Matches in SemOpenAlex for { <https://semopenalex.org/work/W2113854927> ?p ?o ?g. }
Showing items 1 to 95 of
95
with 100 items per page.
- W2113854927 endingPage "134" @default.
- W2113854927 startingPage "126" @default.
- W2113854927 abstract "Recently there has been a surge in interest in memory forensics: the acquisition and analysis of the contents of physical memory obtained from live hosts. The emergence of kernel level rootkits, anti-forensics, and the threat of subversion that they pose threatens to undermine the reliability of such memory images and digital evidence in general. In this paper we propose a method of acquiring the contents of volatile memory from arbitrary operating systems in a manner that provides point in time atomic snapshots of the host OS volatile memory. Additionally the method is more resistant to subversion due to its reduced attack surface. Our method is to inject an independent, acquisition specific OS into the potentially subverted host OS kernel, snatching full control of the host's hardware. We describe an implementation of this proposal, which we call BodySnatcher, which has demonstrated proof of concept by acquiring memory from Windows 2000 operating systems." @default.
- W2113854927 created "2016-06-24" @default.
- W2113854927 creator A5024622331 @default.
- W2113854927 date "2007-09-01" @default.
- W2113854927 modified "2023-09-28" @default.
- W2113854927 title "BodySnatcher: Towards reliable volatile memory acquisition by software" @default.
- W2113854927 cites W2040527645 @default.
- W2113854927 cites W2106270115 @default.
- W2113854927 cites W29561091 @default.
- W2113854927 cites W4244704438 @default.
- W2113854927 doi "https://doi.org/10.1016/j.diin.2007.06.009" @default.
- W2113854927 hasPublicationYear "2007" @default.
- W2113854927 type Work @default.
- W2113854927 sameAs 2113854927 @default.
- W2113854927 citedByCount "74" @default.
- W2113854927 countsByYear W21138549272012 @default.
- W2113854927 countsByYear W21138549272013 @default.
- W2113854927 countsByYear W21138549272014 @default.
- W2113854927 countsByYear W21138549272015 @default.
- W2113854927 countsByYear W21138549272016 @default.
- W2113854927 countsByYear W21138549272017 @default.
- W2113854927 countsByYear W21138549272018 @default.
- W2113854927 countsByYear W21138549272019 @default.
- W2113854927 countsByYear W21138549272020 @default.
- W2113854927 countsByYear W21138549272022 @default.
- W2113854927 countsByYear W21138549272023 @default.
- W2113854927 crossrefType "journal-article" @default.
- W2113854927 hasAuthorship W2113854927A5024622331 @default.
- W2113854927 hasBestOaLocation W21138549271 @default.
- W2113854927 hasConcept C10144332 @default.
- W2113854927 hasConcept C111919701 @default.
- W2113854927 hasConcept C114614502 @default.
- W2113854927 hasConcept C121332964 @default.
- W2113854927 hasConcept C126831891 @default.
- W2113854927 hasConcept C149635348 @default.
- W2113854927 hasConcept C163258240 @default.
- W2113854927 hasConcept C176649486 @default.
- W2113854927 hasConcept C18131444 @default.
- W2113854927 hasConcept C18903297 @default.
- W2113854927 hasConcept C2777904410 @default.
- W2113854927 hasConcept C28180684 @default.
- W2113854927 hasConcept C33923547 @default.
- W2113854927 hasConcept C38652104 @default.
- W2113854927 hasConcept C41008148 @default.
- W2113854927 hasConcept C43214815 @default.
- W2113854927 hasConcept C541664917 @default.
- W2113854927 hasConcept C62520636 @default.
- W2113854927 hasConcept C74193536 @default.
- W2113854927 hasConcept C76399640 @default.
- W2113854927 hasConcept C84418412 @default.
- W2113854927 hasConcept C86803240 @default.
- W2113854927 hasConcept C98986596 @default.
- W2113854927 hasConceptScore W2113854927C10144332 @default.
- W2113854927 hasConceptScore W2113854927C111919701 @default.
- W2113854927 hasConceptScore W2113854927C114614502 @default.
- W2113854927 hasConceptScore W2113854927C121332964 @default.
- W2113854927 hasConceptScore W2113854927C126831891 @default.
- W2113854927 hasConceptScore W2113854927C149635348 @default.
- W2113854927 hasConceptScore W2113854927C163258240 @default.
- W2113854927 hasConceptScore W2113854927C176649486 @default.
- W2113854927 hasConceptScore W2113854927C18131444 @default.
- W2113854927 hasConceptScore W2113854927C18903297 @default.
- W2113854927 hasConceptScore W2113854927C2777904410 @default.
- W2113854927 hasConceptScore W2113854927C28180684 @default.
- W2113854927 hasConceptScore W2113854927C33923547 @default.
- W2113854927 hasConceptScore W2113854927C38652104 @default.
- W2113854927 hasConceptScore W2113854927C41008148 @default.
- W2113854927 hasConceptScore W2113854927C43214815 @default.
- W2113854927 hasConceptScore W2113854927C541664917 @default.
- W2113854927 hasConceptScore W2113854927C62520636 @default.
- W2113854927 hasConceptScore W2113854927C74193536 @default.
- W2113854927 hasConceptScore W2113854927C76399640 @default.
- W2113854927 hasConceptScore W2113854927C84418412 @default.
- W2113854927 hasConceptScore W2113854927C86803240 @default.
- W2113854927 hasConceptScore W2113854927C98986596 @default.
- W2113854927 hasLocation W21138549271 @default.
- W2113854927 hasOpenAccess W2113854927 @default.
- W2113854927 hasPrimaryLocation W21138549271 @default.
- W2113854927 hasRelatedWork W2033239416 @default.
- W2113854927 hasRelatedWork W2083276427 @default.
- W2113854927 hasRelatedWork W2113854927 @default.
- W2113854927 hasRelatedWork W2144642151 @default.
- W2113854927 hasRelatedWork W2362496566 @default.
- W2113854927 hasRelatedWork W2466602928 @default.
- W2113854927 hasRelatedWork W2484072889 @default.
- W2113854927 hasRelatedWork W3008812935 @default.
- W2113854927 hasRelatedWork W3009835977 @default.
- W2113854927 hasRelatedWork W4244773577 @default.
- W2113854927 hasVolume "4" @default.
- W2113854927 isParatext "false" @default.
- W2113854927 isRetracted "false" @default.
- W2113854927 magId "2113854927" @default.
- W2113854927 workType "article" @default.