Comments (3)
Hackerl
commented on August 23, 2024
这应该是所有基于instrument的JVM RASP应用无法避免的问题，直接调用native方法会被绕过，目前能缓解的方案是部署整套Elkeid方案，因为driver层面是无法被绕过的。RASP主要是作为定位代码漏洞的手段，提供调用栈和代码行号等信息。
from elkeid.
Hackerl
commented on August 23, 2024
或许之后可以考虑在JVM层面对native方法进行inline hook
from elkeid.
Hackerl
commented on August 23, 2024
如果不考虑性能影响，可以对Method.setAccessible、Method.invoke等api进行hook，那么该bypass行为便能感知，并且可以配置相应的阻断规则。
from elkeid.
Related Issues (20)
- rasp jvm版本支持问题 HOT 1
- tlinux24 docker批量编译部分ko编译失败 HOT 3
- 集群导入出现异常the server has asked for the client to provide credentials
- Bug: Possible Channel Blocking Operation
- KO运行异常或丢失的信息未上报或展示 HOT 1
- 安装kafka时报错 HOT 1
- 执行病毒扫描过程中进度一直是0 HOT 2
- 怎么理解 agent 和 server/agent_center 下面的grpc.proto 风格不一样 HOT 2
- LKM驱动中rename或link后新路径获取异常
- agent采集不到执行的命令
- agent安装部署下载改为https HOT 2
- 什么时候能支持多一点系统呢
- docker部署报错
- ubuntu 6.5.0及以上版本ko编译错误
- driver compile failed on 5.4.250-1.el7.elrepo.x86_64 HOT 2
- 什么时候支持从前端删除离线机器
- Docker 部署时，agent init 报错。
- 容器集群-安全组件安装问题 HOT 8
- 8089端口命名有误
- Redis部署报错 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from elkeid.