Guillermo Rached - Computer Science - rachedge@mail.uc.edu
Thomas McCoy - Computer Science - mccoyt5@mail.uc.edu
Dr. Giovani Abuaitah
We developed a process monitoring tool for both network-based and host-based signatures. Yet Another HOst Sentinel, YAHOS, is primarily designed for Windows systems running on x86 architecture. YAHOS continuously monitors running processes and their open ports to log any network activity. The goal of this tool is to enhance system security by offering monitoring and analysis capabilities.
YAHOS monitors running processes and their open ports for network monitoring. In addition, the tool allows users to flag specific directories by providing a path for detailed monitoring and analysis of the directory's contents. Some of the techniques employed by YAHOS include virtual memory analysis, and packet capture.
There were no expenses in the completion of this project.