Matches in SemOpenAlex for { <https://semopenalex.org/work/W2184099194> ?p ?o ?g. }
Showing items 1 to 65 of
65
with 100 items per page.
- W2184099194 abstract "Kernel rootkits are a special category of malware that are deployed directly in the kernel and hence have unmitigated reign over the functionalities of the kernel itself. We seek to detect such rootkits that are deployed in the real world by rst observing how the majority of kernel rootkits operate. To this end, comparable to how rootkits function in the real world, we write our own kernel rootkit that manipulates the network driver, thus giving us control over all packets sent into the network. We then implement a mechanism to thwart the attacks of such rootkits by noticing that a large number of the rootkits deployed today rely heavily on the redirection of function pointers within the kernel. By overwriting the desired function pointer to its own function, a rootkit can perform a proverbial man-in-the-middle attack. Our goal is not just the detection of kernel rootkits, but also to levy as little an impact on system performance as possible. Hence our technique is to leverage existing kernel functionalities (in the case of Linux) such as kprobes to identify potential attack scenarios from within the sytem rather than from outside it (such as a VMM). We hope to introduce real-world security in devices where performance and resource constraints are tantamount to security considerations." @default.
- W2184099194 created "2016-06-24" @default.
- W2184099194 creator A5068613788 @default.
- W2184099194 date "2008-01-01" @default.
- W2184099194 modified "2023-09-24" @default.
- W2184099194 title "Detecting kernel rootkits" @default.
- W2184099194 cites W103986934 @default.
- W2184099194 cites W148956775 @default.
- W2184099194 cites W1557252148 @default.
- W2184099194 cites W1941427975 @default.
- W2184099194 cites W2076317514 @default.
- W2184099194 cites W2089560940 @default.
- W2184099194 cites W2128217000 @default.
- W2184099194 cites W2146431583 @default.
- W2184099194 cites W2152507484 @default.
- W2184099194 cites W2154933195 @default.
- W2184099194 cites W2167332015 @default.
- W2184099194 cites W2284275057 @default.
- W2184099194 cites W23711711 @default.
- W2184099194 hasPublicationYear "2008" @default.
- W2184099194 type Work @default.
- W2184099194 sameAs 2184099194 @default.
- W2184099194 citedByCount "3" @default.
- W2184099194 countsByYear W21840991942019 @default.
- W2184099194 crossrefType "journal-article" @default.
- W2184099194 hasAuthorship W2184099194A5068613788 @default.
- W2184099194 hasConcept C10144332 @default.
- W2184099194 hasConcept C111919701 @default.
- W2184099194 hasConcept C38652104 @default.
- W2184099194 hasConcept C41008148 @default.
- W2184099194 hasConcept C541664917 @default.
- W2184099194 hasConcept C553261973 @default.
- W2184099194 hasConceptScore W2184099194C10144332 @default.
- W2184099194 hasConceptScore W2184099194C111919701 @default.
- W2184099194 hasConceptScore W2184099194C38652104 @default.
- W2184099194 hasConceptScore W2184099194C41008148 @default.
- W2184099194 hasConceptScore W2184099194C541664917 @default.
- W2184099194 hasConceptScore W2184099194C553261973 @default.
- W2184099194 hasLocation W21840991941 @default.
- W2184099194 hasOpenAccess W2184099194 @default.
- W2184099194 hasPrimaryLocation W21840991941 @default.
- W2184099194 hasRelatedWork W109914373 @default.
- W2184099194 hasRelatedWork W118544037 @default.
- W2184099194 hasRelatedWork W1480962306 @default.
- W2184099194 hasRelatedWork W1585450198 @default.
- W2184099194 hasRelatedWork W2057555255 @default.
- W2184099194 hasRelatedWork W2060243424 @default.
- W2184099194 hasRelatedWork W2119691727 @default.
- W2184099194 hasRelatedWork W2156838504 @default.
- W2184099194 hasRelatedWork W2371149587 @default.
- W2184099194 hasRelatedWork W2388188874 @default.
- W2184099194 hasRelatedWork W2526474367 @default.
- W2184099194 hasRelatedWork W2600727535 @default.
- W2184099194 hasRelatedWork W2623990103 @default.
- W2184099194 hasRelatedWork W2740511694 @default.
- W2184099194 hasRelatedWork W2757109960 @default.
- W2184099194 hasRelatedWork W2951530623 @default.
- W2184099194 hasRelatedWork W3044268113 @default.
- W2184099194 hasRelatedWork W3080125354 @default.
- W2184099194 hasRelatedWork W3191081123 @default.
- W2184099194 hasRelatedWork W594120122 @default.
- W2184099194 isParatext "false" @default.
- W2184099194 isRetracted "false" @default.
- W2184099194 magId "2184099194" @default.
- W2184099194 workType "article" @default.