Conference paper

PROCHÁZKA Boris, VOJNAR Tomáš and DRAHANSKÝ Martin. Hijacking the Linux Kernel. In: MEMICS 2010 - Sixth Doctoral Workshop on Mathematical and Engineering Methods in Computer Science. Brno: Masaryk University, 2010, pp. 143-150. ISBN 978-80-87342-10-7.
Publication language:english
Original title:Hijacking the Linux Kernel
Title (cs):Únos z obsluhy linuxového jádra
Pages:143-150
Proceedings:MEMICS 2010 - Sixth Doctoral Workshop on Mathematical and Engineering Methods in Computer Science
Conference:MEMICS'10 -- 6th Doctoral Workshop on Mathematical and Engineering Methods in Computer Science
Place:Brno, CZ
Year:2010
ISBN:978-80-87342-10-7
Publisher:Masaryk University
Keywords
computer security, operating system, Linux, rootkit, system call, IA-32
Annotation
In this paper, a new method of hijacking the Linux kernel is
presented. It is based on analysing the Linux system call handler, where a proper set of instructions is subsequently replaced by a jump to a di erent function. The ability to change the execution
flow in the middle of an existing function represents a unique approach in Linux kernel hacking. The attack is applicable to all kernels from the 2.6 series on the Intel architecture. Due to this, rootkits based on this kind of technique represent a high risk for Linux administrators.
BibTeX:
@INPROCEEDINGS{
   author = {Boris Proch{\'{a}}zka and Tom{\'{a}}{\v{s}} Vojnar and
	Martin Drahansk{\'{y}}},
   title = {Hijacking the Linux Kernel},
   pages = {143--150},
   booktitle = {MEMICS 2010 - Sixth Doctoral Workshop on Mathematical and
	Engineering Methods in Computer Science},
   year = {2010},
   location = {Brno, CZ},
   publisher = {Masaryk University},
   ISBN = {978-80-87342-10-7},
   language = {english},
   url = {http://www.fit.vutbr.cz/research/view_pub.php?id=9397}
}

Your IPv4 address: 54.196.47.128
Switch to IPv6 connection

DNSSEC [dnssec]