mirror of
https://github.com/h3xduck/TripleCross.git
synced 2025-12-17 23:53:06 +08:00
124 lines
9.4 KiB
TeX
124 lines
9.4 KiB
TeX
\relax
|
|
\providecommand\hyper@newdestlabel[2]{}
|
|
\providecommand\HyperFirstAtBeginDocument{\AtBeginDocument}
|
|
\HyperFirstAtBeginDocument{\ifx\hyper@anchor\@undefined
|
|
\global\let\oldcontentsline\contentsline
|
|
\gdef\contentsline#1#2#3#4{\oldcontentsline{#1}{#2}{#3}}
|
|
\global\let\oldnewlabel\newlabel
|
|
\gdef\newlabel#1#2{\newlabelxx{#1}#2}
|
|
\gdef\newlabelxx#1#2#3#4#5#6{\oldnewlabel{#1}{{#2}{#3}}}
|
|
\AtEndDocument{\ifx\hyper@anchor\@undefined
|
|
\let\contentsline\oldcontentsline
|
|
\let\newlabel\oldnewlabel
|
|
\fi}
|
|
\fi}
|
|
\global\let\hyper@last\relax
|
|
\gdef\HyperFirstAtBeginDocument#1{#1}
|
|
\providecommand\HyField@AuxAddToFields[1]{}
|
|
\providecommand\HyField@AuxAddToCoFields[2]{}
|
|
\providecommand\babel@aux[2]{}
|
|
\@nameuse{bbl@beforestart}
|
|
\@writefile{toc}{\boolfalse {citerequest}\boolfalse {citetracker}\boolfalse {pagetracker}\boolfalse {backtracker}\relax }
|
|
\@writefile{lof}{\boolfalse {citerequest}\boolfalse {citetracker}\boolfalse {pagetracker}\boolfalse {backtracker}\relax }
|
|
\@writefile{lot}{\boolfalse {citerequest}\boolfalse {citetracker}\boolfalse {pagetracker}\boolfalse {backtracker}\relax }
|
|
\abx@aux@refcontext{none/global//global/global}
|
|
\babel@aux{english}{}
|
|
\abx@aux@cite{ransomware_pwc}
|
|
\abx@aux@segm{0}{0}{ransomware_pwc}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {chapter}{\numberline {1}Introduction}{1}{chapter.1}\protected@file@percent }
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\addvspace {10\p@ }}
|
|
\@writefile{lot}{\defcounter {refsection}{0}\relax }\@writefile{lot}{\addvspace {10\p@ }}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {section}{\numberline {1.1}Motivation}{1}{section.1.1}\protected@file@percent }
|
|
\abx@aux@cite{rootkit_ptsecurity}
|
|
\abx@aux@segm{0}{0}{rootkit_ptsecurity}
|
|
\abx@aux@cite{ebpf_linux318}
|
|
\abx@aux@segm{0}{0}{ebpf_linux318}
|
|
\abx@aux@cite{bvp47_report}
|
|
\abx@aux@segm{0}{0}{bvp47_report}
|
|
\abx@aux@cite{bpfdoor_pwc}
|
|
\abx@aux@segm{0}{0}{bpfdoor_pwc}
|
|
\abx@aux@cite{ebpf_windows}
|
|
\abx@aux@segm{0}{0}{ebpf_windows}
|
|
\abx@aux@cite{ebpf_android}
|
|
\abx@aux@segm{0}{0}{ebpf_android}
|
|
\abx@aux@cite{evil_ebpf}
|
|
\abx@aux@segm{0}{0}{evil_ebpf}
|
|
\abx@aux@cite{bad_ebpf}
|
|
\abx@aux@segm{0}{0}{bad_ebpf}
|
|
\abx@aux@cite{ebpf_friends}
|
|
\abx@aux@segm{0}{0}{ebpf_friends}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {section}{\numberline {1.2}Project objectives}{3}{section.1.2}\protected@file@percent }
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {section}{\numberline {1.3}Regulatory framework}{4}{section.1.3}\protected@file@percent }
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {subsection}{\numberline {1.3.1}Social and economic environment}{4}{subsection.1.3.1}\protected@file@percent }
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {subsection}{\numberline {1.3.2}Budget}{4}{subsection.1.3.2}\protected@file@percent }
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {section}{\numberline {1.4}Structure of the document}{4}{section.1.4}\protected@file@percent }
|
|
\abx@aux@cite{ebpf_io}
|
|
\abx@aux@segm{0}{0}{ebpf_io}
|
|
\abx@aux@cite{bpf_bsd_origin}
|
|
\abx@aux@segm{0}{0}{bpf_bsd_origin}
|
|
\abx@aux@cite{ebpf_history_opensource}
|
|
\abx@aux@segm{0}{0}{ebpf_history_opensource}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {chapter}{\numberline {2}State of the art}{5}{chapter.2}\protected@file@percent }
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\addvspace {10\p@ }}
|
|
\@writefile{lot}{\defcounter {refsection}{0}\relax }\@writefile{lot}{\addvspace {10\p@ }}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {section}{\numberline {2.1}Introduction to eBPF}{5}{section.2.1}\protected@file@percent }
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {subsection}{\numberline {2.1.1}eBPF history - Classic BPF}{5}{subsection.2.1.1}\protected@file@percent }
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\contentsline {figure}{\numberline {2.1}{\ignorespaces Sketch of the functionality of classic BPF\relax }}{5}{figure.caption.7}\protected@file@percent }
|
|
\providecommand*\caption@xref[2]{\@setref\relax\@undefined{#1}}
|
|
\newlabel{fig:classif_bpf}{{2.1}{5}{Sketch of the functionality of classic BPF\relax }{figure.caption.7}{}}
|
|
\abx@aux@cite{bpf_bsd_origin_bpf_page1}
|
|
\abx@aux@segm{0}{0}{bpf_bsd_origin_bpf_page1}
|
|
\abx@aux@cite{index_register}
|
|
\abx@aux@segm{0}{0}{index_register}
|
|
\abx@aux@cite{bpf_bsd_origin_bpf_page5}
|
|
\abx@aux@segm{0}{0}{bpf_bsd_origin_bpf_page5}
|
|
