Internship Programmes
 
Anti-malware Application Understanding Using QEMU

Discipline: Computer Engineering/Computer Science/Electrical Engineering preferred

Project Description:
QEMU is an user-space applications that enabled OS virtualization.   Given an existing anti-malware application,    how can we estimate the overall competency of the application – in its response to different techniques of malware attacks?

The candidate will design a process of utilizing QEMU software virtualization technology to enable testing of the anti-malware application.   After identifying a few technical criteria for assessing the overall capability of the anti-malware application (eg, does the anti-malware application check for DEP bypass etc) he will follow through with other techniques like string search, and QEMU virtualization, to identify the requirements of such successful detection.

The challenges of the project are:
1) Achieve a good understanding of the overall architecture of Linux Kernel, and QEMU.
2) Understand the key concepts in virtualization.
3) Setup and run QEMU, and subsequently install a Linux OS.  
4) Design a process for anti-malware technical capability assessment.
5) Patch the QEMU to enable testing and verification of such technical capability.

Pre-requisite:
- Some C programming
- Linux administrator/user experience
- Good malware and anti-malware concepts
- Intel x86 hardware features (like DEP)