Matches in SemOpenAlex for { <https://semopenalex.org/work/W2051053140> ?p ?o ?g. }
Showing items 1 to 85 of
85
with 100 items per page.
- W2051053140 abstract "We present a kernel data interception technique that is undetectable by existing approaches to malware detection, and propose practical methods to detect it. The technique is based on breaking concurrency in a way that enables the attack code to take over the synchronization established by target kernel modules. That level of control allows the attack code to interpose between those modules, and thus intercept sensitive data. We illustrate the overall technique as applied to intercepting keystrokes from a computer keyboard on Windows 7, and demonstrate it in practice through an attack kernel driver that we dubbed kbdinterceptor. The technique has no reliance on function hooking, machine code replacement, direct access to I/O bus, or attachment to any device driver stack whatsoever. In the paper, we capture the salient characteristics of the attack technique to devise a defensive approach that can accurately detect the corresponding attack code through dynamic analysis." @default.
- W2051053140 created "2016-06-24" @default.
- W2051053140 creator A5022002868 @default.
- W2051053140 date "2014-08-01" @default.
- W2051053140 modified "2023-09-27" @default.
- W2051053140 title "Data Interception through Broken Concurrency in Kernel Land" @default.
- W2051053140 cites W103986934 @default.
- W2051053140 cites W1533125894 @default.
- W2051053140 cites W1973072591 @default.
- W2051053140 cites W2029224396 @default.
- W2051053140 cites W2109219878 @default.
- W2051053140 cites W2110756602 @default.
- W2051053140 cites W2126220112 @default.
- W2051053140 cites W2134007228 @default.
- W2051053140 cites W2146431583 @default.
- W2051053140 cites W2151200195 @default.
- W2051053140 cites W2162765234 @default.
- W2051053140 doi "https://doi.org/10.1109/hpcc.2014.131" @default.
- W2051053140 hasPublicationYear "2014" @default.
- W2051053140 type Work @default.
- W2051053140 sameAs 2051053140 @default.
- W2051053140 citedByCount "0" @default.
- W2051053140 crossrefType "proceedings-article" @default.
- W2051053140 hasAuthorship W2051053140A5022002868 @default.
- W2051053140 hasConcept C111919701 @default.
- W2051053140 hasConcept C114614502 @default.
- W2051053140 hasConcept C127162648 @default.
- W2051053140 hasConcept C149635348 @default.
- W2051053140 hasConcept C177264268 @default.
- W2051053140 hasConcept C193702766 @default.
- W2051053140 hasConcept C199360897 @default.
- W2051053140 hasConcept C2776760102 @default.
- W2051053140 hasConcept C2778562939 @default.
- W2051053140 hasConcept C31258907 @default.
- W2051053140 hasConcept C33923547 @default.
- W2051053140 hasConcept C41008148 @default.
- W2051053140 hasConcept C541664917 @default.
- W2051053140 hasConcept C553261973 @default.
- W2051053140 hasConcept C74193536 @default.
- W2051053140 hasConcept C9390403 @default.
- W2051053140 hasConcept C94127936 @default.
- W2051053140 hasConceptScore W2051053140C111919701 @default.
- W2051053140 hasConceptScore W2051053140C114614502 @default.
- W2051053140 hasConceptScore W2051053140C127162648 @default.
- W2051053140 hasConceptScore W2051053140C149635348 @default.
- W2051053140 hasConceptScore W2051053140C177264268 @default.
- W2051053140 hasConceptScore W2051053140C193702766 @default.
- W2051053140 hasConceptScore W2051053140C199360897 @default.
- W2051053140 hasConceptScore W2051053140C2776760102 @default.
- W2051053140 hasConceptScore W2051053140C2778562939 @default.
- W2051053140 hasConceptScore W2051053140C31258907 @default.
- W2051053140 hasConceptScore W2051053140C33923547 @default.
- W2051053140 hasConceptScore W2051053140C41008148 @default.
- W2051053140 hasConceptScore W2051053140C541664917 @default.
- W2051053140 hasConceptScore W2051053140C553261973 @default.
- W2051053140 hasConceptScore W2051053140C74193536 @default.
- W2051053140 hasConceptScore W2051053140C9390403 @default.
- W2051053140 hasConceptScore W2051053140C94127936 @default.
- W2051053140 hasLocation W20510531401 @default.
- W2051053140 hasOpenAccess W2051053140 @default.
- W2051053140 hasPrimaryLocation W20510531401 @default.
- W2051053140 hasRelatedWork W1528086994 @default.
- W2051053140 hasRelatedWork W1557252148 @default.
- W2051053140 hasRelatedWork W161130706 @default.
- W2051053140 hasRelatedWork W2057743816 @default.
- W2051053140 hasRelatedWork W2094619820 @default.
- W2051053140 hasRelatedWork W2293344439 @default.
- W2051053140 hasRelatedWork W2403154275 @default.
- W2051053140 hasRelatedWork W2538805569 @default.
- W2051053140 hasRelatedWork W2556234138 @default.
- W2051053140 hasRelatedWork W2773176369 @default.
- W2051053140 hasRelatedWork W2782776600 @default.
- W2051053140 hasRelatedWork W2788967668 @default.
- W2051053140 hasRelatedWork W2943981992 @default.
- W2051053140 hasRelatedWork W2944983680 @default.
- W2051053140 hasRelatedWork W2955020618 @default.
- W2051053140 hasRelatedWork W2989876523 @default.
- W2051053140 hasRelatedWork W3033546304 @default.
- W2051053140 hasRelatedWork W3192786862 @default.
- W2051053140 hasRelatedWork W3207100263 @default.
- W2051053140 hasRelatedWork W3026304524 @default.
- W2051053140 isParatext "false" @default.
- W2051053140 isRetracted "false" @default.
- W2051053140 magId "2051053140" @default.
- W2051053140 workType "article" @default.