Matches in SemOpenAlex for { <https://semopenalex.org/work/W2021847877> ?p ?o ?g. }
Showing items 1 to 67 of
67
with 100 items per page.
- W2021847877 endingPage "S119" @default.
- W2021847877 startingPage "S112" @default.
- W2021847877 abstract "Software based Memory acquisition on modern systems typically requires the insertion of a kernel module into the running kernel. On Linux, kernel modules must be compiled against the exact version of kernel headers and the exact kernel configuration used to build the currently executing kernel. This makes Linux memory acquisition significantly more complex in practice, than on other platforms due to the number of variations of kernel versions and configurations, especially when responding to incidents. The Linux kernel maintains a checksum of kernel version and will generally refuse to load a module which was compiled against a different kernel version. Although there are some techniques to override this check, there is an inherent danger leading to an unstable kernel and possible kernel crashes. This paper presents a novel technique to safely load a pre-compiled kernel module for acquisition on a wide range of Linux kernel versions and configuration. Our technique injects a minimal acquisition module (parasite) into another valid kernel module (host) already found on the target system. The resulting combined module is then relinked in such a way as to grant code execution and control over vital data structures to the acquisition code, whilst the host module remains dormant during runtime." @default.
- W2021847877 created "2016-06-24" @default.
- W2021847877 creator A5009865936 @default.
- W2021847877 creator A5032326411 @default.
- W2021847877 date "2014-05-01" @default.
- W2021847877 modified "2023-10-10" @default.
- W2021847877 title "Robust Linux memory acquisition with minimal target impact" @default.
- W2021847877 cites W1972940696 @default.
- W2021847877 cites W2096269529 @default.
- W2021847877 cites W2113854927 @default.
- W2021847877 cites W2137725382 @default.
- W2021847877 cites W2143642500 @default.
- W2021847877 doi "https://doi.org/10.1016/j.diin.2014.03.014" @default.
- W2021847877 hasPublicationYear "2014" @default.
- W2021847877 type Work @default.
- W2021847877 sameAs 2021847877 @default.
- W2021847877 citedByCount "19" @default.
- W2021847877 countsByYear W20218478772015 @default.
- W2021847877 countsByYear W20218478772016 @default.
- W2021847877 countsByYear W20218478772017 @default.
- W2021847877 countsByYear W20218478772018 @default.
- W2021847877 countsByYear W20218478772019 @default.
- W2021847877 countsByYear W20218478772020 @default.
- W2021847877 countsByYear W20218478772021 @default.
- W2021847877 countsByYear W20218478772023 @default.
- W2021847877 crossrefType "journal-article" @default.
- W2021847877 hasAuthorship W2021847877A5009865936 @default.
- W2021847877 hasAuthorship W2021847877A5032326411 @default.
- W2021847877 hasBestOaLocation W20218478771 @default.
- W2021847877 hasConcept C111919701 @default.
- W2021847877 hasConcept C114614502 @default.
- W2021847877 hasConcept C149635348 @default.
- W2021847877 hasConcept C33923547 @default.
- W2021847877 hasConcept C41008148 @default.
- W2021847877 hasConcept C553261973 @default.
- W2021847877 hasConcept C74193536 @default.
- W2021847877 hasConcept C90307666 @default.
- W2021847877 hasConcept C94127936 @default.
- W2021847877 hasConceptScore W2021847877C111919701 @default.
- W2021847877 hasConceptScore W2021847877C114614502 @default.
- W2021847877 hasConceptScore W2021847877C149635348 @default.
- W2021847877 hasConceptScore W2021847877C33923547 @default.
- W2021847877 hasConceptScore W2021847877C41008148 @default.
- W2021847877 hasConceptScore W2021847877C553261973 @default.
- W2021847877 hasConceptScore W2021847877C74193536 @default.
- W2021847877 hasConceptScore W2021847877C90307666 @default.
- W2021847877 hasConceptScore W2021847877C94127936 @default.
- W2021847877 hasLocation W20218478771 @default.
- W2021847877 hasOpenAccess W2021847877 @default.
- W2021847877 hasPrimaryLocation W20218478771 @default.
- W2021847877 hasRelatedWork W1922733741 @default.
- W2021847877 hasRelatedWork W2349791335 @default.
- W2021847877 hasRelatedWork W2354252607 @default.
- W2021847877 hasRelatedWork W2364776537 @default.
- W2021847877 hasRelatedWork W2367644348 @default.
- W2021847877 hasRelatedWork W2379000728 @default.
- W2021847877 hasRelatedWork W2388410831 @default.
- W2021847877 hasRelatedWork W2393791030 @default.
- W2021847877 hasRelatedWork W2912106162 @default.
- W2021847877 hasRelatedWork W3192614257 @default.
- W2021847877 hasVolume "11" @default.
- W2021847877 isParatext "false" @default.
- W2021847877 isRetracted "false" @default.
- W2021847877 magId "2021847877" @default.
- W2021847877 workType "article" @default.