas on August 3rd. Joanna Rutkowska then formed a small team of researchers inside COSEINC, Advanced Malware Labs, which was supposed to focus on further research into virtualization based malware. However after just a few months the priorities of work have been shifted, resulting in Blue Pill research activities being ceased.
    
    In April 2007 Joanna Rutkowska decided to quit COSEINC and start her own security consulting firm, Invisible Things Lab. In May 2007 Alexander Tereshkin, a former member of COSEINC AML, joined ITL as a principal researcher. Joanna Rutkowska and Alexander Tereshkin decided to redesign and write from scratch the New Blue Pill rootkit, so that it would be possible to use it for further research and for educational purposes. Most of the New Blue Pill’s code was developed by Alexander Tereshkin.
    
    The New Blue Pill is significantly different from the original Blue Pill, not only because of the various features that it implements, but also because of the different architecture it was based on (HVM-like approach, similar to that used by XEN 3).
    // Currently implemented features
    // Current limitations
    // Disclaimer
    // Downloads
    * nbp-0.11.zip (2007-08-01)
    * svm-detectors-0.1.zip (2007-08-01)
    * IsGameOver.ppt (2007-08-01)

    (c) ITL
     
  2. n0ne

    n0ne Elder - Старейшина

    Joined:
    1 Jan 2007
    Messages:
    542
    Likes Received:
    284
    Reputations:
    -56
    Остальное имхо не имеет смысла переводить, вам поможет translate.ru и словарь.

    зы уже перенесли в анг раздел =\ рука не поднимаеца удалить :D