\abx@aux@cite{bpf_organicprogrammer_analysis}
|
|
\abx@aux@segm{0}{0}{bpf_organicprogrammer_analysis}
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\contentsline {figure}{\numberline {2.2}{\ignorespaces Execution of a BPF filter.\relax }}{7}{figure.caption.8}\protected@file@percent }
|
|
\newlabel{fig:cbpf_prog}{{2.2}{7}{Execution of a BPF filter.\relax }{figure.caption.8}{}}
|
|
\@writefile{lot}{\defcounter {refsection}{0}\relax }\@writefile{lot}{\contentsline {table}{\numberline {2.1}{\ignorespaces Table showing BPF instruction format. It is a fixed-length 64 bit instruction, the number of bits used by each field are indicated.\relax }}{7}{table.caption.9}\protected@file@percent }
|
|
\newlabel{table:bpf_inst_format}{{2.1}{7}{Table showing BPF instruction format. It is a fixed-length 64 bit instruction, the number of bits used by each field are indicated.\relax }{table.caption.9}{}}
|
|
\abx@aux@cite{bpf_bsd_origin_bpf_page7}
|
|
\abx@aux@segm{0}{0}{bpf_bsd_origin_bpf_page7}
|
|
\abx@aux@cite{bpf_bsd_origin_bpf_page8}
|
|
\abx@aux@segm{0}{0}{bpf_bsd_origin_bpf_page8}
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\contentsline {figure}{\numberline {2.3}{\ignorespaces Table of supported classic BPF instructions, as shown by McCanne and Jacobson\cite {bpf_bsd_origin_bpf_page7}\relax }}{8}{figure.caption.10}\protected@file@percent }
|
|
\newlabel{fig:bpf_instructions}{{2.3}{8}{Table of supported classic BPF instructions, as shown by McCanne and Jacobson\cite {bpf_bsd_origin_bpf_page7}\relax }{figure.caption.10}{}}
|
|
\abx@aux@cite{bpf_bsd_origin_bpf_page8}
|
|
\abx@aux@segm{0}{0}{bpf_bsd_origin_bpf_page8}
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\contentsline {figure}{\numberline {2.4}{\ignorespaces Table explaining the column address modes in Figure\ref {fig:bpf_instructions}, as shown by McCanne and Jacobson\cite {bpf_bsd_origin_bpf_page8}\relax }}{9}{figure.caption.11}\protected@file@percent }
|
|
\newlabel{fig:bpf_address_mode}{{2.4}{9}{Table explaining the column address modes in Figure\ref {fig:bpf_instructions}, as shown by McCanne and Jacobson\cite {bpf_bsd_origin_bpf_page8}\relax }{figure.caption.11}{}}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {chapter}{\numberline {3}Methods??}{10}{chapter.3}\protected@file@percent }
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\addvspace {10\p@ }}
|
|
\@writefile{lot}{\defcounter {refsection}{0}\relax }\@writefile{lot}{\addvspace {10\p@ }}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {chapter}{\numberline {4}Results}{11}{chapter.4}\protected@file@percent }
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\addvspace {10\p@ }}
|
|
\@writefile{lot}{\defcounter {refsection}{0}\relax }\@writefile{lot}{\addvspace {10\p@ }}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {chapter}{\numberline {5}Conclusion and future work}{12}{chapter.5}\protected@file@percent }
|
|
\@writefile{lof}{\defcounter {refsection}{0}\relax }\@writefile{lof}{\addvspace {10\p@ }}
|
|
\@writefile{lot}{\defcounter {refsection}{0}\relax }\@writefile{lot}{\addvspace {10\p@ }}
|
|
\@writefile{toc}{\defcounter {refsection}{0}\relax }\@writefile{toc}{\contentsline {chapter}{Bibliography}{13}{chapter.5}\protected@file@percent }
|
|
\abx@aux@read@bbl@mdfivesum{87C7875B9C878945D5F672C63ACB5E95}
|
|
\abx@aux@refcontextdefaultsdone
|
|
\abx@aux@defaultrefcontext{0}{ransomware_pwc}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{rootkit_ptsecurity}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{ebpf_linux318}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bvp47_report}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bpfdoor_pwc}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{ebpf_windows}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{ebpf_android}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{evil_ebpf}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bad_ebpf}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{ebpf_friends}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{ebpf_io}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bpf_bsd_origin}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{ebpf_history_opensource}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bpf_bsd_origin_bpf_page1}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{index_register}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bpf_bsd_origin_bpf_page5}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bpf_organicprogrammer_analysis}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bpf_bsd_origin_bpf_page7}{none/global//global/global}
|
|
\abx@aux@defaultrefcontext{0}{bpf_bsd_origin_bpf_page8}{none/global//global/global}
|
|
\ttl@finishall
|
|
\gdef \@abspage@last{30}
|