Monitoring of malefactor's activity in virtualized honeypots on the base of semantic transformation in Qemu hypervisor

摘要

In this article there have been given results of researches and realization of honeypot introspection analysis mechanism, which provides the exposure- and blocking-resistant monitoring of malefactor's activity on Linux operating system. Difficulties of realization, and features of architectural realization, are considered in detail. On the basis of the realized software complete and effective control of events becomes possible in virtualized OS.