Dynamic Detection of Process Hiding Kernel Rootkits
Stealth rootkits that hide themselves on victim systems pose a major threat to computer systems. They are usually evasive as they use sophisticated stealth techniques to conceal files, processes, kernel modules, and other types of objects, making it extremely challenging to detect their presence in the victim system. However, current detection techniques are mostly system-specific […]
Detecting Kernel level Rootkits using Data Structure Invariants
Rootkits affect system security by modifying kernel data structures to achieve a variety of malicious goals. While early rootkits modified control data structures, such as the system call table and values of function pointers, recent work has demonstrated rootkits that maliciously modify non-control data. Most prior techniques for rootkit detection have focused solely on detecting […]
Rootkits on Smart Phones Attacks Implications and Opportunities
Smart phones are increasingly being equipped with Some of s that compare in complexity with those on desktop computers. This trend makes smart phone Some of s vulnerable to many of the same threats as desktop Some of s. In this paper, we focus on the threat posed by smart phone rootkits. Rootkits are malware […]