GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → F-Secure → See

F-Secure / See

Licence: apache-2.0
Sandboxed Execution Environment

Programming Languages

python
139335 projects - #7 most used programming language

Labels

malware-analysisvirtualizationsandboxmalware-research

Projects that are alternatives of or similar to See

Pafish
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
Stars: ✭ 2,026 (+163.12%)
Mutual labels:  sandbox, malware-analysis, malware-research
Drakvuf Sandbox
DRAKVUF Sandbox - automated hypervisor-level malware analysis system
Stars: ✭ 384 (-50.13%)
Mutual labels:  sandbox, malware-analysis, malware-research
Saferwall
A hackable malware sandbox for the 21st Century
Stars: ✭ 419 (-45.58%)
Mutual labels:  sandbox, malware-analysis
Pev
The PE file analysis toolkit
Stars: ✭ 422 (-45.19%)
Mutual labels:  malware-analysis, malware-research
Hvpp
hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
Stars: ✭ 637 (-17.27%)
Mutual labels:  sandbox, virtualization
Fame
FAME Automates Malware Evaluation
Stars: ✭ 663 (-13.9%)
Mutual labels:  malware-analysis, malware-research
Dex Oracle
A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
Stars: ✭ 398 (-48.31%)
Mutual labels:  malware-analysis, malware-research
Linux.mirai
Leaked Linux.Mirai Source Code for Research/IoC Development Purposes
Stars: ✭ 466 (-39.48%)
Mutual labels:  malware-analysis, malware-research
Winappdbg
WinAppDbg Debugger
Stars: ✭ 338 (-56.1%)
Mutual labels:  malware-analysis, malware-research
Drakvuf
DRAKVUF Black-box Binary Analysis
Stars: ✭ 628 (-18.44%)
Mutual labels:  malware-analysis, virtualization
Antivmdetection
Script to create templates to use with VirtualBox to make vm detection harder
Stars: ✭ 527 (-31.56%)
Mutual labels:  sandbox, malware-analysis
Ops
ops - build and run nanos unikernels
Stars: ✭ 552 (-28.31%)
Mutual labels:  sandbox, virtualization
Simplify
Android virtual machine and deobfuscator
Stars: ✭ 3,865 (+401.95%)
Mutual labels:  malware-analysis, malware-research
Stoq
An open source framework for enterprise level automated analysis.
Stars: ✭ 352 (-54.29%)
Mutual labels:  malware-analysis, malware-research
Malware Jail
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
Stars: ✭ 349 (-54.68%)
Mutual labels:  malware-analysis, malware-research
Wdbgark
WinDBG Anti-RootKit Extension
Stars: ✭ 450 (-41.56%)
Mutual labels:  malware-analysis, malware-research
Malware Samples
A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net
Stars: ✭ 565 (-26.62%)
Mutual labels:  malware-analysis, malware-research
Docker Cuckoo
Cuckoo Sandbox Dockerfile
Stars: ✭ 289 (-62.47%)
Mutual labels:  sandbox, malware-analysis
Polichombr
Collaborative malware analysis framework
Stars: ✭ 307 (-60.13%)
Mutual labels:  malware-analysis, malware-research
Multiscanner
Modular file scanning/analysis framework
Stars: ✭ 494 (-35.84%)
Mutual labels:  malware-analysis, malware-research
View All Similar Projects ➔

Sandboxed Execution Environment

:Source: https://github.com/F-Secure/see :Documentation: https://see.readthedocs.io :Download: https://pypi.python.org/pypi/python-see

|travis badge| |docs badge|

.. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target: https://travis-ci.org/F-Secure/see :alt: Build Status .. |docs badge| image:: https://readthedocs.org/projects/see/badge/?version=latest :target: http://see.readthedocs.io/en/latest/?badge=latest :alt: Documentation Status

Introduction

Sandboxed Execution Environment (SEE) is a framework for building test automation in secured Environments.

The Sandboxes, provided via libvirt, are customizable allowing high degree of flexibility. Different type of Hypervisors (Qemu, VirtualBox, LXC) can be employed to run the Test Environments.

Plugins can be added to a Test Environment which provides an Event mechanism synchronisation for their interaction. Users can enable and configure the plugins through a JSON configuration file.

Audience

SEE is for automating tests against unknown, dangerous or unstable software tracking its activity during the execution.

SEE is well suited for building modular test platforms or managing executable code with a good degree of isolation.

SEE allows to write sandboxed tests both for quick prototyping and for running on production environment.

Installation

SEE is available as Python package on the Python Package Index (PyPI).

It's user's responsibility to install and setup the hypervisors intended to be controlled with SEE and the possible dependencies and subsystems used by the selected image providers.

Please refer to the documentation to see how to setup and configure each hypervisor.

Supported hypervisors

SEE is build on top of libvirt's APIs, therefore all hypervisors supported by libvirt can be controlled through SEE.

SEE comes with a basic support for QEMU, VirtualBox and LXC, to add more hypervisor or customize the basic ones see the code contained in see/context.

Image providers

SEE uses a system of pluggable providers to retrieve disk images from arbitrary sources and make them available to SEE.

SEE bundles providers for LibVirt storage pools <https://libvirt.org/storage.html>_ and OpenStack Glance <https://docs.openstack.org/developer/glance/>_ as well as a dummy provider implementation, to add more providers see the code contained in see/image_providers.

Principles

SEE is an event-driven, plugin-based sandbox provider for synchronous and asynchronous test flow control.

::

                                                                  +----------+
                                                                  |          |
                                                          +-------| SEE Hook |
                                                          |       |          |
                                                          |       +----------+
              +---------+-------+       +---------+       |       +----------+
              |                 |       |         |       |       |          |
User -------> | SEE Environment |-------| Sandbox |-------+-------| SEE Hook |
              |                 |       |         |       |       |          |
              +-----------------+       +---------+       |       +----------+
                                                          |       +----------+
                                                          |       |          |
                                                          +-------| SEE Hook |
                                                                  |          |
                                                                  +----------+

A SEE Environment encapsulates all the required resources acting as a handler for the User. The Sandbox is controlled by the Hooks which act as plugins, Hooks communicate and co-ordinate themselves through Events.

Each Hook has direct access to the Sandbox which exposes a simple API for it's control and libvirt's APIs for more fine grained control.

Links

Libvirt project page.

https://libvirt.org

Presentation on PyCon Finland 2015.

https://www.youtube.com/watch?v=k185OMivqbQ

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].