Detecting kernel-level rootkits through binary analysis

No abstract is available for this paper.

• Publication year

  2004

• Venue

  Asia-Pacific Computer Systems Architecture Conference

• Publication date

  2004-12-06

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/CSAC.2004.19
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• The Need for TCPA

  2002cited by this paper
• The design and implementation of tripwire: a file system integrity checker

  1994cited by this paper

• RX-INT: A Kernel Engine for Real-Time Detection and Analysis of In-Memory Threats

  2025cites this paper
• The CodeInverter Suite: Control-Flow and Data-Mapping Augmented Binary Decompilation with LLMs

  2025cites this paper
• A Crowdsensing Intrusion Detection Dataset For Decentralized Federated Learning Models

  2025cites this paper
• Detecting malware evidences through static and dynamic information using extreme machine learning for forensic analysis

  2025cites this paper
• ISLAB: Immutable Memory Management Metadata for Commodity Operating System Kernels

  2024cites this paper
• A Novel Approach to Detecting and Mitigating Keyloggers

  2024cites this paper
• Kernel-level Rootkit Detection, Prevention and Behavior Profiling: A Taxonomy and Survey

  2023cites this paper
• A Survey on Rootkit Techniques

  2021cites this paper
• SEMEO: A Semantic Equivalence Analysis Framework for Obfuscated Android Applications

  2021cites this paper
• Challenges in Firmware Re-Hosting, Emulation, and Analysis

  2021cites this paper
• AI-HydRa: Advanced hybrid approach using random forest and deep learning for malware classification

  2021cites this paper
• EnsembleHMD: Accurate Hardware Malware Detectors with Specialized Ensemble Classifiers

  2020cites this paper
• KVMInspector: KVM Based introspection approach to detect malware in cloud environment

  2020cites this paper
• Challenges in Firmware Re-Hosting and Analysis

  2020cites this paper
• A Mathematical Model of HMST Model on Malware Static Analysis

  2019cites this paper
• A Literature Review On Anti Virus And Its Analysis

  2019cites this paper
• A proactive malicious software identification approach for digital forensic examiners

  2019cites this paper
• A Kernel Rootkit Detection Approach Based on Virtualization and Machine Learning

  2019cites this paper
• vProVal: Introspection based Process Validation for Detecting Malware in KVM-based Cloud Environment

  2019cites this paper
• HProve: A Hypervisor Level Provenance System to Reconstruct Attack Story Caused by Kernel Malware

  2019cites this paper
• Efficient dynamic malware analysis using virtual time control mechanics

  2018cites this paper
• INDAGO: A New Framework For Detecting Malicious SDN Applications

  2018cites this paper
• XScope: Memory Introspection Based Malicious Application Detection

  2018cites this paper
• DamGate: Dynamic Adaptive Multi-feature Gating in Program Binaries

  2017cites this paper
• Testing intermediate representations for binary analysis

  2017cites this paper
• Hiding Kernel Level Rootkits Using Buffer Overflow and Return Oriented Programming

  2017cites this paper
• Keylogger Detection Using a Decoy Keyboard

  2017cites this paper
• Neural Nets Can Learn Function Type Signatures From Binaries

  2017cites this paper
• Shellix: An Efficient Approach for Shellcode Detection

  2016cites this paper
• NIC displays to thwart malware attacks mounted from within the OS

  2016cites this paper
• A Complete Dynamic Malware Analysis

  2016cites this paper
• A Complete Dynamic Malware Analysis

  2016cites this paper
• Providing a New Approach to Discovering Malware Behavioral Patterns Based on the Dependency Graph Between System Calls

  2016cites this paper
• Fighting Evasive Malware with DVasion

  2016cites this paper
• Neural Network Analysis of System Call Timing for Rootkit Detection

  2016cites this paper
• Bot Detection and Botnet Tracking in Honeynet Context

  2016cites this paper
• Detecting rootkits with the RAI runtime application inventory

  2016cites this paper
• Hypervisor and virtual machine dependent Intrusion Detection and Prevention System for virtualized cloud environment

  2015cites this paper
• Privacy Petri Net and Privacy Leak Software

  2015cites this paper
• Data-only Malware

  2015cites this paper
• SECURITY ANALYSIS OF MOBILE AUTHENTICATION USING QR-CODES

  2015cites this paper
• Hypervisor and virtual machine dependent Intrusion Detection and Prevention System for virtualized cloud environment

  2015cites this paper
• Detecting the Rootkit through Dynamic Analysis

  2015cites this paper
• Ensemble Learning for Low-Level Hardware-Supported Malware Detection

  2015cites this paper
• On the Trustworthiness of Memory Analysis—An Empirical Study from the Perspective of Binary Execution

