2010 Second Cybercrime and Trustworthy Computing Workshop Windows Rootkits: Attacks and Countermeasures Ballarat, Victoria Australia July 19-July 20 ISBN: 978-0-7695-4186-0
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CTC.2010.9
Windows XP is the dominant operating system in the world today and root kits have been a major concern for XP users. This paper provides an in-depth analysis of the root kits that target that operating system, while focusing on those that use various hooking techniques to hide malware on a machine. We identify some of the weaknesses in the Windows XP architecture that root kits exploit and then evaluate some of the anti-root kit security features that Microsoft has unveiled in Vista and 7. To reduce the number of root kit infections in the future, we suggest that Microsoft should take full advantage of Intel’s four distinct privilege levels.
Index Terms:
computer security, malicious software (malware), rootkits, Microsoft Windows, Intel's ring architecture
Citation:
Desmond Lobo, Paul Watters, Xin-Wen Wu, Li Sun, "Windows Rootkits: Attacks and Countermeasures," ctc, pp.69-78, 2010 Second Cybercrime and Trustworthy Computing Workshop, 2010 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb