Title :
Anti-rootkit Technology of Kernel Integrity Detection and Restoration
Author :
Zhang, Yongqiang ; Bi, Hai
Author_Institution :
Sch. of Inf. & Electron. Eng., Hebei Univ. of Eng., Handan, China
Abstract :
Aiming at the principles how root kit malicious action by hooking System Service Dispatch Table and utilizing inline function patching, this paper presents a method of integrity detection and restoration based on kernel file, which is proved to ensure correct implementation of the kernel function.
Keywords :
Unix; operating system kernels; security of data; system recovery; anti-rootkit technology; inline function patching; kernel integrity detection; kernel integrity restoration; root kit malicious action; system service dispatch table; Arrays; Assembly; Bismuth; Educational institutions; Indexes; Kernel; Switches; SSDT hook; inline function patching; integrity restore; rootkit;
Conference_Titel :
Network Computing and Information Security (NCIS), 2011 International Conference on
Conference_Location :
Guilin
Print_ISBN :
978-1-61284-347-6
DOI :
10.1109/NCIS.2011.62
