#import "@preview/polylux:0.3.1": * #import themes.metropolis: * #import "@preview/tablex:0.0.5": tablex, hlinex, vlinex, colspanx, rowspanx #import emoji: checkmark, crossmark //#import symbol: approx #show: metropolis-theme.with( footer: [CC BY-SA 4.0 Arthur Grisel-Davy] ) #set text(font: "Fira Sans", weight: "light", size: 20pt) #set strong(delta: 100) #set par(justify: true) #title-slide( author: [Arthur Grisel-Davy], title: text(size: 30pt, weight: 500)[Can't Trust the Machine. Physics-Based Log Verification.], subtitle: "", date: "University of Waterloo", extra: "agriseld@uwaterloo.ca" ) //#slide(title: "Table of contents")[ // #metropolis-outline //] #slide(title: "Introduction")[ #figure(image("images/intro_normal_hids.svg", width: 100%)) ] #slide(title: "Introduction")[ // Find example of HIDS that uses processes list // malwarebyte // windows defender ] #slide(title:"")[ #align(center)[#text(size:1.2em, weight:"bold")[Only uncompromised hosts provide trustworthy information.]] ] #slide(title: "Introduction")[ #figure(image("images/overview_verification_step.svg", width: 100%)) ] #slide(title: "Introduction")[ #let check = table.cell(fill: green.lighten(60%))[*#sym.checkmark*] #let cross = table.cell(fill: red.lighten(60%))[*#sym.times*] #let middle = table.cell(fill: orange.lighten(60%))[*#sym.approx*] #align(center)[ #table( columns: 4, align: (left, center, center, center), stroke: none, gutter: 0.5em, table.hline(position: bottom), table.header([*Feature*], [*Power*], [*EM*], [*Sound*]), [Independence], check, check, check, [Correlation], check, cross, middle, [Ease of Capture], check, check, middle, [Location Insensitivity], check, cross, cross, [Actionability], [], [], [] ) ] ]