DISQUS

Matasano Chargen: Requirements for Injectable Virtual Machines

  • Nate · 1 year ago
    Context, please. Perhaps an intro and links to your three years of research papers would help.
  • wbrown · 1 year ago
    Here's some context.

    I first spoke at Defcon 13 about a Lua-based approach to this problem. This implementation was 120K, and was available under the BSD license. I will need to dig some to put up the source code for this up.

    http://www.defcon.org/html/defcon-13/dc13-speak...

    I then spoke at Defcon 14 and HitB 2006 about a Lisp-based approach to this.

    http://www.defcon.org/html/defcon-14/dc-14-spea...

    Slides are available here:
    http://conference.hitb.org/hitbsecconf2006kl/ma...

    Video of the presentation is available here:
    http://video.google.com/videoplay?docid=-468113...

    Source code is available here:
    http://sourceforge.net/project/showfiles.php?gr...

    Scott Dunlop has since taken the virtual machine and taken it in another direction, WaspVM, which is more general purpose.

    I am currently working on the next implementation, which will fulfill the requirements above better than the previous ones, and will write about it.
  • eris hacker · 1 year ago
    That's nothing. I heard about this guy, Wes Brown, who came up with a kickass injection engine. It would probably own yourz.

    Good luck, pal.
  • Ryan Russell · 1 year ago
    Ah, an agent.
  • John Waters · 1 year ago
    Good morning WB (It's morning in Riyadh, anyway)!
    Have you played around or considered Inferno as a foundation for an enjection engine? I think that some of the more novel characteristics of the "new new jersy" style of distributed computing (private name spaces, everything as a file, styx, etc.) might be advantageous, or at least interesting.

    Johnny of Arabia
  • Ben S. Knowles · 1 year ago
    Inferno, eh? Interesting...

    Well it's already been made into an IE plugin, is that vectorized enough to count? It may be a little big, but it's quite featureful.

    Ref: http://www.vitanuova.com/inferno/plugin/index.html

    The Mozilla plugin has long been under development, including some GSoC work: http://code.google.com/p/inferno-plugin/

    It's morning here in Atlanta, which means I get to go home soon. Have a good week all !