A Kernel Rootkit Detection Approach Based on Virtualization and Machine Learning

OS kernel is the core part of the operating system, and it plays an important role for OS resource management. A popular way to compromise OS kernel is through a kernel rootkit (i.e., malicious kernel module). Once a rootkit is loaded into the kernel space, it can carry out arbitrary malicious opera...

Full description

Bibliographic Details
Main Authors: Donghai Tian, Rui Ma, Xiaoqi Jia, Changzhen Hu
Format: Article
Language:English
Published: IEEE 2019-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/8759003/