Rootkits Subverting The Windows Kernel

By B. Eggers. 2016

59 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Backdooring Convolutional Neural Networks via Targeted Weight Perturbations (2018, background): “As malware and the security technologies that defend against it have advanced, many simple rootkit attacks have become trivial to thwart, but it would be inaccurate to say that this general category of attack is no longer a danger to computer systems [15].”
On the Detection of Kernel-Level Rootkits Using Hardware Performance Counters (2017, methodology): “They can use sys-tem call table hooking [9], function pointer hijacking [30], direct kernel object manipulation (DKOM) [9], and more.”
Security Analysis of the Estonian Internet Voting System (2014, methodology): “Although our implementation runs in userspace, a kernellevel rootkit could be used to make the attack even more difficult to detect [36].”
A Survey of Stealth Malware Attacks, Mitigation Measures, and Steps Toward Autonomous Open World Solutions (2016, background): “An additional difficulty of IAT hooking is that DLLs can be loaded at different times with respect to the executable launch [25].”
The Evolution of Process Hiding Techniques in Malware - Current Threats and Possible Countermeasures (2017, background): “Not only is the book he co-authored with Jamie Butler [22] a de-facto standard for rootkit research, he also operated rootkit.com, a popular web-site within the rootkit community for years.”