Protect Enterprise Against Cryptojacking.pdfProtec

文件名称: Protect Enterprise Against Cryptojacking.pdf

所属分类: 系统安全

开发工具:

文件大小: 4mb

下载次数: 0

上传时间: 2019-07-05

提供者: zl3***

下载 (4mb)

不能下载？报告错误

详细说明：Protect Enterprise Against Cryptojacking - Lessons From Tracing 8220 Miner Group.pdfProtect Enterprise Against Cryptojacking - Lessons From Tracing 8220 Miner Group.pdfProtect Enterprise Against Cryptojacking - Lessons From Tracing 8220 Miner Group.pdfProtect Enterprise Against Cryptojacking - LessoWe Love Being A Member of FIRST Community e 奇安信 age oSINT to Trace APT up aNCSERTICC Cryptocurrency Mining Should Be Like This 奇安信本以 +1A鼻级 ● B However, Somethings Are Going Wrong 奇安信新一代网缗安全领军者 CRYPTUJACKING CKING ING One Incident Case Customer Profile 奇安信 One university at southwest china Run a distributed computing environment based on hadoop Problems July, 2018 Extremely low performance of Hadoop servers High CPU usage Normal computation jobs cannot be executed properly Abnormal CPU Usage: 732.5% 奇安信新一代网缗安全领军者 Mem: 33014376k total. 28178212k used. 4836164k free. 683280k buffers Swap: ok totaL Ok used, ok free. 12700264k cached PID USER PRNIⅥ RT RES SHR S%PU‰怃 M TIME+ COMMAND 951 yarn 200909n17n592S732.50.1977:50.22jaa 9941 root 2001720014841016R100.00.00:00.07top 1 root 200214001280968S0.0.00:02.90init 2 root 200000S0.00.00:00.00 kthreadd 3 root RT0000S0.00.00:14.03 migration./0 4 root 200000S0.00.00:15.51 ksoftirgd,/0 5 root RT0000S0.00.00:00.00 stopper/ 6 root RT0000S0.00.00:03.64 watchdog,/0 7 root RT000950.00.00:02.88 migration/1 8 root rt 0 000s0.00.0 0: 00.00 stopper /1 9 root 20 000S0.00.00:09.94 ksoftirgd/1 10 root rt 000S0.00.00:02.12 watchdog/1 root rt o 000S0.00.00:12.70 migration/2 Suspicious ELF File 奇安信新一代网缗安全领军者 [rootmaster tmp]# LL total 4672 rW-r--r--1 root root o May 26 17: 06 aLiyun_assist_update lock rwxr-xr-x 1 yarnyarn 2386544 Jul 10 13: 27 java rw-------1 root root 1140 ul 9 21.56 admin 0 rw-r--r-- 1 yarn yarn 2386544 JuL 10 13: 34 pscf3 draw 2 yarnyarn 4096 Jun 29 21: 06 yum-yarn-8XIAwW [rootemaster tmp]# Hadoop Version 可奇安信新一代网缗安全领军者 [master w]# hadoop version Hadoop 2.6.0-cdh5 12.1 Subversionhttp://github.com/cloudera/hadoop-r520d8b072e666e9f21d645ca6a5219fc37535a52 Compiled by jenkins on 2017-08-24T16: 32Z Compiled with protoc 2.5.0 From source with checksum de51bf9693ab9426379a1cd28142cea0 This command was run using /opt/cloudera/parcels/CDH-5 12.1-1 cdh5. 12. 1. p0. 3/jars/hadoop-common-2 6 0-cdh5 12 1. jar [rootemaster x]#

(系统自动生成,下载前可以参看下载内容)