  2015cites this paper
• Phase-Space Detection of Cyber Events

  2015cites this paper
• Fast Discovery of VM-Sensitive Divergence Points with Basic Block Comparison

  2014cites this paper
• Multiplex Indelible Rootkit Checker and Identifier

  2014cites this paper
• Data-Centric OS Kernel Malware Characterization

  2014cites this paper
• Securing the virtual infrastructure in the laaS cloud computing model

  2014cites this paper
• Concurrent Memory Inspection for Intrusion Detection

  2014cites this paper
• The BIOS and Rootkits

  2014cites this paper
• Enhancing Malware Detection Accuracy through Graph Based Model

  2014cites this paper
• A Framework for Analysis and Comparison of Dynamic Malware Analysis Tools

  2014influential citation
• Utilizing Structural & In-execution PCB Information Analysis for Malware Detection on Linux based Smartphones & Computers

  2014cites this paper
• Back to Static Analysis for Kernel-Level Rootkit Detection

  2014influential citation
• A Methodology for Hook-Based Kernel Level Rootkits

  2014cites this paper
• Malware Behavior Modeling with Colored Petri Nets

  2014cites this paper
• RootkitDet: Practical End-to-End Defense against Kernel Rootkits in a Cloud Environment

  2014influential citation
• Adapting Linguistic Deception Cues for Malware Detection

  2014cites this paper
• EXTERIOR: using a dual-VM based external shell for guest-OS introspection, configuration, and recovery

  2013cites this paper
• In-execution dynamic malware analysis and detection by mining information in process control blocks of Linux OS

  2013cites this paper
• Wer wird die Wächter selbst bewachen

  2013cites this paper
• Behaviour-based virus analysis and detection

  2013cites this paper
• Rootkit detection on virtual machines through deep information extraction at hypervisor-level

  2013cites this paper
• When Firmware Modifications Attack: A Case Study of Embedded Exploitation

  2013cites this paper
• Rootkit Detection Using A Cross-View Clean Boot Method

  2013influential citation
• A LITERATURE REVIEW ON MALWARE AND ITS ANALYSIS

  2013cites this paper
• A Novel Framework for Industrial Control System Malicious Code Analysis

  2013cites this paper
• You Can Type, but You Can't Hide: A Stealthy GPU-based Keylogger

  2013cites this paper
• Identifying the unknown in user space memory

  2013cites this paper
• Design of Security Schemes for Wireless Sensor Networks Based on Attack Behavior: Proactive Approach

  2013cites this paper
• Types of Malware and its Analysis

  2013cites this paper
• Local-Memory-Based Integrity Checking for Embedded Systems

  2013cites this paper
• Classification of malware persistence mechanisms using low-artifact disk instrumentation

  2013cites this paper
• Comprehensive Quantitative Analysis on Privacy Leak Behavior

  2013cites this paper
• Using Infection Markers as a Vaccine against Malware Attacks

  2012cites this paper
• Strengthening digital rights management using a new driver-hidden rootkit

  2012cites this paper
• Semantic Malware Detection by Deploying Graph Mining

  2012cites this paper
• Honeysand: An Open Source Tools based Sandbox Environment for Bot Analysis and Botnet Tracking

  2012cites this paper
• Malware Detection, Supportive Software Agents and Its Classification Schemes

  2012cites this paper
• Identifying Rootkit Infections Using a New Windows Hidden-driver-based Rootkit

  2012cites this paper
• Reducing Unauthorized Modification of Digital Objects

  2012cites this paper
• Host based attack detection using system calls

  2012cites this paper
• Quantitative analysis for privacy leak software with privacy Petri net

  2012cites this paper
• Down to the bare metal: using processor features for binary analysis

  2012cites this paper
• Security risks and their management in cloud computing

  2012cites this paper
• A malicious behavior analysis based Cyber-I birth

  2012cites this paper
• Information-based dependency matching for behavioral malware analysis

  2012cites this paper
• Static Detection of Unsafe Component Loadings

  2012cites this paper
• Static Analysis on Binary Code

  2012cites this paper
• Symbiotes and defensive Mutualism: Moving Target Defense

  2011cites this paper
• Deriving common malware behavior through graph clustering

  2011cites this paper
• Rootkit Detection Mechanism: A Survey

  2011cites this paper
• Petri Nets Model of Implicit Data and Control in Program Code

  2011cites this paper
• Detecting Kernel-Level Rootkits Using Data Structure Invariants

  2011cites this paper
• Automated Analysis of End User License Agreements

  2011cites this paper
• Countering unauthorized code execution on commodity kernels: A survey of common interfaces allowing kernel code modification

  2011cites this paper
• A Dissertation submitted in partial satisfaction of the requirements for the degree Doctor of Philosophy in Computer Science

  2011cites this paper
• Various Schemes to Speed up the PC during Virus Scan

  2011cites this paper