Autoscopy Jr.

Autoscopy Jr. is a host-based intrusion detection system created specifically for remotely-deployed embedded smart grid devices, which are not powerful enough to support virtual machines and are potentially too remote to constantly update malware signatures. Autoscopy Jr. circumvents these issues by living directly within the host OS and using the OS's own data structures to look for anomalous system behavior.

Autoscopy Jr. was initially transferred to a power industry hardware manufacturer who used it as the architectural basis for their own security solution within their product line. Autoscopy Jr. is available upon request and provided under version 2 of the GNU General Public License. To request Autoscopy Jr., contact the Institute for Security, Technology, and Society at Dartmouth College.

Tech category: