Work

Hijacking the Linux Kernel

Year: 2011

Type: article

Abstract: In this paper, a new method of hijacking the Linux kernel is presented. It is based on analysing the Linux system call handler, where a proper set of instructions is subsequently replaced by a jump to a different function. The ability to change the execution flow in the middle of an existing function represents a unique approach in Linux kernel hacking. The attack is applicable to all kernels from the 2.6 series on the Intel architecture. Due to this, rootkits based on this kind of technique represent a high risk for Linux administrators.

Source: DROPS (Schloss Dagstuhl – Leibniz Center for Informatics)

DOI: 10.4230/oasics.memics.2010.85

Authors: Prochazka, Boris, Vojnar, Tomas, Drahansky, Martin

Institution: Brno University of Technology

Language: English

Topic: Security and Verification in Computing

Subfield: Hardware and Architecture

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

OpenAlex ID: W1514297880

FWCI: 0.367

Cites: 2

Cited by: 2

Related to: 10