A log system based on system call
Lijun Chen · 2011
In order to analyze the system's security easily and timely,the Linux system call mechanism is studied and a log system based on system call is designed and implemented.By this design,new system calls are added to the kernel,form which logs are captured and exported to the user mode part in real-time.To reduce the modification of kernel source as much as possible,the core function module is designed as kernel loadable module,which also brings the debugging difficulty to be lower and makes the system extend easier.