5 search results - page 1 / 1 » Copilot - a Coprocessor-based Kernel Runtime Integrity Monit... |
USS
2004
13 years 6 months ago
2004
Copilot is a coprocessor-based kernel integrity monitor for commodity systems. Copilot is designed to detect malicious modifications to a host's kernel and has correctly dete...
RAID
2010
Springer
13 years 3 months ago
2010
Springer
Dynamic kernel memory has been a popular target of recent kernel malware due to the difficulty of determining the status of volatile dynamic kernel objects. Some existing approach...
ACSAC
2009
IEEE
13 years 11 months ago
2009
IEEE
Device drivers on commodity operating systems execute with kernel privilege and have unfettered access to kernel data structures. Several recent attacks demonstrate that such poor...
DSN
2005
IEEE
13 years 10 months ago
2005
IEEE
System call monitoring is a technique for detecting and controlling compromised applications by checking at runtime that each system call conforms to a policy that specifies the ...
POPL
2000
ACM
13 years 9 months ago
2000
ACM
We propose an automatic method to enforce trace properties on programs. The programmer specifies the property separately from the program; a program transformer takes the program...