Honeypots: Re: Hackers Use Virtual Machine Detection To Foil Researchers

["Mike Gibson" <micheal.gibson () gmail com>]

Isn't this a good thing for all those who have virtualized alot of
their actual servers and aren't just using VMWare for testing. I bet
those people are glad they aren't vulnerable to "Three out of 12
malware specimens".

Mike Gibson, CISSP
Security Architect
Third Brigade

On 11/21/06, Mark Ryan del Moral Talabis <talabis () gmail com> wrote:
> Article:
> http://www.informationweek.com/software/showArticle.jhtml?articleID=194500277
>
> Anti-detection stuff:
> http://handlers.sans.org/tliston/ThwartingVMDetection_Liston_Skoudis.pdf
>
> --
> Mark Ryan del Moral Talabis
> MS GSEC MCP PTRP
>
> The Philippine Honeynet Project
> http://www.philippinehoneynet.org