mailing list archives
Re: EFC Released
From: Timothy Demulder <timothy.demulder () tiscali be>
Date: Thu, 4 Mar 2004 09:45:21 +0100
On Thu, 04 Mar 2004 11:17:20 +0530
Balwinder Singh <balwinder () gmx net> wrote:
Execution Flow Control (EFC) is available for download at
What is EFC?
EFC monitors the execution of a program by observing system calls made
by the program. EFC generates a database for each program describing
its behavioral model. The moment request for execution of a program is
made, kernel also loads program's behavioral model into the memory.
Each request by a program is compared with model data base, if request
agrees with model it is permitted else program is killed.
EFC is a kernel module, and woks on Linux only.
Seems very interesting, but how does it affect performance/stability of the system/kernel?
Absolutely nothing should be concluded from these figures except that
no conclusion can be drawn from them.
-- Joseph L. Brothers, Linux/PowerPC Project)